Efficient authentication of a user for conduct of a transaction initiated via mobile telephone
A method and system for authenticating a user for conduct of a transaction initiated by the user via a data-enabled telephone is presented. Efficient use is made of keystrokes on the data-enabled telephone. The data-enabled telephone is capable of initiating telephone calls over a telephone network and of engaging in two-way data communication with a data server in a network and the server enables conduct of the transaction. Caller identification information is received at the server. The information is associated with a telephone call request initiated by the user via the data-enabled telephone to a service number. The caller identification provides basis for authentication of the user and the caller identification information received at the service number is used to address a message to the user. Included in such a message is a logon key for use by the user in accomplishing the transaction. Thus the user can use the logon key to enter into data communication with the server for conduct of the transaction.
1. A method of authenticating a user for conduct of a transaction initiated by the user via a data-enabled telephone in such a manner as to make efficient use of keystrokes on the data-enabled telephone, such data-enabled telephone capable of initiating telephone calls over a telephone network and of engaging in two-way data communication with a data server in a network, such server enabling conduct of the transaction, the method comprising:
receiving caller identification information associated with a telephone call request initiated by the user via the data-enabled telephone to a service number, such caller identification providing a basis for authentication of the user; and
using the caller identification information received at the service number to address a message to the user;
including in such message a logon key for use by the user in accomplishing the transaction; and
sending such message;
so that on receipt of the message, the user may use the logon key to enter into data communication with the server for conduct of the transaction,
wherein the logon key serves to identify the user, and the method further comprises obtaining an additional verification of the user as a condition to conduct the transaction.
2. A method according to claim 1 , wherein the logon key has a lifetime, for purposes of accomplishing the transaction, of less than a specified amount of time.
3. A method according to claim 2 wherein the message is in a format adapted to the capabilities of the user's telephone.
4. A method according to claim 1 , wherein the logon key for use by the user can be used a limited number of times for purposes of accomplishing the transaction.
5. A method according to claim 1 , wherein the caller identifying information includes a telephone number of the mobile telephone.
6. A method according to claim 1 , wherein receiving and using the caller identification information is accomplished without answering the call request, so that a connection does not result from the call request.
7. A method according to claim 1 , wherein receiving and using the caller identification information includes answering the call request, so that a connection is established.
8. A method according to claim 1 , wherein sending the message includes sending the message to the user's mobile telephone and, on receipt of the message, the user may use the logon key to cause the mobile telephone to enter into data communication with the server.
9. A system for authenticating a user for conduct of a transaction initiated by the user via a data-enabled telephone in such a manner as to make efficient use of keystrokes on the data-enabled telephone, such data-enabled telephone capable of initiating telephone calls over a telephone network and of engaging in two-way data communication with a data server in a network, such server enabling conduct of the transaction, the system comprising:
a telephone server, associated with a service telephone number, for receiving caller identification information associated with a telephone call request initiated by the user via the data-enabled telephone to the service telephone number, such caller identification providing a basis for authentication of the user; such telephone server using the caller identification information received at the service number to address a message to the user, wherein such message includes a logon key for use by the user in accomplishing the transaction, and to send such message;
a data server for data communication with the data-enabled telephone of the user, accessible to the user upon use of the logon key by the user;
so that on receipt of the message, the user may use the logon key to enter into data communication with the data server for conduct of the transaction,
wherein the logon key serves to identify the user, and the telephone server obtains an additional verification of the user as a condition to conduct the transaction.
10. A system according to claim 9 , wherein the logon key has a lifetime, for purposes of accomplishing the transaction, of less than a specified amount of time.
11. A system according to claim 9 , wherein the logon key for use by the user can be used a limited number of times for purposes of accomplishing the transaction.
12. A system according to claim 9 , wherein the caller identifying information includes a telephone number of the mobile telephone.
13. A system according to claim 9 , wherein the telephone server obtains the caller identification information without answering the call request, so that a connection does not result from the call request.
14. A system according to claim 9 , wherein the telephone server obtains the caller identification information in the course of answering the call request, so that a connection is established following the call request.
15. A system according to claim 9 , wherein the capabilities of the user's telephone is information which is made available in the system, in order that the message format can be adapted to said capabilities.
16. A method comprising:
receiving caller identification information associated with a telephone call request initiated by a user to a service number associated with a server, wherein the telephone call is via a data-enabled telephone, and wherein the caller identification information provides a basis for authentication of the user;
generating a message to the server and sending the message from the server directly to the data-enabled telephone, wherein the caller identification information received at the service number is used to address the message to the user, and wherein the message includes a logon key for use by the user in accomplishing a transaction; and
allowing the user to use the logon key, upon receipt of the message, to enter into data communication with the server to conduct the transaction,
wherein the logon key serves to identify the user, and the method further comprises obtaining an additional verification of the user as a condition to conduct the transaction.
17. The method of claim 16 , further comprising checking whether the user is registered at the server based on the caller identification information prior to sending the message.