Authenticating users and on-line sites
View Patent ↗A method and system enables a user and/or an on-line site to be authenticated by comparing a received password with an expected password, transmitting a new password if the received and expected passwords match, and authenticating a communication if the new password matches what is expected by the on-line site. The initially received password may be distorted, such as with CAPTCHA.
1. A system of authenticating an on-line communication between a user and an online site, comprising:
a memory storing information about user accounts, wherein the information comprises log-in information; and
a processor configured for
receiving information from the user;
transmitting an image comprising a first password based on the information;
receiving a second password from the user, wherein the second password is generated from a token device of the user after the first password has been generated by the token device, is different from the first password, is not part of the image, and is sent from the user only when the first password matches a first expected password by the user, wherein the first password is distorted;
comparing the second password with a second expected password for the user; and
authenticating the communication if the second password matches the second expected password.
2. The system of claim 1 , wherein the first password is distorted by CAPTCHA.
3. The system of claim 1 , wherein the communication is between the user and the on-line site.
4. The system of claim 1 , wherein the information is log-in information.
5. The system of claim 1 , wherein the processor is further configured for generating the second expected password prior to the comparing.
6. The system of claim 1 , wherein the processor is further configured for retrieving the second expected password prior to the comparing.
7. The system of claim 1 , wherein the communication comprises an exchange of sensitive information.
8. The system of 1 , wherein the transmitting, comparing, and authenticating is by an on-line site.
9. A system for authenticating a user for an on-line communication between the user and an online site, comprising:
means for receiving information from the user;
means for transmitting an image comprising a first password based on the information;
means for receiving a second password from the user, wherein the second password is generated from a token device of the user after the first password has been generated by the token device, is different from the first password, is not part of the image, and is sent from the user only when the first password matches a first expected password by the user, wherein the first password is distorted;
means for comparing the second password with a second expected password for the user; and
means for authenticating the communication if the second password matches the second expected password.
10. The system of claim 9 , wherein the communication is between the user and the on-line site.
11. The system of claim 9 , wherein the information is log-in information.
12. The system of claim 9 , wherein the means for receiving information, transmitting the first password, and receiving the second password comprise at least one antenna.
13. The system of claim 9 , wherein the means for comparing and the means for authenticating comprise at least one processor.
14. A non-transitory computer-readable medium comprising a plurality of machine-readable instructions which when executed by one or more processors of a server are adapted to cause the server to perform a method of authenticating a communication between a user and an online site comprising:
receiving log in information from the user;
generating a first password based on the log in information;
transmitting an image comprising the first password;
receiving a second password from the user, wherein the second password is generated from a token device of the user after the first password has been generated by the token device, is different from the first password, is not part of the image, and is sent from the user only when the first password matches a first expected password by the user, wherein the first password is distorted;
comparing the second password with a second expected password for the user; and
authenticating the communication if the second password matches the second expected password.
15. The non-transitory computer-readable medium of claim 14 , wherein the first password is distorted by CAPTCHA.
16. The non-transitory computer-readable medium of claim 14 , wherein the receiving comprises an exchange of sensitive information.
17. The non-transitory computer-readable medium of claim 14 , wherein the comparing and authenticating is by the on-line site.