Safe logon

Patent metadata

Field	Value
Publication number	US-12568071-B2
Application number	US-202418431039-A
Country	US
Kind code	B2
Filing date	Feb 2, 2024
Priority date	Jul 23, 2019
Publication date	Mar 3, 2026
Grant date	Mar 3, 2026

Abstract

Methods, computer-readable media, software, and apparatuses are provided to assist a user and vendor in completing an online trusted transaction. Trusted vendor websites are verified and user identities are confirmed through a cyber-security safe logon credentialing system. The vendor can be confident that the user identity has been verified to be who they say they are and the user can be confident that they are using a trusted verified vendor website.

First claim

What is claimed is:

1 . An apparatus comprising:
one or more processors; a memory unit storing computer-executable instructions, which, when executed by the one or more processors, cause the apparatus to:
receive, from a user computing device, an authentication request to facilitate performance of a transaction between the user computing device and a computer-implemented service;
after receiving the authentication request, compare one or more privacy preferences associated with a user of the user computing device to one or more privacy policies of the computer-implemented service; and
after determining that a threshold number of the one or more privacy policies are incompatible with the one or more privacy preferences of the user, determine one or more alternative computer-implemented services for facilitating the transaction; and
communicate, to the user computing device, an indication of the one or more alternative computer-implemented services.

2 . The apparatus of claim 1 , wherein the computer-executable instructions, when executed by the one or more processors, further cause the apparatus to:
after communicating the indication of the one or more alternative computer-implemented services for completing the transaction, receive a second authentication request to perform the transaction between the user and an alternative computer-implemented service.

3 . The apparatus of claim 2 , wherein the computer-executable instructions, when executed by the one or more processors, further cause the apparatus to:
determine respective one or more authentication factors associated with respective one or more computer-implemented services, where the respective one or more computer-implemented services require the respective one or more authentication factors to be specified to facilitate communications with the respective one or more computer-implemented services; and select one or more of the respective one or more computer-implemented services as the one or more alternative computer-implemented services when a user profile associated with the user specifies the respective one or more authentication factors required by the respective one or more computer-implemented services.

4 . The apparatus of claim 1 , wherein the computer-executable instructions that cause the apparatus to determine the one or more alternative computer-implemented services for facilitating the transaction are further executable to cause the apparatus to:
retrieve, from storage, indications of the one or more alternative computer-implemented services, wherein the storage includes an association between the one or more privacy preferences of the user and the one or more alternative computer-implemented services.

5 . The apparatus of claim 4 , wherein the indication of the one or more alternative computer-implemented services comprises, for each of the one or more alternative computer-implemented services, an indication of a relative compatibility of a corresponding privacy policy with the one or more privacy preferences.

6 . The apparatus of claim 5 , wherein the indication of the relative compatibility comprises an indication associated with each of a plurality of privacy categories.

7 . The apparatus of claim 6 , wherein the plurality of privacy categories comprises a data collected category, a data sharing category, an opt-in/out category, and a data deletion category.

8 . A non-transitory computer-readable medium having stored thereon computer-executable instructions, which, when executed by one or more processors of an apparatus, cause the apparatus to:
receive, from a user computing device, an authentication request to facilitate performance of a transaction between the user computing device and a computer-implemented service; after receiving the authentication request, compare one or more privacy preferences associated with a user of the user computing device to one or more privacy policies of the computer-implemented service; and after determining that a threshold number of the one or more privacy policies are incompatible with the one or more privacy preferences of the user, determine one or more alternative computer-implemented services for facilitating the transaction; and communicate, to the user computing device, an indication of the one or more alternative computer-implemented services.

9 . The non-transitory computer-readable medium of claim 8 , wherein the computer-executable instructions are further executable to cause the apparatus to:
after communicating the indication of the one or more alternative computer-implemented services for completing the transaction, receive a second authentication request to perform the transaction between the user and an alternative computer-implemented service.

10 . The non-transitory computer-readable medium of claim 9 , wherein the computer-executable instructions are further executable to cause the apparatus to:
determine respective one or more authentication factors associated with respective one or more computer-implemented services, where the respective one or more computer-implemented services require the respective one or more authentication factors to be specified to facilitate communications with the respective one or more computer-implemented services; and select one or more of the respective one or more computer-implemented services as the one or more alternative computer-implemented services when a user profile associated with the user specifies the respective one or more authentication factors required by the respective one or more computer-implemented services.

11 . The non-transitory computer-readable medium of claim 8 , wherein computer-executable instructions that cause the apparatus to determine the one or more alternative computer-implemented services for facilitating the transaction are further executable to cause the apparatus to:
retrieve, from storage, indications of the one or more alternative computer-implemented services, wherein the storage includes an association between the one or more privacy preferences of the user and the one or more alternative computer-implemented services.

12 . The non-transitory computer-readable medium of claim 11 , wherein the indication of the one or more alternative computer-implemented services comprises, for each of the one or more alternative computer-implemented services, an indication of a relative compatibility of a corresponding privacy policy with the one or more privacy preferences.

13 . The non-transitory computer-readable medium of claim 12 , wherein the indication of the relative compatibility comprises an indication associated with each of a plurality of privacy categories.

14 . The non-transitory computer-readable medium of claim 13 , wherein the plurality of privacy categories comprises a data collected category, a data sharing category, an opt-in/out category, and a data deletion category.

15 . A computer-implemented method comprising:
receiving, from a user computing device, an authentication request to facilitate performance of a transaction between the user computing device and a computer-implemented service; after receiving the authentication request, comparing one or more privacy preferences associated with a user of the user computing device to one or more privacy policies of the computer-implemented service; and after determining that a threshold number of the one or more privacy policies are incompatible with the one or more privacy preferences of the user, determining one or more alternative computer-implemented services for facilitating the transaction; and communicating, to th

Assignees

• Allstate Insurance Co

Inventors

• Parkinson John
• Harris David
• Hansen Mark D
• De Guia Nicolette

Classifications

• H04L63/0807

  using tickets, e.g. Kerberos (cryptographic mechanisms or cryptographic arrangements for entity authentication using tickets or tokens H04L9/3213) · CPC title

• H04L63/0853

  using an additional device, e.g. smartcard, SIM or a different communication terminal (cryptographic mechanisms or cryptographic arrangements for entity authentication involving additional secure or trusted devices H04L9/3234) · CPC title

• H04L2209/56

  Financial cryptography, e.g. electronic payment or e-cash · CPC title

• H04L9/40

  Network security protocols · CPC title

• H04L2209/42

  Anonymization, e.g. involving pseudonyms · CPC title