Method and system for authenticating a user of a mobile device
View Patent ↗A method and system for authenticating a user of a mobile device is provided. A first message is received from a mobile device, the message including a mobile device identifier identifying said mobile device. An association between the mobile device identifier in the first message and a registered user is confirmed. A second message is generated and transmitted to the mobile device. The second message includes a user identifier identifying the registered user. A request for a service is received, the request including the user identifier.
1. A computerized method for authenticating a user of a mobile device, comprising:
receiving a first message from a mobile device, said message including a mobile device identifier identifying said mobile device;
confirming that said mobile device identifier in said first message is associated with a registered user;
generating and transmitting a second message to said mobile device, said second message including a universal resource identifier (“URI”) that serves as a user identifier identifying said registered user; and
receiving a request to access a service via said URI.
2. The method of claim 1 , wherein said user identifier is provided as a credential in said request.
3. The method of claim 1 , wherein said service is provided via a web server computer system.
4. The method of claim 3 , wherein said URI identifies the address of said web page that is unique to said registered user.
5. The method of claim 3 , wherein said web page is a login web page.
6. The method of claim 5 , further comprising:
transmitting said login web page to said mobile device.
7. The method of claim 6 , further comprising:
receiving a login request from said mobile device generated using said login web page, said login request including at least one login credential entered by said registered user on said mobile device.
8. The method of claim 7 , further comprising:
transmitting an access-controlled web page to said mobile device if said at least one login credential is authenticated.
9. The method of claim 1 , wherein said user identifier is a credential provided as a parameter in said URI identifying the address of said web page.
10. The method of claim 2 , wherein said credential expires if not used within a specified time period.
11. The method of claim 4 , wherein said web page expires if not used within a specified time period.
12. The method of claim 1 , wherein said first message is a short message service (“SMS”) message and said mobile device identifier is a telephone number.
13. The method of claim 12 , further comprising, before said receiving a first message:
receiving a registration request from said user via a registration web page, said registration request specifying said telephone number of said mobile device operated by said user; and
transmitting an SMS message to said telephone number from an SMS server to provide an access telephone number of said SMS server to said user.
14. A system for authenticating a user of a mobile device, comprising:
a server computer system storing a user database in storage, said user database storing a mobile device identifier for registered users of a service, said server computer system receiving a first message from a mobile device, said message including a mobile device identifier identifying said mobile device, and generating and transmitting a second message to said mobile device if said mobile device identifier is associated with one of said registered users in said user database, said second message including a universal resource identifier (“URI”) at which a service is available and that serves as a user identifier identifying said one registered user.
15. The system of claim 14 , wherein said service is provided by a web server computer system.
16. The system of claim 15 , wherein said URI identifies the address of said web page that is unique to said registered user.
17. The system of claim 16 , wherein said web page is a login web page.
18. The system of claim 17 , wherein said web server computer system transmits an access-controlled web page to said mobile device in response to receiving a login request from said mobile device generated using said login web page, said login request including at least one login credential entered by said one registered user of said mobile device.
19. The system of claim 14 , wherein said user identifier is provided as a credential in said request.
20. The system of claim 19 , wherein said credential is included as a parameter of a URI identifying the address of the service.
21. The system of claim 19 , wherein said credential expires if not used within a specified time period.
22. The system of claim 16 , wherein said web page expires if not used within a specified time period.
23. The system of claim 14 , wherein said mobile device identifier is a telephone number and said message is an SMS message.
24. The system of claim 14 , wherein said web server computer system receives a registration request from said user via a registration web page, said registration request specifying said mobile device identifier of said mobile device operated by said user, and, in response, said server computer system transmits a message to said mobile device associated with said mobile device identifier from said system to provide an address of said system to said user.