EFFICIENT AUTHENTICATION OF A USER FOR CONDUCT OF A TRANSACTION INITIATED VIA MOBILE TELEPHONE
A method and system for authenticating a user for conduct of a transaction initiated by the user via a data-enabled telephone is presented. Efficient use is made of keystrokes on the data-enabled telephone. The data-enabled telephone is capable of initiating telephone calls over a telephone network and of engaging in two-way data communication with a data server in a network and the server enables conduct of the transaction. Caller identification information is received at the server. The information is associated with a telephone call request initiated by the user via the data-enabled telephone to a service number. The caller identification provides basis for authentication of the user and the caller identification information received at the service number is used to address a message to the user. Included in such a message is a logon key for use by the user in accomplishing the transaction. Thus the user can use the logon key to enter into data communication with the server for conduct of the transaction.
1 . A method of authenticating a user for conduct of a transaction initiated by the user via a data-enabled telephone in such a manner as to make efficient use of keystrokes on the data-enabled telephone, such data-enabled telephone capable of initiating telephone calls over a telephone network and of engaging in two-way data communication with a data server in a network, such server enabling conduct of the transaction, the method comprising:
receiving caller identification information associated with a telephone call request initiated by the user via the data-enabled telephone to a service number, such caller identification providing a basis for authentication of the user; and
using the caller identification information received at the service number to address a message to the user;
including in such message a logon key for use by the user in accomplishing the transaction; and
sending such message;
so that on receipt of the message, the user may use the logon key to enter into data communication with the server for conduct of the transaction.
2 . A method according to claim 1 , wherein the logon key has a lifetime, for purposes of accomplishing the transaction, of less than a specified amount of time.
3 . A method according to claim 1 , wherein the logon key for use by the user can be used a limited number of times for purposes of accomplishing the transaction.
4 . A method according to claim 1 , wherein the caller identifying information includes a telephone number of the mobile telephone.
5 . A method according to claim 1 , wherein receiving and using the caller identification information is accomplished without answering the call request, so that a connection does not result from the call request.
6 . A method according to claim 1 , wherein receiving and using the caller identification information includes answering the call request, so that a connection is established.
7 . A method according to claim 1 , wherein sending the message includes sending the message to the user's mobile telephone and, on receipt of the message, the user may use the logon key to cause the mobile telephone to enter into data communication with the server.
8 . A method according to claim 1 , wherein the logon key serves to identify the user, and the method further comprises obtaining an additional verification of the user as a condition to conduct of the transaction.
9 . A method according to claim 2 wherein the message is in a format adapted to the capabilities of the user's telephone.
10 . A system for authenticating a user for conduct of a transaction initiated by the user via a data-enabled telephone in such a manner as to make efficient use of keystrokes on the data-enabled telephone, such data-enabled telephone capable of initiating telephone calls over a telephone network and of engaging in two-way data communication with a data server in a network, such server enabling conduct of the transaction, the system comprising:
a telephone server, associated with a service telephone number, for receiving caller identification information associated with a telephone call request initiated by the user via the data-enabled telephone to the service telephone number, such caller identification providing a basis for authentication of the user; such telephone server using the caller identification information received at the service number to address a message to the user, wherein such message includes a logon key for use by the user in accomplishing the transaction, and to send such message;
a data server for data communication with the data-enabled telephone of the user, accessible to the user upon use of the logon key by the user;
so that on receipt of the message, the user may use the logon key to enter into data communication with the data server for conduct of the transaction.
11 . A system according to claim 10 , wherein the logon key has a lifetime, for purposes of accomplishing the transaction, of less than a specified amount of time.
12 . A system according to claim 10 , wherein the logon key for use by the user can be used a limited number of times for purposes of accomplishing the transaction.
13 . A system according to claim 10 , wherein the caller identifying information includes a telephone number of the mobile telephone.
14 . A system according to claim 10 , wherein the telephone server obtains the caller identification information without answering the call request, so that a connection does not result from the call request.
15 . A system according to claim 10 , wherein the telephone server obtains the caller identification information in the course of answering the call request, so that a connection is established following the call request.
16 . A system according to claim 10 , wherein the logon key serves to identify a user, and the telephone server obtains an additional verification of the user as a condition to conduct of the transaction.
17 . A system according to claim 10 , wherein the capabilities of the user's telephone is information which is made available in the system, in order that the message format can be adapted to said capabilities.