公开(公告)号：US20070005967A1

公开(公告)日：2007-01-04

申请号：US11302058

申请日：2005-12-13

申请人： Serge Mister ,  Steve Neville ,  Robert Zuccherato ,  Chris Voice ,  Michael Morgan

发明人： Serge Mister ,  Steve Neville ,  Robert Zuccherato ,  Chris Voice ,  Michael Morgan

IPC分类号： H04L9/00

CPC分类号： H04L9/3271 ,  G06F21/36 ,  G06F2221/2103 ,  G06F2221/2129 ,  G06Q10/107 ,  G06Q20/341 ,  G06Q20/4014 ,  G06Q20/40145 ,  G07F7/1008 ,  G07F7/1083 ,  H04L9/3228 ,  H04L2209/56 ,  H04L2209/80

摘要： A method, apparatus and/or system generates a challenge for user authentication, having a challenge data element from a stored pool of challenge data elements. The challenge is based on rule data and stored usage data associated with at least some of the challenge data elements in the stored pool of challenge data elements. The generated challenge is sent for use in an authentication of a user to a sender. A method, apparatus and/or system also generates sender authentication and corresponding location information, having a data element from a stored pool of challenge data elements. Selection of the data elements is based on rule data and stored usage data associated with at least some of the data elements in the stored pool of data elements.

摘要翻译： 方法，装置和/或系统产生用户认证的挑战，具有来自存储的挑战数据元素池的挑战数据元素。 所述挑战基于与存储的挑战数据元素池中的至少一些挑战数据元素相关联的规则数据和存储的使用数据。 生成的挑战被发送用于用户对发送者的认证。 方法，装置和/或系统还生成来自存储的挑战数据元素池的数据元素的发送者认证和对应的位置信息。 数据元素的选择基于与所存储的数据元素池中的至少一些数据元素相关联的规则数据和存储的使用数据。

公开(公告)号：US20060259873A1

公开(公告)日：2006-11-16

申请号：US10908494

申请日：2005-05-13

申请人： Serge Mister

发明人： Serge Mister

IPC分类号： G06F3/00

CPC分类号： G06F21/6209 ,  G06F21/606 ,  G06F21/83

摘要： A method and apparatus for protecting communication of information through a graphical user interface displays a graphical user interface that includes a trusted interaction window. In one example, the method includes continuously determining whether information has been overlayed on top of at least a portion of the displayed trusted interaction window and then disabling an operation being requested when an overlay condition has been determined. In one example, the trusted interaction window is maintained to be the top most window when it is called by an application, for example, during an online transaction, or any other suitable action. The trusted interaction window may be generated via a browser, or operating system, or any other suitable application. As such, the trusted interaction window detects when another window is overlayed on top of it, such as a chromeless window, thereby preventing an unscrupulous party from tricking the user or obtaining sensitive information. A user may be notified via any suitable notification that the trusted interaction window has been overlayed so that the user may take the appropriate action if desired.

摘要翻译： 通过图形用户界面保护信息通信的方法和装置显示包括可信交互窗口的图形用户界面。 在一个示例中，该方法包括连续地确定信息是否已覆盖在所显示的信任交互窗口的至少一部分之上，然后当已经确定了重叠条件时禁用所请求的操作。 在一个示例中，可信交互窗口被保持为当被应用程序调用时最顶层的窗口，例如在线交易期间，或任何其他合适的动作。 可信任的交互窗口可以经由浏览器，操作系统或任何其他合适的应用来生成。 因此，可信任的交互窗口检测何时将其他窗口重叠在其上，例如无色窗口，从而防止不道德的一方欺骗用户或获取敏感信息。 可以通过任何合适的通知来通知用户可信叠加的信任交互窗口，以便如果需要，用户可以采取适当的动作。

公开(公告)号：US08966579B2

公开(公告)日：2015-02-24

申请号：US11302058

申请日：2005-12-12

申请人： Serge Mister ,  Steve Neville ,  Robert J. Zuccherato ,  Chris Voice ,  Michael Morgan

发明人： Serge Mister ,  Steve Neville ,  Robert J. Zuccherato ,  Chris Voice ,  Michael Morgan

IPC分类号： G06F21/00 ,  H04L29/06 ,  H04L9/32 ,  G06Q20/34 ,  G06Q20/40 ,  G07F7/10 ,  G06Q10/10 ,  G06F21/36

CPC分类号： H04L9/3271 ,  G06F21/36 ,  G06F2221/2103 ,  G06F2221/2129 ,  G06Q10/107 ,  G06Q20/341 ,  G06Q20/4014 ,  G06Q20/40145 ,  G07F7/1008 ,  G07F7/1083 ,  H04L9/3228 ,  H04L2209/56 ,  H04L2209/80

摘要： A method, apparatus and/or system generates a challenge for user authentication, having a challenge data element from a stored pool of challenge data elements. The challenge is based on rule data and stored usage data associated with at least some of the challenge data elements in the stored pool of challenge data elements. The generated challenge is sent for use in an authentication of a user to a sender. A method, apparatus and/or system also generates sender authentication and corresponding location information, having a data element from a stored pool of challenge data elements. Selection of the data elements is based on rule data and stored usage data associated with at least some of the data elements in the stored pool of data elements.