User authentication in an auction system
A method and system for authenticating users while conducting an auction via a computer system. The system can automatically authenticate users who have previously registered with the auction system and who have enabled automatic authentication. When a user is registered, the system may store authentication information in a cookie on the user's computer. When the user decides to perform a transaction (e.g., list item auction or place a bid for an item) that requires authentication, the system retrieves the stored authentication information. If automatic authentication is enabled, then the system allows the transaction to proceed without manual authentication. If, however, automatic authentication is not enabled or the system does not recognize the stored authentication information, then the system requests manual authentication. The use of automatic authentication allows a user to enter information relating to a transaction without manually entering any identification information.
1. A method in an auction system comprising a server computer for bidding on an item being auctioned, the method comprising:
transmitting a description for display on a client computer, the client computer having authentication information previously stored thereon, the authentication information corresponding to the user, and the description comprising:
information identifying the item to be auctioned,
an enter bid field prefilled with a suggested bid amount for the item, the suggested bid amount generated for a user associated with the client computer, and
an indication of an action that is to be performed to submit a bid on the item, wherein performing the action submits the bid without requiring the user to provide additional authentication information;
in response to the action being performed, receiving, from the client computer, a submit bid request including the suggested bid amount for the item and including the authentication information;
determining whether the user can be automatically authenticated based on the authentication information in the submit bid request, the authentication information corresponding to identification information associated with the user, the identification information previously stored on the auction system; and
in response to a determination that the user can be automatically authenticated based on the authentication information in the submit bid request, automatically authenticating the user and placing the bid on behalf of the user at the suggested bid amount.
2. The method of claim 1 , wherein the suggested bid amount is based on a bid increment.
3. The method of claim 1 , wherein the suggested bid amount is based on a statistical analysis of a bidding history for the item to be auctioned.
4. The method of claim 1 , wherein the information in the submit bid request includes automatic authentication information from a cookie stored on the client computer.
5. The method of claim 1 , further comprising: in response to a determination that the user cannot be automatically authenticated based on information in the submit bid request, manually authenticating the user.
6. The method of claim 5 , wherein manually authenticating the user comprises:
transmitting to the client computer a display requesting the additional authentication information;
receiving from the client computer the additional authentication information;
determining whether the user associated with the client computer can be authenticated based on the additional authentication information; and
in response to a determination that the user can be authenticated based on the additional authentication information, authenticating the user and placing the bid on behalf of the user at the suggested bid amount.
7. A computer-readable medium storing computer-readable program code comprising instructions for bidding on an item being auctioned, the instructions comprising:
transmitting a description for display on a client computer, the client computer having authentication information previously stored thereon, the authentication information corresponding to the user, and the description comprising:
information identifying the item to be auctioned,
an enter bid field prefilled with a suggested bid amount for the item, the suggested bid amount generated for a user associated with the client computer, and
an indication of an action that is to be performed to submit a bid on the item, wherein performing the action submits the bid without requiring the user to provide additional authentication information;
in response to the action being performed, receiving, from the client computer, a submit bid request including the suggested bid amount for the item and including the authentication information;
determining whether the user can be automatically authenticated based on the authentication information in the submit bid request, the authentication information corresponding to identification information associated with the user, the identification information previously stored on the auction system; and
in response to a determination that the user can be automatically authenticated based on the authentication information in the submit bid request, automatically authenticating the user and placing the bid on behalf of the user at the suggested bid amount.
8. The computer-readable medium of claim 7 , wherein the information in the submit bid request includes automatic authentication information from a cookie stored on the client computer.
9. The computer-readable medium of claim 7 , the instructions further comprising:
in response to a determination that the user cannot be automatically authenticated based on information in the submit bid request, manually authenticating the user.
10. An auction system comprising a server computer for bidding on an item being auctioned, the auction system, comprising:
a component for transmitting a description for display on a client computer, the client computer having authentication information previously stored thereon, the authentication information corresponding to the user, and the description comprising:
information identifying the item to be auctioned,
an enter bid field prefilled with a suggested bid amount for the item, the suggested bid amount generated for a user associated with the client computer, and
an indication of an action that is to be performed to submit a bid on the item, wherein performing the action submits the bid without requiring the user to provide additional authentication information;
a component for receiving from the client computer a submit bid request including the suggested bid amount for the item and including the authentication information identifying the user in response to the action being performed, and determining whether the user can be automatically authenticated based on the authentication information in the submit bid request, the authentication information corresponding to identification information associated with the user, the identification information previously stored on the auction system; and
a component for automatically authenticating the user and placing the bid on behalf of the user at the suggested bid amount in response to a determination that the user can be automatically authenticated based on the authentication information in the submit bid request.