Source: https://patents.google.com/patent/US8776225B2/en
Timestamp: 2019-07-18 05:20:12
Document Index: 23099770

Matched Legal Cases: ['Application No. 2', 'Application No. 2570045', 'Application No. 2667233', 'Application No. 2667279', 'Application No. 200580022148', 'Application No. 200580022148', 'Application No. 200580022148', 'Application No. 200580022148', 'Application No. 2007', 'Application No. 05758533', 'Application No. 05758533', 'Application No. 07844618', 'Application No. 07844618', 'Application No. 2007', 'Application No. 2007', 'Application No. 200580022148', 'Application No. 2007', 'Application No. 200580022148', 'Application No. 2']

US8776225B2 - Network security and fraud detection system and method - Google Patents
US8776225B2
US8776225B2 US11/058,846 US5884605A US8776225B2 US 8776225 B2 US8776225 B2 US 8776225B2 US 5884605 A US5884605 A US 5884605A US 8776225 B2 US8776225 B2 US 8776225B2
US20050278542A1 (en
This application is a continuation in part and claims priority under 35 USC 120 to U.S. patent application Ser. No. 10/867,871, filed on Jun. 14, 2004 now U.S. Pat. No. 7,272,728 entitled “Network Security and Fraud Detection System and Method” which is incorporated herein by reference.
In step 210, if the NDF status for the network device is acceptable to the particular Host, it is determined if the NDI status for the particular network device is acceptable for any other Host identified by the particular Host as being trusted. In particular, individual network devices may connect to several networks protected by this system and therefore the NDI may be associated with multiple hosts. Upon trying to connect to Host 1, the NDI status for Host 1may be clear, while the NDI status for other hosts is marked as ‘bad’. In accordance with the invention, each Host can identify other hosts that are ‘trusted’, whereby if the NDI status is ‘bad’ for any other trusted Host, network access would be denied independent of the NDI status for Host 1. This step prevents fraud by a user that might have a bad status on a first network service provider but not on a second network service provider and thus shares information about a “bad” network device that is identified by a particular NDI. If the NDI status is not acceptable to any trusted hosts, the method is aborted in step 203 and access is denied.
1. A computer implemented method for use with a system comprising a plurality of network service providers each configured to provide a service, and a network device configured to connect to at least one of the plurality of network service providers over a communications network and when so connected, to use the service or services provided by the at least one of the plurality of network service providers, the method comprising:
gathering, by at least one hardware processor, information about the network device used to obtain a device identifier that identifies the network device;
associating the device identifier with one or more reputation factors;
generating a reputation for the network device based on an evaluation of the one or more reputation factors associated with the device identifier; and
sharing the reputation with the plurality of network service providers for use thereby to detect fraud associated with use of the network device across the plurality of network service providers.
generating a network device identifier for the network device that uniquely identifies the network device in combination with the device identifier.
validating the network device on a periodic basis or a random basis.
validating the network device upon connection of the network device to one of the plurality of network service providers.
validating the network device when the network device logs onto one of the plurality of network service providers.
validating the network device when the network device performs a transaction with one of the plurality of network service providers.
validating the network device each time that the network device re-connects to one of the plurality of network service providers.
8. The method of claim 1, wherein the reputation factors further comprise one or more of end-user account information provided by one of the plurality of network service providers, a credit card account number of a user, a fingerprint of the user, an email address of the user, a phone number of the user, a physical address of the user, and a cellular phone number of the user.
9. A network security and fraud detection and prevention system for use with a plurality of network service providers configured to provide services, and a network device configured to connect to the network service providers over a communications network, the system comprising:
one or more processors connected to the one or more storage devices, the one or more storage devices storing instructions executable by the one or more processors that when executed thereby implement a method comprising:
obtaining a device identifier that uniquely identifies the network device;
generating a reputation for the network device based on an evaluation of the one or more reputation factors; and;
sharing the reputation with the plurality of network service providers for use thereby to detect fraudulent use of the network device.
10. The system of claim 9, wherein the method further comprises storing a plurality of records on the one or more storage devices, each record further comprising:
a host field containing an identifier of a particular one of the plurality of network service providers,
a user account information field containing information from the particular network service provider that identifies a particular user, and
the device identifier that uniquely identifies the network device.
generating a network device identifier for the network device that uniquely identifies the network device in combination with the device identifier; and
transmitting the network device identifier to the network device.
