Method of improving online credentials
View Patent ↗The invention comprises a method of providing additional assurance regarding a websites authenticity, The assurance is provided by using a credential that contains an image of the website operator or the website operator's business operations. The assurance is also provided by scanning the website associated with the credential for changes and alerting the website operator or a website visitor of the changes. The invention includes a method of ensuring the proper operation of the credential and a method of protecting the credential from mis-issuance.
1. A method of providing trust information about a website operator, the method executable by a processor and comprising:
a. obtaining, using the processor, an image associated with the website comprising a screen capture of a portion of the website,
b. creating, using the processor, a credential associated with a website that contains the image associated with the website, and
c. displaying, using the processor, the image to a website visitor through a browser during an interaction with the website by the website visitor.
2. A method according to claim 1 , where the image further comprises a photograph of an entity responsible for content of the website.
3. A method according to claim 2 , where the photograph is uploaded to a credential provider system by an agent thereof who obtained the image while visiting a business location of the responsible entity.
4. A method according to claim 3 , where the agent verifies an identity of the responsible entity and qualifications for the credential while visiting the business location.
5. A method according to claim 1 , where the image comprises a first image and is compared to a second image that has the same association with the website as the first image.
6. A method according to claim 5 , further comprising:
displaying a first credential on the website to the website visitor when the first image matches the second; and
displaying a second credential on the website different than the first credential when the first image does not match the second image.
7. A method of providing security notifications related to the modification of a website, the method executable by at least one processor and comprising:
a. storing, using the at least one processor, a copy of the website in a database,
b. detecting, using the at least one processor, whether changes are made to the website by electronically comparing contents of the website with the stored copy of the website,
c. providing to a website operator, using the at least one processor, automated notification of changes to the website detected during the electronic comparison,
d. confirming the changes as being authorized, and
e. displaying, using the at least one processor, a credential on the website responsive to confirming the changes as being authorized.
8. A method according to claim 7 where the notification is an automated phone call to a telephone number associated with the website operator.
9. A method according to claim 7 where the notification includes a risk rating that is calculated based on a risk profile associated with the changes made to the website.
10. A method according to claim 7 where the notification is sent when a change occurs in a specific area of the website.
11. A method according to claim 7 where the notification includes a list of the changes made to the website.
12. A method according to claim 7 where the notification includes a list of detected vulnerabilities associated with the detected change to the website and instructions on how to remediate the vulnerabilities.
13. A method according to claim 7 where providing the automated notification occurs when the changes to the website exceed a set threshold amount of change.
14. A method according to claim 7 further comprising storing a copy of the website in a database after confirming the changes as authorized.
15. A method according to claim 7 where multiple stored copies of the website are compared to the website to track a location on the website where the changes occurred.
16. A method according to claim 7 further comprising, when a website change is detected, replacing the website with the copy of the website stored in the database.
17. A method according to claim 7 further comprising modifying the credential when a change to the website is detected.
18. A method according to claim 17 where the modifying the credential happens when the changes to the website exceed a set threshold amount of change.
19. A method of testing the installation of a secure sockets layer (SSL) credential, the method executable by a processor and comprising:
a. connecting, using the processor, to a server via an SSL connection,
b. testing, using the processor, the configuration of an SSL credential installed on the server, comprising—checking a series of SSL connections to determine whether correct intermediate certificates are provided during the series of SSL connections with the server,
c. displaying, using the processor, a visual indicator that the correct intermediate certificates were provided during the series of SSL connections; and
d. sending a notification of the testing to a website operator.
20. A method according to claim 19 , where the notification includes instructions on certificate installation problems associated with the website, and how to fix detected errors.
21. A method according to claim 19 , further comprising determining whether correct SSL cipher suites are supported.
22. A method of issuing an online credential, the method executable by a processor and comprising:
a. verifying, using the processor, qualifications of an applicant for an online credential,
b. determining, using the processor, a risk associated with the applicant based on a website associated with the online credential,
c. displaying on the website, when the risk meets a set threshold, a temporary password for insertion into an authentication system before the credential will issue; and
d. displaying, using the processor, the credential on the website responsive to receipt of authentication from the authentication system comparing the temporary password with a stored temporary password.
23. A method according to claim 22 further comprising:
requiring authentication through the authentication system of multiple temporary passwords before issuing a credential for display on the website.
24. A credential issuing system comprised of:
a credential provider system having a processor configured to provide a credential containing an image that is associated with a website;
a location on the website where the image is displayed after the credential receives an interaction; and
an issuing system in communication with the credential provider system and configured to authenticate at least one temporary password received from the credential provider system prior to issuing the online credential for display in the location on the website.
25. A system according to claim 24 further comprising a notification system configured to provide a notice when the image associated with the website is different than a previous version of the image.
26. A system according to claim 24 further comprising a scanning service configured to detect changes to a website and database hosted by a service provider of the website.
27. A system according to claim 24 where the image comprises a screen capture of the website or a photograph of a business location of an entity responsible for content of the website.
28. A system comprising:
a computing device having a processor and memory and configured to provide trust information regarding a website operator in conjunction with delivery of a website,
where the processor is configured to:
retrieve an image associated with the website, the image comprising a photograph of a business location of an entity responsible for content of the website;
upload the photograph to a credential provider system;
receive from the credential provider system a credential associated with the website, where the credential includes the photograph; and
deliver, to a browser of a computing device of a website visitor, the credential for display on the website.
29. The system according to claim 28 , where the processor is further configured to deliver the credential to a specific location on the website.
30. A system according to claim 28 , where the processor is further configured to verify an identity of the entity and qualifications of the credential based on content of the photograph and accompanying information related to the business location.
31. A system according to claim 28 , where the photograph comprises a first photograph, and the processor is further configured to compare the first photograph to a second photograph that has the same association with the website as the first photograph.
32. A system according to claim 31 , where the processor is further configured to:
display a first credential on the website to the website visitor when the first photograph matches the second photograph; and
display a second credential on the website different than the first credential when the first photograph does not match the second photograph.
33. A system comprising:
a computing device having a processor and memory and configured to provide security notifications related to modification of a website,
where the processor is configured to:
store a copy of the website in a database;
detect whether changes are made to the website by electronically comparing contents of the website with the stored copy of the website;
confirm the changes as being authorized; and
display a credential on the website responsive to confirming the changes as being authorized.
34. The system according to claim 33 , where the processor is further configured to provide to a website operator automated notification of changes to the website detected during the electronic comparison.
35. The system according to claim 34 , where the notification is an automated phone call to a telephone number associated with the website operator.
36. The system according to claim 33 , where the processor is further configured to store a copy of the website in a database after confirming the changes as authorized.
37. The system according to claim 33 , where the processor is further configured to modify the credential when a change to the website is detected.
38. The system according to claim 37 , where the credential is a snapshot of the website.
39. The system according to claim 37 , where modifying the credential comprises altering a color, an image or text of the credential to communicate to relying parties of the change to the website, and whether the change is authorized.