IP Library Granted Patent US 7,650,310
Granted Patent B2
US 7,650,310 · App. 11/928,521 · Granted Jan 19, 2010

Technique for reducing phishing

Assignee: Intuit Inc.
View Patent ↗
Loading inventors, assignments & file history…
Monitor This Case
Get email alerts when status or documents change.
Order Certified Copies
Most orders are placed with the USPTO same day — all within 24 business hours.
Order via The Patent Place →
Pre-filled with this patent's details
Quick Facts
Patent No.
US 7,650,310
App. No.
11/928,521
Granted
Jan 19, 2010
Kind
B2
Abstract

Embodiments of a system that performs authentication during a financial transaction are described. During operation, this system asks a prospective customer a subset of questions from a set of questions, where the subset of questions has a probability of being different from those asked while previously or subsequently asking questions of the prospective customer or another prospective customer. Next, the system receives answers to the subset of questions from the prospective customer, thereby confirming that the prospective customer is a customer associated with a financial transaction. Then, the system provides transitory information associated with the financial transaction that, for the customer, uniquely identifies a provider of the financial transaction, thereby completing the authentication.

Claims (33)

1. A computer-implemented method for authenticating a financial transaction, comprising:

at a server computer, performing a two-way authentication by:

asking a prospective customer a subset of questions from a set of questions, wherein the subset of questions has a probability of being different from those asked while previously or subsequently asking questions of the prospective customer or another prospective customer;

receiving answers to the subset of questions from the prospective customer, thereby confirming that the prospective customer is a customer associated with a financial transaction; and

providing transitory information uniquely associated with the financial transaction to the perspective customer, wherein the transitory information uniquely identifies a provider of the financial transaction and associated payment webpage, thus authenticating the provider of the financial transaction and the associated webpage to the perspective customer, thereby completing the two-way authentication.

2. The method of claim 1 , further comprising receiving payment information from the customer for the financial transaction.

3. The method of claim 1 , further comprising providing an identifier to the customer that uniquely identifies the customer during subsequent financial transactions.

4. The method of claim 3 , wherein information associated with the identifier is stored on a computer used by the customer.

5. The method of claim 4 , wherein information is stored in a cookie.

6. The method of claim 1 , wherein the transitory information includes an invoice.

7. The method of claim 1 , wherein the transitory information includes a price parameter for the financial transaction.

8. The method of claim 1 , wherein the transitory information includes an image of an article to be purchased or a service that has been rendered.

9. The method of claim 1 , wherein the transitory information includes a description of an article to be purchased or a service that has been rendered.

10. The method of claim 1 , wherein the subset of questions is selected randomly or pseudo-randomly from the set of questions.

11. The method of claim 1 , wherein the subset of questions includes different permutations or combinations of questions in the set of questions each time questions are asked of the prospective customer or other prospective customers.

12. The method of claim 1 , wherein the difference includes at least some different questions.

13. The method of claim 1 , wherein the difference includes a different order of the questions.

14. The method of claim 1 , wherein prior to asking the prospective customer the subset of the questions, the method further comprises receiving a request for the subset of questions from the prospective customer.

15. The method of claim 14 , wherein, in response to a subsequent request from the prospective customer after the request, another subset of questions is provided only if the subsequent request occurs after a minimum time interval has elapsed since the request.

16. A computer-program product for use in conjunction with a computer system, the computer program product comprising a computer-readable storage medium and a computer-program mechanism embedded therein for configuring the computer system, the computer-program mechanism including:

instructions for asking a prospective customer a subset of questions from a set of questions, wherein the subset of questions has a probability of being different from those asked while previously or subsequently asking questions of the prospective customer or another prospective customer;

instructions for receiving answers to the subset of questions from the prospective customer, thereby confirming that the prospective customer is a customer associated with a financial transaction; and

instructions for providing transitory information uniquely associated with the financial transaction to the perspective customer, wherein the transitory information uniquely identifies a provider of the financial transaction and associated payment webpage, thus authenticating the provider of the financial transaction and the associated webpage to the perspective customer, thereby completing a two-way authentication.

17. The computer-program product of claim 16 , wherein the subset of questions are selected randomly or pseudo-randomly from the set of questions.

18. The computer-program product of claim 16 , wherein the difference includes at least some different questions.

19. The computer-program product of claim 16 , wherein the difference includes a different order of the questions.

20. A computer system, comprising:

a processor;

memory;

a program module, wherein the program module is stored in the memory and configurable to be executed by the processor, the program module including:

instructions for asking a prospective customer a subset of questions from a set of questions, wherein the subset of questions has a probability of being different from those asked while previously or subsequently asking questions of the prospective customer or another prospective customer;

instructions for receiving answers to the subset of questions from the prospective customer, thereby confirming that the prospective customer is a customer associated with a financial transaction; and

instructions for providing transitory information uniquely associated with the financial transaction to the perspective customer, wherein the transitory information uniquely identifies a provider of the financial transaction and associated payment webpage, and wherein the transitory information is used to authenticate the provider of the financial transaction and the associated webpage to the perspective customer, thereby completing a two-way authentication.

Assignments (1)
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Dec 4, 2007
From: STEFANESCU, COSTIN MUGUR
To: INTUIT INC.
Reel/Frame 020192/0738 →
Continuity (1)
Related Publication 20090112745A1 · Apr 30, 2009