Communication method and system
A method and system for authenticating a transaction between a user and a payment system are provided in which transaction information is transmitted through a secure communications from the user to the payment system, and the authentication message is sent from a payment system to the user via an authentication system. The authentication message is sent from the authentication system from one of multiplicity of addresses to the user, and the response to the message is received in that address. Additional security is achieved when the reply addresses are selected randomly.
1. A method for an authentication system performing online authentication of an online transaction between a mobile phone, associated with a user, and a payment system, via communication messages between the mobile phone and the payment system, the authentication system including at least one processor and authentication software running on the at least one processor to cause the at least one processor to perform the method, wherein the method comprises:
preparing a transaction authentication communication message for the transaction to be sent to the mobile phone over at least one telecommunication network;
randomly selecting a reply address from a multiplicity of reply addresses at which the online authentication system is capable of receiving reply communication messages from one or more mobile phones including the mobile phone;
associating the randomly selected reply address as a reply address for the transaction authentication communication message;
sending the transaction authentication communication message, including the randomly selected reply address, to the mobile phone over the at least one telecommunication network;
receiving a reply communication message from the mobile phone over the at least one telecommunication network at the randomly selected reply address, the reply communication message having a sender address that is the user's subscriber number, Calling Line Identity (CLI), e-mail address or IP address associated with the mobile phone; and
authenticating the transaction based on contents of the reply communication message, the sender address and the randomly selected reply address at which the reply communication message from the mobile phone is received by the online authentication system.
2. The method of claim 1 , further comprising sending information indicating that the user authenticated the transaction from the online authentication system to the payment system following authentication of the transaction.
3. The method of claim 1 , wherein the at least one telecommunications network is a mobile communications network.
4. The method of claim 1 , wherein the transaction authenticating is also based on semantics of the reply.
5. The method of claim 4 , wherein the further analysis of the semantics of the reply communication message includes comparing content of the reply communication message with stored information about what kinds of reply content are acceptable.
6. The method of claim 5 , wherein, if reply content does not meet criteria identified in the stored information, the reply communication message is rejected as not being an authentic reply communication message.
7. The method of claim 1 , further comprising the online authentication system tracking which of the multiplicity of reply addresses are currently available for use, and selecting each particular randomly selected reply address from among the reply addresses which are currently available for use.
8. The method of claim 1 , wherein the transaction is a payment request which is sent to the payment system from a seller's system to a credit card company's payment system or to a banking system.
9. The method of claim 1 , wherein further comprising transmitting information that the user authenticated the transaction from the online authentication system to the payment system via the telecommunications network connection following authentication of the transaction.
10. The method of claim 1 , wherein the transaction authentication communication and reply communication messages are short messages.
11. The method of claim 1 , wherein the transaction authentication communication and reply communication messages are SMS messages.
12. The method of claim 1 , wherein the transaction authentication communication and reply communication messages are text messages.
13. The method of claim 1 , wherein the transaction is associated with a booking event.
14. The method of claim 13 , wherein the booking event pertains to a booking that is an allocation of a single resource to the user.
15. The method of claim 14 , wherein the booking is for a service from a service provider.
16. The method of claim 1 , further comprising associating the transaction authentication communication and reply communication messages with a dialogue between the online authentication system and the mobile phone.
17. The method of claim 16 , wherein the dialogue is activated by transmission of a message to the mobile phone.