13. The system of claim 9, wherein the method further comprises validating the network device on a periodic basis or a random basis.
14. The system of claim 9, wherein the method further comprises validating the network device upon connection of the network device to one of the plurality of network service providers.
15. The system of claim 9, wherein the method further comprises validating the network device when the network device logs onto one of the plurality of network service providers.
16. The system of claim 9, wherein the method further comprises validating the network device when the network device performs a transaction with one of the plurality of network service providers.
17. The system of claim 9, wherein the method further comprises validating the network device each time that the network device re-connects to one of the plurality of network service providers.
20. The system of claim 9, wherein the network device further comprises one of a cellular phone, a personal digital assistant, a laptop computer, a personal computer and a telephone.
21. The system of claim 9, wherein the one or more reputation factors further comprise one or more of end-user account information provided by one of the plurality of network service providers, a credit card account number of a user, a fingerprint of the user, an email address of the user, a phone number of the user, a physical address of the user, and a cellular phone number of the user.
22. The method of claim 1, wherein the evaluation of the one or more reputation factors associated with the device identifier further comprises:
cross-correlating the one or more reputation factors to generate the reputation.
23. The method of claim 1, wherein the evaluation of the one or more reputation factors associated with the device identifier further comprises:
selecting a portion of the one or more reputation factors associated with the device identifier; and
evaluation only the selected portion of the one or more reputation factors.
receiving information related to at least a portion of the one or more reputation factors from one or more of the plurality of network service providers, wherein generating the reputation for the network device based on the evaluation of the one or more reputation factors associated with the device identifier further comprises evaluating the information received.
receiving the one or more reputation factors from a first one of the plurality of network service providers; and
receiving information related to at least a portion of the one or more reputation factors from one or more of the plurality of network service providers other than the first network service provider, wherein generating the reputation for the network device based on the evaluation of the one or more reputation factors associated with the device identifier further comprises evaluating the information received.
receiving the one or more reputation factors from at least one of the plurality of network service providers.
obtaining a device identifier that identifies a network device;
receiving one or more reputation factors from a first one of a plurality of network service providers, the one or more reputation factors being associated with a user or a user account;
associating the device identifier with the one or more reputation factors;
receiving information from a second one of the plurality of network service providers related to at least a portion of the one or more reputation factors;
sharing the information received and the one or more reputation factors with the plurality of network service providers; and
at one or more of the plurality of network service providers, generating a reputation for the network device based on an evaluation of the information related to the portion of the one or more reputation factors associated with the device identifier, and using the reputation to detect fraud associated with use of the network device across the plurality of network service providers.
28. The method of claim 27, wherein the reputation is generated and used by one of the plurality of network service providers other than the first network service provider.
29. A system comprising a plurality of network service providers for use with a network device configured to connect to each of the plurality of network service providers over a communications network, at least one of the plurality of network service providers comprising:
associating a device identifier with the network device;
obtaining one or more reputation factors associated with the device identifier from others of the plurality of network service providers;
generating a reputation for the network device based on the evaluation of the one or more reputation factors; and
detecting fraud associated with use of the network device across the plurality of network service providers.
30. The system of claim 29, wherein the evaluation of the one or more reputation factors comprises:
evaluating only the selected portion of the one or more reputation factors.
downloading a client application to the network device, the client application being configured to gather information about the network device, generate the device identifier that identifies the network device based on the information gathered, and transmit the device identifier.
32. The system of claim 31, wherein the client application is embedded in another software application or a stand-alone software application.
33. The system of claim 31, wherein the at least one of the plurality of network providers automatically downloads the client application to the network device.
34. The system of claim 31, wherein the at least one of the plurality of network providers automatically downloads the client application to the network device when the network device connects to the at least one of the plurality of network providers.
35. A system for use with a network device configured to connect to the system over a communications network, the system comprising:
a fraud detection server comprising one or more storage devices, and one or more processors connected to the one or more storage devices, the one or more storage devices storing instructions executable by the one or more processors that when executed thereby implement a method comprising obtaining a device identifier associated with the network device, the device identifier being associated with one or more reputation factors; and
a plurality of network service providers connected to the fraud detection server, each of the plurality of network service providers comprising one or more storage devices, and one or more processors connected to the one or more storage devices, the one or more storage devices storing instructions executable by the one or more processors that when executed thereby implement a method comprising generating a reputation for the network device based on an evaluation of the one or more reputation factors associated with the device identifier, and sharing the reputation with others of the plurality of network service providers for use thereby to detect fraudulent use of the network device.
