Patent ID: 7447784
Filing Date: 2008-11-04
Classification: G06F,G06Q,H04L,H04W

Abstract:
1. A method of authenticating either a connection to an internet site server or an electronic payment in an electronic commerce server, the method comprising: at the internet site server or the electronic commerce server, recording identification information and a cellular phone number from a prospective user wishing to connect to the internet site server or to undertake the electronic payment; establishing communication from the internet site server or the electronic commerce server to an authentication server of a cellular phone company and relaying the identification information and the cellular phone number to the authentication server to initiate authentication of the prospective user by the authentication server based on a comparison of the identification information and recorded user information previously stored at the authentication server and associated with the cellular phone number; seeking confirmation that the prospective user is authorized either to connect to the internet site server or to undertake an electronic payment by having the authentication server transmit a request for approval to the cellular phone number supplied from the prospective user via the internet site server or the electronic commerce server, the transmission performed by a short message service that is independent from the earlier connection between the prospective user and the internet site server or electronic commerce server; at the authentication server, discriminating whether the prospective user uses the cellular phone identified by the cellular phone number in the identification information and, in response to the request for approval, if the prospective user transmits back to the authentication server a secret code previously stored in the authentication server as recorded user information associated with the cellular phone number; at the authentication server, only approving the authentication for connection or electronic payment when the transmitted secret code is identical to the previously stored secret code; from the authentication server, transmitting to the internet site server or the electronic commerce server an approval confirming the authority to connect to the internet site server or to undertake an electronic payment; and informing the user of the approved result through the internet site server or the electronic commerce server that received the confirmation of the authority to connect.