US6898577B1 — Methods and systems for single sign-on authentica…

Claim 1

Independent Claim 137 words

A computer-implemented draft authentication method for use in e-commerce, comprising the steps of: storing, for each of a plurality of draft drawers, at least one piece of unique identifying information, said at least one piece of unique identifying information being linked at least to said respective drawer's financial information; authenticating a drawer of a draft by immediately encrypting at least a portion of an identification data provided by the drawer and successfully matching the immediately encrypted identification data with said at least one stored piece of identifying information; retrieving at least the drawer's financial information and establishing constraints based on the retrieved financial information; honoring a draft presented by a payee with whom the drawee has a partner relationship only when the drawer of the presented draft is successfully authenticated by drawee and the constraints are satisfied.

Claim 2

Dependent Claim 137 words

A computer-implemented draft authentication method for use in e-commerce, comprising the steps of: storing, for each of a plurality of draft drawers, at least one piece of unique identifying information, said at least one piece of unique identifying information being linked at least to said respective drawer's financial information; authenticating a drawer of a draft by immediately encrypting at least a portion of an identification data provided by the drawer and successfully matching the immediately encrypted identification data with said at least one stored piece of identifying information; retrieving at least the drawer's financial information and establishing constraints based on the retrieved financial information; honoring a draft presented by a payee with whom the drawee has a partner relationship only when the drawer of the presented draft is successfully authenticated by drawee and the constraints are satisfied.

Claim 3

Dependent Claim 29 words

The method of claim 1 , wherein said at least one piece of identifying information includes at least one of an ID and encrypted password pair and biometric data.

Claim 4

Dependent Claim 40 words

The method of claim 1 , wherein said at least one piece of unique identifying information for each of the plurality of draft drawers is stored in a data structure managed by a Directory software controlled by the draft drawee.

Claim 5

Dependent Claim 36 words

The method of claim 3 , wherein at least a portion of the data structure is replicated, via Light Weight Directory Access Protocol (LDAP) or similar standard format, to each of the plurality of draft payees.

Claim 6

Dependent Claim 48 words

The method of claim 1 , wherein the establishing step further includes the steps of providing a master list to each of the plurality of draft payees, the master list including said at least one piece of unique identifying information for each of the plurality of draft drawers.

Claim 7

Dependent Claim 39 words

The method of claim 1 , further including the step of making a payee list available to the plurality of draft drawers, the payee list identifying the plurality of draft payees with whom the drawee has a partner relationship.

Claim 8

Dependent Claim 52 words

The method of claim 6 , wherein the payee list is posted on a secure World Wide Web (Web) site administered by the draft drawee, each member of the list linking to a Web site administered by one of the plurality of draft payees with whom the drawee has a partner relationship.

Claim 9

Dependent Claim 41 words

The method of claim 1 , wherein the honoring step includes paying the payee and at least one of debiting an account held by the drawee and charging a credit or charge card designated by the drawer of the presented draft.

Claim 10

Dependent Claim 23 words

The method of claim 1 , wherein the authenticating step authenticates the drawer of the draft only for a session of limited duration.

Claim 11

Dependent Claim 46 words

The method of claim 1 , wherein the storing step is carried out by Directory software adapted to hold at least one of said unique identifying information; personal information; privileges and other characteristic information for each of said plurality of draft drawers in a secure fashion.

Claim 12

Dependent Claim 24 words

The method of claim 1 , wherein the identification data provided by the drawer is transmitted to the drawee over a secure communication channel.

Claim 13

Dependent Claim 69 words

The method of claim 11 , wherein the identification data provided by the drawer is provided in encrypted form over the secure communication channel and wherein the drawee, upon receiving the encrypted identification data, decrypts and immediately re-encrypts the identification data using an encryption scheme different from that utilized over the communication channel and matches the re-encrypted identification data with the previously stored identification information associated with the drawer.

Claim 14

Dependent Claim 21 words

The method of claim 1 , wherein the draft drawer, the draft drawee and the draft payee communicate over a network.

Claim 15

Dependent Claim 26 words

The method of claim 13 , wherein the network includes at least one of leased lines, a private network, a virtual private network and the Internet.

Claim 16

Dependent Claim 130 words

A computer-implemented method for a financial institution to carry out secure e-commerce over the World Wide Web (Web), comprising the steps of: assigning a unique ID and password to each of a plurality of Web customers; encrypting and storing at least the password of each of the plurality of Web customers; authenticating Web customers by requesting, encrypting and matching passwords provided by the Web customers with the stored and encrypted passwords corresponding to the Web customers' ID; providing authenticated Web customers with access to a plurality of Web vendors with whom the financial institution has a partner relationship via a secure Web site; and honoring drafts presented by the Web vendors accessed through the secure Web site for purchases made by the authenticated Web customers provided predetermined constraints are met.