36. The system of claim 35, wherein the one or more reputation factors further comprise one or more of end-user account information provided by one of the plurality of network service providers, a credit card account number of a user, a fingerprint of the user, an email address of the user, a phone number of the user, a physical address of the user, and a cellular phone number of the user.
37. The system of claim 35, wherein the evaluation comprises:
38. The system of claim 35, wherein the evaluation comprises:
39. The method of claim 1, wherein the evaluation comprises:
filtering the one or more reputation factors associated with the device identifier to thereby filter out a first portion of the one or more reputation factors associated with the device identifier; and
evaluating a second portion of the one or more reputation factors associated with the device identifier that were not filtered out to generate the reputation.
US20050278542A1 US20050278542A1 (en) 2005-12-15
US8776225B2 true US8776225B2 (en) 2014-07-08
JP5778728B2 (en) * 2013-09-06 2015-09-16 東芝テック株式会社 Commodity sales data processing apparatus and program
CN109067715A (en) * 2013-11-15 2018-12-21 阿里巴巴集团控股有限公司 A kind of verification method and device
CN104683286B (en) * 2013-11-27 2018-01-02 中国银联股份有限公司 Safety information exchange systems and devices
US6425085B2 (en) 1997-07-17 2002-07-23 Canon Kabushiki Kaisha Terminal device and method for requesting user certification from host computer
US20020162029A1 (en) 2001-04-25 2002-10-31 Allen Keith Joseph Method and system for broadband network access
CN1469583A (en) 2002-07-16 2004-01-21 北京创原天地科技有限公司 Method of sharing subscriber confirming information in different application systems of internet
WO2005125073A2 (en) 2004-06-14 2005-12-29 Iovation, Inc. Network security and fraud detection system and method
US20060004558A1 (en) 1997-09-16 2006-01-05 Bankes Steven C System and method for performing compound computational experiments
US20060080536A1 (en) 1999-07-02 2006-04-13 Time Certain, Llc. System and method for distributing trusted time
US20060129835A1 (en) 1999-07-02 2006-06-15 Kimberly Ellmore System and method for single sign on process for websites with multiple applications and services
US20080063161A1 (en) 1998-09-15 2008-03-13 Upaid Systems Enhanced communication platform and related communication method using the platform
US20080083017A1 (en) 2006-09-29 2008-04-03 Iovation Inc. Methods and apparatus for securely signing on to a website via a security website
US20080167966A1 (en) 2004-10-26 2008-07-10 The Coca-Cola Company Transaction System and Method
US20080174603A1 (en) 2006-12-27 2008-07-24 Iovation, Inc. Visualizing object relationships
US20090134215A1 (en) 1998-04-17 2009-05-28 Diebold Self-Service Systems Division Of Diebold, Incorporated Check accepting cash dispensing automated banking machine system and method
WO2008042871A2 (en) 2006-09-29 2008-04-10 Iovation Inc. Methods and apparatus for securely signing on to a website via a security website
WO2008130440A1 (en) 2006-10-25 2008-10-30 Iovation, Inc. Creating and verifying globally unique device-specific identifiers
WO2008052128A3 (en) 2006-10-25 2008-11-20 Scott Franklin Detecting and preventing man-in-the middle phishing attacks
WO2008052132A3 (en) 2006-10-25 2008-06-26 Iovation Inc Pattern-based filtering of query input
CA2667279A1 (en) 2006-10-25 2008-10-30 Ron Lunde Creating and verifying globally unique device-specific identifiers
WO2008082672A3 (en) 2006-12-27 2010-01-21 Iovation, Inc. Visualizing object relationships
Canadian Patent Application No. 2,570,045: Examiner's Report issued from Canadian Intellectual Property Office on Jan. 11, 2013, 2 pages.
Canadian Patent Application No. 2570045, Examiner's Report issued by CIPO dated May 31, 2012, 5 pages.
Canadian Patent Application No. 2667233, Official Action issued by CIPO dated Mar. 25, 2011, 3 pages.
Canadian Patent Application No. 2667279, Official Action issued by CIPO dated Apr. 11, 2012, 2 pages.
Chinese Office Action for Application Serial No. 2011080900572420 dated Aug. 12, 2011, 4 pages.
