利索-全球专利检索

  1. 登录
  2. 注册

搜索结果

15 条记录 (耗时 0.03 秒)

    Method and system for secure authentication of a user by a host system
    1.
    发明授权
    Method and system for secure authentication of a user by a host system 有权
    由主机系统对用户进行安全认证的方法和系统

    公开(公告)号：US08146141B1

    公开(公告)日：2012-03-27

    申请号：US11014127

    申请日：2004-12-16

    申请人： Michael Grandcolas ,  Marc Guzman ,  Thomas Yee ,  Dilip Parekh ,  Yongqiang Chen

    发明人： Michael Grandcolas ,  Marc Guzman ,  Thomas Yee ,  Dilip Parekh ,  Yongqiang Chen

    IPC分类号： G06F7/04

    CPC分类号： H04L9/3226 ,  H04L9/0825 ,  H04L63/045 ,  H04L63/0853 ,  H04L2209/56

    摘要： A method and system for securely logging onto a banking system authentication server so that a user credential never appears in the clear during interaction with the system in which during a log on process, an encryption applet and the public key of a public/private key pair of a banking application server, the private key for which is known by a hardware security module (HSM) of the banking application, are downloaded by a user's browser. The applet contains code for generating a DES key and performing DES and PKI encryption. A user's credential is DES encrypted, and the DES key is PKI encrypted with the public key of the application server by the applet before being transmitted to the application server. Within the HSM of the application server, the HSM decrypts and re-encrypts the credential under a new DES key known to the authentication server, the re-encrypted credential is forwarded to the authentication server, decrypted with the new DES key known to the authentication server, and verified by the authentication server.

    摘要翻译： 一种用于安全地登录到银行系统认证服务器的方法和系统，使得用户证书在与登录过程中的系统的交互期间不会出现在清楚中，其中在登录过程中，加密小程序和公钥/私钥对的公钥 的银行应用服务器，其私钥由银行应用的硬件安全模块（HSM）知道，由用户的浏览器下载。 该小程序包含用于生成DES密钥和执行DES和PKI加密的代码。 用户的凭证被DES加密，并且DES密钥在被发送到应用服务器之前由小应用程序使用应用服务器的公钥进行PKI加密。 在应用服务器的HSM内，HSM在认证服务器已知的新DES密钥下对证书进行解密和重新加密，将重新加密的证书转发给认证服务器，并使用认证已知的新DES密钥进行解密 服务器，并由验证服务器验证。

    Methods and Systems for Secure Authentication of a User by a Host System
    2.
    发明申请
    Methods and Systems for Secure Authentication of a User by a Host System 有权
    用于主机系统安全认证用户的方法和系统

    公开(公告)号：US20120072714A1

    公开(公告)日：2012-03-22

    申请号：US13296347

    申请日：2011-11-15

    申请人： Michael Grandcolas ,  Marc Guzman ,  Thomas Yee ,  Dilip Parekh ,  Yonggiang Chen

    发明人： Michael Grandcolas ,  Marc Guzman ,  Thomas Yee ,  Dilip Parekh ,  Yonggiang Chen

    IPC分类号： H04L9/32

    CPC分类号： H04L9/3226 ,  H04L9/0825 ,  H04L63/045 ,  H04L63/0853 ,  H04L2209/56

    摘要： A method and system for securely logging onto a banking system authentication server so that a user credential never appears in the clear during interaction with the system in which a user's credential is DES encrypted, and the DES key is PKI encrypted with the public key of an application server by an encryption applet before being transmitted to the application server. Within the HSM of the application server, the HSM decrypts and re-encrypts the credential under a new DES key known to the authentication server, the re-encrypted credential is forwarded to the authentication server, decrypted with the new DES key known to the authentication server, and verified by the authentication server.