Claim 17

Dependent Claim 130 words

A computer-implemented method for a financial institution to carry out secure e-commerce over the World Wide Web (Web), comprising the steps of: assigning a unique ID and password to each of a plurality of Web customers; encrypting and storing at least the password of each of the plurality of Web customers; authenticating Web customers by requesting, encrypting and matching passwords provided by the Web customers with the stored and encrypted passwords corresponding to the Web customers' ID; providing authenticated Web customers with access to a plurality of Web vendors with whom the financial institution has a partner relationship via a secure Web site; and honoring drafts presented by the Web vendors accessed through the secure Web site for purchases made by the authenticated Web customers provided predetermined constraints are met.

Claim 18

Dependent Claim 40 words

The method of claim 15 , wherein at least the unique ID and the encrypted password for each of the plurality of Web customers are stored in a data structure managed by a Directory software controlled by the financial institution.

Claim 19

Dependent Claim 37 words

The method of claim 16 , wherein at least a portion of the data structure is replicated, via a Light Weight Directory Access Protocol (LDAP) or similar standard format, to each of the plurality of Web vendors.

Claim 20

Dependent Claim 50 words

The method of claim 15 , wherein the establishing step further includes the steps of providing a periodically updated master list to each of the plurality of Web vendors, the master list including a plurality of IDs, a plurality of corresponding encrypted passwords and an identification of the financial institution.

Claim 21

Dependent Claim 32 words

The method of claim 18 , wherein each of the plurality of Web vendors maintains the master list using Directory software adapted to receive and process updates thereof from the financial institution.

Claim 22

Dependent Claim 50 words

The method of claim 15 , wherein the honoring step includes paying the Web vendor and at least one of debiting an account held by the Web customer and charging a credit or charge card designated by the Web customer, or other bank-sponsored means of making loans and/or extending credit.

Claim 23

Dependent Claim 21 words

The method of claim 15 , wherein the authenticating step authenticates the Web customer only for a session of limited duration.

Claim 24

Dependent Claim 43 words

The method of claim 15 , wherein the encrypting and storing step is carried out by Directory software adapted to hold at least one of personal information, passwords, privileges and characteristics of each of the plurality of Web customers in a secure fashion.

Claim 25

Dependent Claim 39 words

The method of claim 15 , wherein the authenticating step utilizes Directory software to access the stored and encrypted password associated with the Web customer's ID and to match the stored and encrypted password with the immediately encrypted password.

Claim 26

Dependent Claim 25 words

The method of claim 15 , wherein the password provided by the Web customer is transmitted to the Web vendor over a secure communication channel.

Claim 27

Dependent Claim 72 words

The method of claim 24 , wherein the password provided by the Web customer is provided in encrypted form over the secure communication channel and wherein the financial institution, upon receiving the encrypted password, decrypts the password before immediately re-encrypting the password using an encryption scheme different from that utilized over the communication channel and matching the re-encrypted password with the previously stored and encrypted password associated with the Web customer's ID.

Claim 28

Dependent Claim 151 words

A machine-readable medium having data stored thereon representing sequences of instructions which, when executed by one or more computers coupled to a network, causes said computers to perform the steps of: storing, for each of a plurality of draft drawers, at least one piece of unique identifying information, said at least one piece of unique identifying information being linked at least to drawer's financial information; authenticating a drawer of a draft by immediately encrypting at least a portion of an identification data provided by the drawer and successfully matching the immediately encrypted identification data with said at least one stored identifying information; retrieving at least the drawer's financial information and establishing constraints based on the retrieved financial information; honoring a draft presented by a payee with whom the drawee has a partner relationship only when the drawer of the presented draft is successfully authenticated by drawee and the constraints are satisfied.

Claim 29

Dependent Claim 151 words

A machine-readable medium having data stored thereon representing sequences of instructions which, when executed by one or more computers coupled to a network, causes said computers to perform the steps of: storing, for each of a plurality of draft drawers, at least one piece of unique identifying information, said at least one piece of unique identifying information being linked at least to drawer's financial information; authenticating a drawer of a draft by immediately encrypting at least a portion of an identification data provided by the drawer and successfully matching the immediately encrypted identification data with said at least one stored identifying information; retrieving at least the drawer's financial information and establishing constraints based on the retrieved financial information; honoring a draft presented by a payee with whom the drawee has a partner relationship only when the drawer of the presented draft is successfully authenticated by drawee and the constraints are satisfied.

Claim 30

Dependent Claim 30 words

The machine-readable medium of claim 26 , wherein said at least one piece of identifying information includes at least one of an ID and encrypted password pair and biometric data.

Claim 31

Dependent Claim 41 words

The machine-readable medium of claim 26 , wherein said at least one piece of unique identifying information for each of the plurality of draft drawers is stored in a data structure managed by a Directory software controlled by the draft drawee.

Claim 32

Dependent Claim 37 words

The machine-readable medium of claim 28 , wherein at least a portion of the data structure is replicated, via Light Weight Directory Access Protocol (LDAP) or similar standard format, to each of the plurality of draft payees.