Chinese Patent Application No. 200580022148.4: Official Action issued from State Intellectual Property Office of The People's Republic of China on Jul. 3, 2009 with English translation attached thereto, 15 pages.
Chinese Patent Application No. 200580022148.4: Official Action issued from State Intellectual Property Office of The People's Republic of China on Mar. 8, 2010 with English translation attached thereto, 12 pages.
Chinese Patent Application No. 200580022148.4: Official Action issued from State Intellectual Property Office of The People's Republic of China on Oct. 9, 2010 with English translation attached thereto, 15 pages.
Chinese Patent Application No. 200580022148.4: Official Action issued from State Intellectual Property Office of The People's Republic of China on Sep. 5, 2008 with English translation attached thereto, 10 pages.
Conti, et al., "Visual Exploration of Malcious Network Objects Using Semantic Zoom, Interactive Encoding and Dynamic Queries," IEEE, Workshop on Visualization for Computer Security, Oct. 26, 2005, pp. 83-90.
Determination-ReExam Ordered received in U.S. Patent Reexamination Control No. 90/011,499, dated Apr. 29, 2011, 13 pages.
Determination—ReExam Ordered received in U.S. Patent Reexamination Control No. 90/011,499, dated Apr. 29, 2011, 13 pages.
Eick, et al., "Visualizing Corporate Data," 1997, IEEE, pp. 6-11.
Eick, et al., "Visualizing Corporate Data," Jan. 1996, AT&T Technical Journal, pp. 1-25.
English Abstract of JP 2007-052688, obtained from espace.net on Jan. 6, 2011, 1 page.
English Abstract of JP 2007-087079, obtained from espace.net on Janaury 6, 2011, 1 page.
English translation provided by Yuasa and Hara of Japanese Patent Application No. 2007-516658: Notice of Reason for Rejection issued from Japanese Intellectual Property Office on Jul. 12, 2012, 6 pages.
English Translation, CN1353383, Method and System for transaction of Electronic File, Published Jun. 12, 2002.
English Translation, CN1469583, Method for Sharing User Authentication Information among Different Application System in the Internet, Published Jan. 21, 2004.
European Patent Convention Application No. 05758533.3: European Search Report issued from the European Patent Office on Apr. 21, 2009, 2 pages.
European Patent Convention Application No. 05758533.3: Official Action issued from the European Patent Office on Jun. 4, 2009, 10 pages.
European Patent Convention Application No. 07844618.4, Supplemental European Search Report issued from EPO on Mar. 30, 2010, 2 pages.
European Patent Convention Application No. 07844618.4: European Search Report issued from the European Patent Office on Apr. 9, 2010, 5 pages.
Final Office Action issued in U.S. Appl. No. 13/230,508, dated Jul. 23, 2013.
Final Rejection received in U.S. Appl. No. 11/840,124, dated Mar. 11, 2011, 18 pages.
Final Rejection received in U.S. Patent Reexamination Control No. 90/011,499, dated Feb. 17, 2012, 10 pages.
Flaim, Denise, "The E-Shopper/If Security Fails, Disaster Isn't Always in the Cards," Newsday (Long Island, N.Y.), Section C07; May 23, 2001.
Gordon, Marcy; "SEC Beefing Up Internet Surveillance- Automated System to Search for Telltale Words, Phrases that Could Indicate Fraud," Journal Star (Peoria, IL); Section A07; Mar. 29, 2000.
Information Disclosure Statement Trasmittal Letter filed herewith on May 30, 2013, 2 pages.
International Patent Application No. PCT/US2005/021034, Written Opinion and International Preliminary Report on Patentability of the International Searching Authority dated Jun. 11, 2007, 4 pages.
International Patent Application No. PCT/US2005/021034: International Search Report dated Jun. 11, 2007, 2 pages.
International Patent Application No. PCT/US2005/026525: International Search Report dated Dec. 22, 2006, 3 pages.
International Patent Application No. PCT/US2007/026525, Written Opinion and International Preliminary Report on Patentability of the International Searching Authority dated Nov. 30, 2009, 5 pages.
International Patent Application No. PCT/US2007/080117, Written Opinion and Preliminary Report on Patentability of the International Searching Authority dated Jul. 16, 2008, 6 pages.
International Patent Application No. PCT/US2007/080117: International Search Report dated Jul. 16, 2008, 3 pages.
