Patent ID: 8181232

Claim:
A computer-implemented method for secure user authentication in electronic commerce, comprising: maintaining on a transaction server electronic information having a first aspect, to which a user at a computing device is provided access over a first electronic communication channel in response to entry at the computing device of a first credential known to the user and a second aspect, to which the user at the computing device is provided access over the first electronic communication channel in response to entry at the computing device of a second credential provided to the user, said first electronic communication channel consisting at least in part of said computing device coupled over a network to the transaction server via an access server; pre-registering with a message server a delivery address on a second electronic communication channel that is different from the first electronic communication at which the second credential is provided to the user, said second electronic communication channel consisting at least in part of a telecommunication device coupled over a telecommunication network to the message server; providing the user successive current sessions of access to the first aspect of the electronic information by the access server in response to entry at the computing device of the first credential; providing by the message server a new second credential to the user at the pre-registered delivery address via the second electronic communication channel in response to a user log-off at a conclusion of each of said successive current sessions of user access to the first aspect for use during a single immediately succeeding session of user access to the first aspect only after first checking and confirming an absence of a change of delivery address flag set for the user, or if a change of delivery address flag for the user is present, after first confirming an expiration of a pre-determined period of time since the change of address flag was set for the user; and providing the user at the computing device a session of access to the second aspect of the electronic information by the access server via the first electronic communication channel in response to entry at the computing device of the new second credential during the single immediately succeeding session of user access to the first aspect.