Patent ID: 6047268
Filing Date: 2000-04-04
Classification: G06Q

Abstract:
A method of authenticating a user for a transaction on a data network comprising:sending to a user's client terminal data containing a static information portion and a transaction-oriented dynamic portion, the static information portion identifying an account associated with the user and the transaction-oriented dynamic information portion containing information generated for that user that is valid for a single subsequent transaction;storing the transaction-oriented dynamic information portion in association with the static information portion;receiving, from the user's client terminal, the data containing the static information portion and the transaction-oriented dynamic information portion in association with information relating to the single subsequent transaction;identifying the user's account from the received static information portion;comparing the transaction-oriented dynamic information portion received from the user's client terminal with the transaction-oriented dynamic information portion stored in association with the static information portion; andauthenticating the user for the single subsequent transaction if the received transaction-oriented dynamic information portion matches the stored transaction-oriented dynamic information for the account associated with the user.