    摘要翻译： 一种用于安全地登录到银行系统认证服务器的方法和系统，使得用户凭证在与用户凭证被DES加密的系统交互期间不会出现清楚，并且DES密钥是用公钥的PKI加密的 应用服务器由加密小程序发送到应用服务器之前。 在应用服务器的HSM内，HSM在认证服务器已知的新DES密钥下解密并重新加密证书，将重新加密的证书转发给认证服务器，并用认证已知的新DES密钥进行解密 服务器，并由验证服务器验证。

    Methods and systems for secure authentication of a user by a host system
    3.
    发明授权
    Methods and systems for secure authentication of a user by a host system 有权
    由主机系统对用户进行安全认证的方法和系统

    公开(公告)号：US08302172B2

    公开(公告)日：2012-10-30

    申请号：US13296347

    申请日：2011-11-15

    申请人： Michael Grandcolas ,  Marc Guzman ,  Thomas Yee ,  Dilip Parekh ,  Yonggiang Chen

    发明人： Michael Grandcolas ,  Marc Guzman ,  Thomas Yee ,  Dilip Parekh ,  Yonggiang Chen

    IPC分类号： G06F7/04

    CPC分类号： H04L9/3226 ,  H04L9/0825 ,  H04L63/045 ,  H04L63/0853 ,  H04L2209/56

    摘要： A method and system for securely logging onto a banking system authentication server so that a user credential never appears in the clear during interaction with the system in which a user's credential is DES encrypted, and the DES key is PKI encrypted with the public key of an application server by an encryption applet before being transmitted to the application server. Within the HSM of the application server, the HSM decrypts and re-encrypts the credential under a new DES key known to the authentication server, the re-encrypted credential is forwarded to the authentication server, decrypted with the new DES key known to the authentication server, and verified by the authentication server.

    摘要翻译： 一种用于安全地登录到银行系统认证服务器的方法和系统，使得用户凭证在与用户凭证被DES加密的系统交互期间不会出现清楚，并且DES密钥是用公钥的PKI加密的 应用服务器由加密小程序发送到应用服务器之前。 在应用服务器的HSM内，HSM在认证服务器已知的新DES密钥下解密并重新加密证书，将重新加密的证书转发给认证服务器，并用认证已知的新DES密钥进行解密 服务器，并由验证服务器验证。

    Delivering financial services to remote devices
    5.
    发明申请
    Delivering financial services to remote devices 有权
    向远程设备提供金融服务

    公开(公告)号：US20070250808A1

    公开(公告)日：2007-10-25

    申请号：US11812945

    申请日：2007-06-22

    申请人： James Zeanah ,  Charles Abbott ,  Nik Boyd ,  Albert Cohen ,  James Cook ,  Michael Grandcolas ,  Sikun Lan ,  Bonnie Lindsley ,  Grigor Markarian ,  Leslie Moss

    发明人： James Zeanah ,  Charles Abbott ,  Nik Boyd ,  Albert Cohen ,  James Cook ,  Michael Grandcolas ,  Sikun Lan ,  Bonnie Lindsley ,  Grigor Markarian ,  Leslie Moss

    IPC分类号： G06F9/44

    CPC分类号： G06Q20/30 ,  G06Q20/32 ,  G06Q20/322 ,  G06Q20/3227 ,  G06Q20/3552 ,  G06Q40/00 ,  G07F19/206

    摘要： A financial institution can provide financial services to a plurality of remote devices, such as personal computers, personal data assistants, screen phones, automatic teller machines, external service providers, and internally to staff terminals and individual branches. By separating the components of the system into independent components, the system and method can be developed and tested on a component level rather than the entire system level, thereby reducing the development and maintenance cycle time. The system and method operate in sessions and can employ a dialog component for gathering information from a customer, a rule broker component for providing answers to the various legal and regulatory rules in a particular country, a language man component for selecting appropriate language, a transaction executor component for performing transactions, and a presentation manager component for formatting outputs to the customer.

    摘要翻译： 金融机构可以向个人计算机，个人数据助理，屏幕电话，自动取款机，外部服务提供商等多个远程设备提供金融服务，并且向内部向员工终端和各个分支机构提供金融服务。 通过将系统的组件分离成独立的组件，可以在组件级别而不是整个系统级别上开发和测试系统和方法，从而减少开发和维护周期时间。 该系统和方法在会话中进行操作，并且可以使用用于从客户收集信息的对话组件，用于提供特定国家的各种法律和规则规则的答案的规则代理组件，用于选择适当语言的语言人组件，交易 执行交易的执行者组件，以及用于将输出格式化给客户的演示管理器组件。

    Methods and systems for secure user authentication
    9.
    发明授权
    Methods and systems for secure user authentication 有权
    用于安全用户认证的方法和系统

    公开(公告)号：US08181232B2

    公开(公告)日：2012-05-15

    申请号：US11494224

    申请日：2006-07-27

    申请人： Michael Grandcolas ,  Irina Koryakovtseva ,  Jennifer Vos ,  Robert A. Herrig