International Patent Application No. PCT/US2007/082553, Written Opinion and Preliminary Report on Patentability of the International Searching Authority dated Jun. 24, 2008, 4 pages.
International Patent Application No. PCT/US2007/082553: International Search Report dated Jun. 24, 2008, 2 pages.
International Patent Application No. PCT/US2007/082557, Written Opinion and International Preliminary Report on Patentability of the International Searching Authority dated Jun. 13, 2008, 4 pages.
International Patent Application No. PCT/US2007/082557: International Search Report dated Jun. 13, 2008, 2 pages.
International Patent Application No. PCT/US2007/082559, Written Opinion and International Preliminary Report on Patentability of the International Searching Authority dated Mar. 25, 2009, 4 pages.
International Patent Application No. PCT/US2007/082559: International Search Report dated Mar. 25, 2009, 3 pages.
International Patent Application No. PCT/US2009/042184, International Preliminary Report on Patentability dated Nov. 2, 2010, 1 page.
International Patent Application No. PCT/US2009/042184, Written Opinion of International Searching Authority dated Nov. 18, 2009, 3 pages.
International Patent Application No. PCT/US2009/042184: International Search Report dated Nov. 18, 2009, 3 pages.
International Search Report received in International Application No. PCT/US2005/021034, dated Jun. 11, 2007, 2 pages.
Japanese Patent Application No. 2007-516658, Notice of Reasons for Rejection dated Jul. 12, 2012, 6 pages.
Japanese Patent Application No. 2007-516658, Notice of Reasons for Rejection dated May 27, 2011, 3 pages.
Keefe et al., "E-Mail Scam Cites Bogus ‘Fraud Alert’ from Best Buy," Palm Beach Post (West Palm Beach, FL); Section 6A; Jun. 21, 2003, (Abstract only).
List of Pending Claims for Chinese Patent Application No. 200580022148.4 filed Jun. 14, 2005, 7 pages.
Listing of Pending Claims for Japanese Application No. 2007/516658, which is the National phase of International Application No. PCT/US2005/021034, filed Jun. 14, 2005, 7 pages.
Livnat, et al., "A Visualization paradigm for Network Intrusion Detection," Jun. 2005, IEEE, pp. 30-37.
Non-Final Action received in U.S. Patent Reexamination Control No. 90/011,499, dated Jul. 29, 2011 11 pages.
Non-Final Office Action dated Mar. 1, 2013, received in U.S. Appl. No. 11/923,572, 12 pages.
Non-Final Office Action dated Mar. 7, 2013, received in U.S. Appl. No. 13/085,418, 18 pages.
Non-Final Office Action issued in U.S. Appl. No. 13/230,508, dated Dec. 19, 2013.
Non-Final Office Action issued in U.S. Appl. No. 13/763,422, dated Aug. 16, 2013.
Notice of Allowance dated May 7, 2013, received in U.S. Appl. No. 11/923,572, 10 pages.
Notice of Allowance issued in U.S. Appl. No. 11/923,572, dated Sep. 13, 2013.
Notice of Allowance issued in U.S. Appl. No. 13/085,418, dated Oct. 23, 2013.
Notice of Allowance received in U.S. Appl. No. 11/923,572, dated Jan. 7, 2014.
Notice of Intent to Issue a ReExam received in U.S. Patent Reexamination Control No. 90/011,499, dated May 21, 2012, 6 pages.
Notification for Patent Registration Formalities for Chinese Application No. 200580022148.4 dated Jan. 19, 2012, 4 pages.
Office Action issued in Canadian Patent Application No. 2,667,279, dated Nov. 15, 2013.
Office Action, U.S. Appl. No. 11/840,124, Aug. 27, 2009.
Office Action, U.S. Appl. No. 11/840,124, Mar. 5, 2010.
Official Action issued by SIPO of China in Chinese Publication No. 101142570 (English translation provided by associate only), dated Oct. 8, 2008, 10 pages.
Official Action issued by SIPO of China in Chinese Publication No. 101142570, dated Aug. 12, 2011, 7 pages.
Official Action issued by SIPO of China in Chinese Publication No. 101142570, dated Jul. 3, 2009, 24 pages.
Official Action issued by SIPO of China in Chinese Publication No. 101142570, dated Mar. 8, 2010, 19 pages.
Official Action issued by SIPO of China in Chinese Publication No. 101142570, dated Oct. 9, 2010, 24 pages.