Claim 33

Dependent Claim 49 words

The machine-readable medium of claim 26 , wherein the establishing step further includes the steps of providing a master list to each of the plurality of draft payees, the master list including said at least one piece of unique identifying information for each of the plurality of draft drawers.

Claim 34

Dependent Claim 40 words

The machine-readable medium of claim 26 , further including the step of making a payee list available to the plurality of draft drawers, the payee list identifying the plurality of draft payees with whom the drawee has a partner relationship.

Claim 35

Dependent Claim 53 words

The machine-readable medium of claim 31 , wherein the payee list is posted on a secure World Wide Web (Web) site administered by the draft drawee, each member of the list linking to a Web site administered by one of the plurality of draft payees with whom the drawee has a partner relationship.

Claim 36

Dependent Claim 24 words

The machine-readable medium of claim 26 , wherein the authenticating step authenticates the drawer of the draft only for a session of limited duration.

Claim 37

Dependent Claim 47 words

The machine-readable medium of claim 26 , wherein the storing step is carried out by Directory software adapted to hold at least one of said unique identifying information; personal information; privileges and other characteristic information for each of said plurality of draft drawers in a secure fashion.

Claim 38

Dependent Claim 25 words

The machine-readable medium of claim 26 , wherein the identification data provided by the drawer is transmitted to the drawee over a secure communication channel.

Claim 39

Dependent Claim 70 words

The machine-readable medium of claim 35 , wherein the identification data provided by the drawer is provided in encrypted form over the secure communication channel and wherein the drawee, upon receiving the encrypted identification data, decrypts and immediately re-encrypts the identification data using an encryption scheme different from that utilized over the communication channel and matches the re-encrypted identification data with the previously stored identification information associated with the drawer.

Claim 40

Dependent Claim 27 words

The machine-readable medium of claim 26 , wherein the network includes at least one of leased lines, a private network, a virtual private network and the Internet.

Claim 41

Dependent Claim 221 words

A computer system for carrying out e-commerce, comprising: at least one first computer managed by a financial institution, said at least one first computer maintaining a first Directory software storing a plurality of IDs and corresponding encrypted passwords of a plurality of Web customers that maintain a relationship with said financial institution; at least one second computer managed by a Web vendor, said at least one second computer maintaining a second Directory software storing a master list controlled and periodically updated by the first Directory software, said master list including said plurality of IDs, said corresponding encrypted passwords and an identification of said financial institution; at least one Web-enabled device managed by a Web customer; said at least one Web-enabled device being adapted to accept input from the Web customer and to communicate with said at least one second computer to send a Web customer input ID and a Web customer input encrypted password to said second Directory software; wherein said second Directory software compares said Web customer input ID and password to entries in said master list, said at least one Web customer being authenticated by said second Directory software only upon matching both said Web customer input ID and encrypted password to an entry in the master list, said financial institution only honoring drafts executed by authenticated Web customers.

Claim 42

Dependent Claim 221 words

A computer system for carrying out e-commerce, comprising: at least one first computer managed by a financial institution, said at least one first computer maintaining a first Directory software storing a plurality of IDs and corresponding encrypted passwords of a plurality of Web customers that maintain a relationship with said financial institution; at least one second computer managed by a Web vendor, said at least one second computer maintaining a second Directory software storing a master list controlled and periodically updated by the first Directory software, said master list including said plurality of IDs, said corresponding encrypted passwords and an identification of said financial institution; at least one Web-enabled device managed by a Web customer; said at least one Web-enabled device being adapted to accept input from the Web customer and to communicate with said at least one second computer to send a Web customer input ID and a Web customer input encrypted password to said second Directory software; wherein said second Directory software compares said Web customer input ID and password to entries in said master list, said at least one Web customer being authenticated by said second Directory software only upon matching both said Web customer input ID and encrypted password to an entry in the master list, said financial institution only honoring drafts executed by authenticated Web customers.

Claim 43

Dependent Claim 34 words

The system of claim 38 , wherein said at least one first computer, said at least one second computer and said at least one Web-enabled device are coupled to one another by a network.

Claim 44

Dependent Claim 26 words

The system of claim 39 , wherein the network includes at least one of leased lines, a private network, a virtual private network and the Internet.

Annuity Stage	Window Opens	Payment Deadline	Surcharge Period Until	Estimated Fee	Status
3.5 Years (Year 4)	2008-05-23	2008-11-22	2009-05-24	$2000.00	Window Closed / Lapsed
7.5 Years (Year 8)	2012-05-23	2012-11-22	2013-05-24	$3760.00	Window Closed / Lapsed
11.5 Years (Year 12)	2016-05-23	2016-11-22	2017-05-24	$7700.00	Window Closed / Lapsed

Methods and systems for single sign-on authentication in a multi-vendor e-commerce environment and directory-authenticated bank drafts

Abstract

Inventors

Bibliographic Details

Claims Analysis

References Cited (Backward Citations)

USPTO Annuity & Maintenance Windows

Assigned Categories & Tags

Assign Category Tag