Method For Internet User Authentication

What is this patent about?

’667 is related to the field of internet user identification and security, specifically addressing the problem of online fraud and identity theft. The background highlights the increasing reliance on internet transactions and the associated risks of transmitting personal and confidential data. Existing methods, such as IP address tracing, have limitations in accurately verifying user identity, creating a need for more robust authentication mechanisms.

The underlying idea behind ’667 is to enhance user authentication by cross-referencing the location of a user's computer with the location of their mobile phone. This is achieved by creating a computer signature based on hardware and software characteristics of the user's computer. The system then compares the geographical location associated with this signature to the current location of the user's mobile phone, providing a more reliable means of verifying the user's identity.

The claims of ’667 focus on a computer system configured to authenticate a user attempting to access the system or conduct a transaction. The system obtains the geographical location of the user's mobile phone and determines if the user's computer signature is associated with a stored geographical location in a database. If a match is found, the system compares the stored location with the phone's current location. If the locations are within an acceptable distance, the user is granted access and/or assigned a positive score. If no match is found initially, the system requests additional authentication information.

In practice, the system first identifies the user's computer signature, which includes software identifiers. Simultaneously, it obtains the user's mobile phone location using methods like GPS or cellular triangulation. The system then checks if this computer signature is already associated with a location in its database. If it is, the system compares the stored location with the phone's current location. This comparison determines whether the user is likely to be who they claim to be, based on the proximity of their computer and phone.

The differentiation from prior approaches lies in the combined use of a computer signature and mobile phone location for authentication. Unlike simple IP address tracing, which can be easily spoofed, this method provides a more reliable verification mechanism. By requiring additional authentication when the computer signature is not recognized or the locations do not match, the system adds an extra layer of security, making it more difficult for fraudsters to gain unauthorized access or conduct fraudulent transactions. The system dynamically learns and updates the association between computer signatures and locations, improving its accuracy over time.