Secure transaction systems and methods
A user transaction request is received at a client device. A web browser plug-in communicates the user transaction request to a server that determines whether the user transaction request is a secure transaction. Transaction data is received from the server via the web browser plug-in. If the received transaction data indicates a secure transaction, the user is prompted to provide biometric data, which is received from the user. The web browser plug-in then communicates a transaction confirmation to the server.
1. A method of implementing a secure transaction, the method comprising:
receiving, through a web browser application executing on a user computing device, from the user computing device, a request from a user for authentication of a transaction to be executed securely by a web server implementing secure transactions;
transmitting through a web browser plug-in executing on the user computing device transaction information to the user computing device, the transaction information comprising transaction details corresponding to the request received from the user by the web server, an HTML tag uniquely identifying the web server and a signature of the web server, wherein the transmitting of the transaction information including the transaction details, the HTML tag and the signature of the web server, to the user computing device, identifying the web server implementing secure transactions to the user computing device;
receiving from the user computing device, an indication that there has been an authentication of the user obtained utilizing a biometric device associated with the user computing device,
wherein the authentication of the user is performed by the web server upon receiving valid biometric information from the user through the web browser plug-in,
wherein the user submits the valid biometric information to the server via the web browser plug-in after verifying, using the web browser plug-in, the transaction details presented to the user in a transaction window generated by a biometric service, executing on the user computing device, and
wherein the web server monitors the transaction details presented to the user in the transaction window ensuring that the presented transaction details are not modified by a malicious entity, by verifying the integrity of the data in the transaction window through the biometric service at regular or at random time intervals concurrently to the user verification of the presented transaction details in the transaction window and upon detection of a modification of the transaction details the biometric service instructs the web server to cancel the transaction.
2. The method of claim 1 , wherein the biometric information includes fingerprint characteristics associated with the user's finger.
3. The method of claim 1 , wherein the biometric information is obtained by imaging user fingerprint characteristics using a fingerprint sensor.
4. The method of claim 1 , further comprising displaying transaction details to the user via the web browser plug-in.
5. A computer comprising:
a processor; and
a memory coupled to the processor, the memory comprising computer-executable instructions that when executed by the processor perform operations including:
receiving from a web server implementing secure transactions a request for authentication of a transaction to be executed securely by the web server, the request causing a web browser plug-in executing on a user computing device to return transaction information to the user computing device, the transaction information comprising transaction details corresponding to a transaction request received from the user computing device by the web server, an HTML tag uniquely identifying the web server and a signature of the web server, wherein the return of the transaction information back to the user computing device, the HTML tag and the signature of the web server identifying the web server implementing secure transactions to the user computing device; and
receiving from the user computing device, an indication that there has been an authentication of the user obtained utilizing a biometric device associated with the user computing device,
wherein the authentication of the user is performed by the web server upon receiving valid biometric information from the user through the web browser plug-in,
wherein the user submits the valid biometric information to the server via the web browser plug-in after verifying, using the web browser plug-in, the transaction details presented to the user in a transaction window generated by a biometric service, executing on the user computing device, and
wherein the web server monitors the transaction details presented to the user in the transaction window ensuring that the presented transaction details are not modified by a malicious entity, by verifying the integrity of the data in the transaction window through the biometric service at regular or at random time intervals concurrently to the user verification of the presented transaction details in the transaction window and upon detection of a modification of the transaction details the biometric service instructs the web server to cancel the transaction.
6. The computer of claim 5 , wherein the biometric information includes fingerprint characteristics associated with a finger of the user.
7. The computer of claim 5 , wherein receiving biometric information from the user includes imaging user fingerprint characteristics using a fingerprint sensor.
8. A non-transitory machine readable media storing thereon instructions that, when executed by a computing device, cause the computing device to perform a method comprising:
receiving at a web server implementing secure transactions from a web browser application executing on a user computing device, a user transaction request for execution of a transaction to be executed by the web server;
transmitting through a web browser application executing on the user computing device, transaction information to the user computing device comprising transaction details corresponding to a transaction request received from the user computing device by the web server, an HTML tag uniquely identifying the web server and a signature of the web server, wherein the transmitting of the transaction information to the user computing device identifying the web server implementing secure transactions to the user computing device;
receiving from the user computing device, an indication that there has been an authentication of the user obtained utilizing a biometric device associated with the user computing device,
wherein the authentication of the user is performed by the web server upon receiving valid biometric information from the user through the web browser plug-in,
wherein the user submits the valid biometric information to the server via the web browser plug-in after verifying, using the web browser plug-in, the transaction details presented to the user in a transaction window generated by a biometric service, executing on the user computing device, and
wherein the web server monitors the transaction details presented to the user in the transaction window ensuring that the presented transaction details are not modified by a malicious entity, by verifying the integrity of the data in the transaction window through the biometric service at regular or at random time intervals concurrently to the user verification of the presented transaction details in the transaction window and upon detection of a modification of the transaction details the biometric service instructs the web server to cancel the transaction.
9. A system comprising:
a computing device configured to:
receive through a web browser application executing on a user computing device, from the user computing device a request for authentication of a transaction to be executed by the web server implementing secure transactions;
transmitting through a web browser plug-in executing on the user computing device transaction information to the user computing device, the transaction information comprising transaction details corresponding to the request received from the user computing device by the web server, an HTML tag uniquely identifying the web server and a signature of the web server, wherein the transmitting of the transaction information including the transaction details, the HTML tag and the signature of the web server, to the user computing device, identifying the web server implementing secure transactions to the user computing device;
receiving from the user computing device, an indication that there has been an authentication of the user obtained utilizing a biometric device associated with the user computing device,
wherein the authentication of the user is performed by the web server upon receiving valid biometric information from the user through the web browser plug-in,
wherein the user submits the valid biometric information to the server via the web browser plug-in after verifying, using the web browser plug-in, the transaction details presented to the user in a transaction window generated by a biometric service, executing on the user computing device, and
wherein the web server monitors the transaction details presented to the user in the transaction window ensuring that the presented transaction details are not modified by a malicious entity, by verifying the integrity of the data in the transaction window through the biometric service at regular or at random time intervals concurrently to the user verification of the presented transaction details in the transaction window and upon detection of a modification of the transaction details the biometric service instructs the web server to cancel the transaction.