    发明人： Michael Grandcolas ,  Irina Koryakovtseva ,  Jennifer Vos ,  Robert A. Herrig

    IPC分类号： G06F7/04 ,  G06F15/16 ,  G06F17/30 ,  H04L29/06 ,  H04N7/16

    CPC分类号： G06Q20/425 ,  G06F21/42 ,  G06Q20/4014 ,  G06Q30/06 ,  G07F7/1008 ,  G07F7/1025 ,  H04L63/08 ,  H04L63/0838 ,  H04L63/18 ,  H04L2463/102

    摘要： A computer-implemented method and system for secure user authentication in electronic commerce involves maintaining electronic information having a first aspect that is accessible over a first electronic communication channel in response to entry of a first credential known to the user and a second aspect that is accessible by the user over the first electronic communication channel in response to entry of a second credential provided to the user at a pre-registered delivery address on a second electronic communication channel. The second credential is provided to the user via the second electronic communication channel in response to entry of a pre-determined user selection during a current session of user access to the first aspect if no change has occurred in the pre-registered delivery address within a pre-determined period of time, and the user is allowed a session of access to the second aspect in response to entry of the second credential either during the current session of user access to the first aspect or during a succeeding session of user access to the first aspect.

    摘要翻译： 用于电子商务中用于安全用户认证的计算机实现的方法和系统涉及维护具有第一方面的电子信息，所述第一方面可响应于对用户已知的第一证书的输入而可在第一电子通信信道上访问，以及可访问的第二方面 响应于在第二电子通信信道上以预先注册的传送地址提供给用户的第二凭证的输入，用户通过第一电子通信信道通过第一电子通信信道。 在第一方面的用户访问的当前会话期间响应于预定用户选择的输入，经由第二电子通信信道向用户提供第二凭证，如果在预先注册的递送地址内没有发生改变 预定的时间段，并且允许用户响应于第二证书的输入在第一方面的用户访问的当前会话期间或在用户访问第二方面的后续会话期间访问第二方面的会话 第一方面。

    Methods and systems for secure user authentication
    10.
    发明申请
    Methods and systems for secure user authentication 有权
    用于安全用户认证的方法和系统

    公开(公告)号：US20070050840A1

    公开(公告)日：2007-03-01

    申请号：US11494224

    申请日：2006-07-27

    申请人： Michael Grandcolas ,  Irina Koryakovtseva ,  Jennifer Vos ,  Robert Herrig

    发明人： Michael Grandcolas ,  Irina Koryakovtseva ,  Jennifer Vos ,  Robert Herrig

    IPC分类号： H04L9/32

    CPC分类号： G06Q20/425 ,  G06F21/42 ,  G06Q20/4014 ,  G06Q30/06 ,  G07F7/1008 ,  G07F7/1025 ,  H04L63/08 ,  H04L63/0838 ,  H04L63/18 ,  H04L2463/102

    摘要： A computer-implemented method and system for secure user authentication in electronic commerce involves maintaining electronic information having a first aspect that is accessible over a first electronic communication channel in response to entry of a first credential known to the user and a second aspect that is accessible by the user over the first electronic communication channel in response to entry of a second credential provided to the user at a pre-registered delivery address on a second electronic communication channel. The second credential is provided to the user via the second electronic communication channel in response to entry of a pre-determined user selection during a current session of user access to the first aspect if no change has occurred in the pre-registered delivery address within a pre-determined period of time, and the user is allowed a session of access to the second aspect in response to entry of the second credential either during the current session of user access to the first aspect or during a succeeding session of user access to the first aspect.

    摘要翻译： 用于电子商务中用于安全用户认证的计算机实现的方法和系统涉及维护具有第一方面的电子信息，所述第一方面可响应于对用户已知的第一证书的输入而可在第一电子通信信道上访问，以及可访问的第二方面 响应于在第二电子通信信道上以预先注册的传送地址提供给用户的第二凭证的输入，用户通过第一电子通信信道通过第一电子通信信道。 在第一方面的用户访问的当前会话期间响应于预定用户选择的输入，经由第二电子通信信道向用户提供第二凭证，如果在预先注册的递送地址内没有发生改变 预定的时间段，并且允许用户响应于第二证书的输入在第一方面的用户访问的当前会话期间或在用户访问第二方面的后续会话期间访问第二方面的会话 第一方面。