Pimpler, "Google Maps API-The New World of Web Mapping," Apr. 2006, Geospatial Training & Consulting, LLC, pp. 1-44.
Pimpler, "Google Maps API—The New World of Web Mapping," Apr. 2006, Geospatial Training & Consulting, LLC, pp. 1-44.
Restriction Requirement received in U.S. Appl. No. 11/840,124, dated Mar. 5, 2010, 6 pages.
Restriction Requirement received in U.S. Appl. No. 13/230,508, dated Aug. 9, 2012, 6 pages.
U.S. Appl. No. 10/867,871, filed Jun. 14, 2004: Non-Final Office Action dated Mar. 23, 2007, 5 pages.
U.S. Appl. No. 10/867,871, filed Jun. 14, 2004: Notice of Allowance dated Jul. 12, 2007, 4 pages.
U.S. Appl. No. 11/840,124, filed Aug. 16, 2007.
U.S. Appl. No. 11/840,124, filed Aug. 16, 2007: Non-Final Office Action dated Aug. 17, 2010, 9 pages.
U.S. Appl. No. 11/863,603, filed Sep. 28, 2007: Non-Final Office Action dated Jun. 17, 2008, 8 pages.
U.S. Appl. No. 11/863,603, filed Sep. 28, 2007: Notice of Allowance dated Dec. 16, 2008, 6 pages.
U.S. Appl. No. 11/923,561, Advisory Action dated Jun. 8, 2011, 3 pages.
U.S. Appl. No. 11/923,561, filed Oct. 24, 2007.
U.S. Appl. No. 11/923,561, filed Oct. 24, 2007: Non-Final Office Action dated Sep. 15, 2010, 10 pages.
U.S. Appl. No. 11/923,561, Final Rejection dated Aug. 16, 2012, 13 pages.
U.S. Appl. No. 11/923,561, Final Rejection dated Mar. 30, 2011, 10 pages.
U.S. Appl. No. 11/923,561, Non-Final Office Action dated Jan. 19, 2012, 16 pages.
U.S. Appl. No. 11/923,572, filed Oct. 24, 2007.
U.S. Appl. No. 11/923,572, filed Oct. 24, 2007: Non-Final Office Action dated Sep. 20, 2010, 10 pages.
U.S. Appl. No. 11/923,572, Final Rejection dated May 9, 2011, 14 pages.
U.S. Appl. No. 11/923,572, Non-Final Office Action dated Jun. 4, 2012, 11 pages.
U.S. Appl. No. 11/923,580, filed Oct. 24, 2007.
U.S. Appl. No. 11/923,580, filed Oct. 24, 2007: Final Rejection dated Dec. 13, 2010, 9 pages.
U.S. Appl. No. 11/923,580, filed Oct. 24, 2007: Final Rejection dated Feb. 24, 2010, 7 pages.
U.S. Appl. No. 11/923,580, Final Rejection dated Dec. 13, 2010, 9 pages.
U.S. Appl. No. 11/923,580, Non-Final Office Action dated Jun. 7, 2011, 10 pages.
U.S. Appl. No. 11/923,580, Non-Final Office Action dated May 24, 2012, 8 pages.
U.S. Appl. No. 11/964,572, filed Dec. 26, 2007.
U.S. Appl. No. 12/432,714, filed Apr. 29, 2009.
U.S. Appl. No. 12/432,714, Final Rejection dated Nov. 28, 2011, 15 pages.
U.S. Appl. No. 12/432,714, Non-Final Office Action dated Mar. 30, 2011, 15 pages.
U.S. Appl. No. 13/085,418, filed Apr. 12, 2011.
U.S. Appl. No. 13/085,418, filed Apr. 12, 2011: Final Office Action dated Oct. 15, 2012, 19 pages.
U.S. Appl. No. 13/085,418, Non-Final Office Action dated May 22, 2012, 19 pages.
U.S. Appl. No. 13/230,508, filed Sep. 12, 2011.
U.S. Appl. No. 13/230,508, filed Sep. 12, 2011: Non-Final Office Action dated Jan. 29, 2013, 15 pages.
Yee, et al., "Passpet: Convenient Password Management and Phishing Protection," ACM 2006, SOUPS, 12 pages.
ES2420158T3 (en) 2013-08-22 System and method for a login block unauthorized network using a stolen password
JP5147336B2 (en) 2013-02-20 The method for authenticating a user seeking to perform a electronic service request, the system, and program