Website verification service

Patent metadata

Field	Value
Publication number	US-12003497-B2
Application number	US-202218091272-A
Country	US
Kind code	B2
Filing date	Dec 29, 2022
Priority date	Dec 11, 2019
Publication date	Jun 4, 2024
Grant date	Jun 4, 2024

Abstract

The concepts and technologies disclosed herein are directed to a website verification service. A system can receive, from a web server that hosts a website, a query for a set of authentication credentials (“credentials”) to be used to verify that the website is trustworthy. The system can generate and provide the credentials to the web server. The web server can, in turn, provide the credentials to a web browser device for presentation to a user via a web browser application executing on the web browser device. The system also can provide the credentials to a verifier device. The verifier device can present the credentials to the user via a verifier application executing on the verifier device. The user can compare the credentials presented via the web browser application to the credentials presented via the verifier application executing on the verifier device to determine whether the website can be trusted.

First claim

The invention claimed is:

1. A method comprising:
receiving, by a web site verification system comprising a processor, from a web server that hosts a website, a request to register the website;
registering, by the web site verification system, the web site for a web site verification service;
receiving, by the web site verification system, from a verifier device associated with a user, a query for a set of website authentication credentials to be used to verify that the website is trustworthy, wherein the verifier device provides the query for the set of web site authentication credentials to the web site verification system in response to scanning, by the verifier device, a prompt presented to the user via a web browser application executing on a web browser device;
generating, by the website verification system, the set of web site authentication credentials, wherein the set of web site authentication credentials comprises a code and an image, wherein the set of web site authentication credentials are generated by a web site verification service credential generator using a random generator;
providing, by the web site verification system, the set of web site authentication credentials to the verifier device associated with the user;
receiving, by the web site verification system, from the web browser device, the code of the set of web site authentication credentials; and
in response to receiving the code of the set of web site authentication credentials from the web browser device, providing, by the web site verification system, the image of the set of web site authentication credentials to the web browser device, wherein the image of the set of website authentication credentials presented to the user via the web browser device and the image of the set of web site authentication credentials presented to the user by the verifier device are used to verify that the web site is trustworthy.

2. The method of claim 1 , further comprising in response to receiving the query for the set of web site authentication credentials from the verifier device, determining if the web site is registered for the website verification service.

3. The method of claim 2 , wherein determining if the web site is registered for the website verification service comprises querying a web site verification service web site registrar based on a web link associated with the website.

4. The method of claim 1 , wherein the prompt presented to the user via the web browser application executing on the web browser device notifies the user that the website is protected by the web site verification service.

5. The method of claim 1 , wherein the web browser device receives the code of the set of web site authentication credentials via input from the user based on the set of website authentication credentials presented to the user by the verifier device.

6. The method of claim 1 , wherein if the image of the set of website authentication credentials presented to the user via the web browser device matches the image of the set of website authentication credentials presented to the user by the verifier device, an authenticity of the website is verified.

7. A non-transitory computer-readable storage medium having computer-executable instructions stored thereon that, when executed by a processor of a website verification system, cause the web site verification system to perform operations comprising:
receiving, from a web server that hosts a website, a request to register the web site;
registering the website for a web site verification service;
receiving, from a verifier device associated with a user, a query for a set of website authentication credentials to be used to verify that the website is trustworthy, wherein the verifier device provides the query for the set of website authentication credentials to the website verification system in response to scanning, by the verifier device, a prompt presented to the user via a web browser application executing on a web browser device;
generating the set of website authentication credentials, wherein the set of website authentication credentials comprises a code and an image, wherein the set of website authentication credentials are generated by a website verification service credential generator using a random generator;
providing the set of web site authentication credentials to the verifier device associated with the user;
receiving, from the web browser device, the code of the set of website authentication credentials; and
in response to receiving the code of the set of web site authentication credentials from the web browser device, providing the image of the set of website authentication credentials to the web browser device, wherein the image of the set of website authentication credentials presented to the user via the web browser device and the image of the set of web site authentication credentials presented to the user by the verifier device are used to verify that the website is trustworthy.

8. The non-transitory computer-readable storage medium of claim 7 , wherein the operations further comprise in response to receiving the query for the set of web site authentication credentials from the verifier device, determining if the website is registered for the web site verification service.

9. The non-transitory computer-readable storage medium of claim 8 , wherein determining if the website is registered for the website verification service comprises querying a website verification service website registrar based on a web link associated with the website.

10. The non-transitory computer-readable storage medium of claim 7 , wherein the prompt presented to the user via the web browser application executing on the web browser device notifies the user that the web site is protected by the web site verification service.

11. The non-transitory computer-readable storage medium of claim 7 , wherein the web browser device receives the code of the set of web site authentication credentials via input from the user based on the set of web site authentication credentials presented to the user by the verifier device.

12. The non-transitory computer-readable storage medium of claim 7 , wherein if the image of the set of web site authentication credentials presented to the user via the web browser device matches the image of the set of website authentication credentials presented to the user by the verifier device, an authenticity of the website is verified.

13. A web site verification system comprising:
a processor; and
a memory having computer-executable instructions stored thereon that, when executed by the processor, cause the processor to perform operations comprising:
receiving, from a web server that hosts a website, a request to register the web site,
registering the website for a web site verification service,
receiving, from a verifier device associated with a user, a query for a set of website authentication credentials to be used to verify that the website is trustworthy, wherein the verifier device provides the query for the set of website authentication credentials to the website verification system in response to scanning, by the verifier device, a prompt presented to the user via a web browser application executing on a web browser device,
generating the set of web site authentication credentials, wherein the set of website authentication credentials comprises a code and an image, wherein the set of website authentication credentials are generated by a website verification service credential generator using a random generator,
providing the set of web site authentication credentials to the verifier device associated with the user,
recei

Assignees

• At & T Ip I Lp

Inventors

• Albisu Luis
• Ortiz Jr Manuel
• Solero Daniel
• Maglione Michael
• Alvarez Katie

Classifications

• H04L63/0823 Primary

  using certificates (cryptographic mechanisms or cryptographic arrangements for entity authentication involving certificates H04L9/3263) · CPC title

• G06F16/9536

  Search customisation based on social or collaborative filtering · CPC title

• G06F16/9577

  Optimising the visualization of content, e.g. distillation of HTML documents · CPC title

• G06K7/1417

  2D bar codes · CPC title

• H04L63/102

  Entity profiles · CPC title