Patent ID: 8055587

Claim:
A method for constructing a secure Internet transaction, the method comprising: receiving a user identification (userid) and user password on a client device for filling out a web site form generated by a secure web site maintained on a web site server; concatenating at the client device the user's Internet Protocol (IP) address with a separate password that is maintained by the web site server supporting the secure web site that the user is authenticating to; encrypting at the client device the concatenated user IP and separate password to form an Internet Protocol password (IPPW); wherein the encrypting is carried out with a client device linear feedback shift register (LFSR) with a defined cycle count; building at the client device a transaction request consisting of the IPPW, the defined cycle count, and the userid; transmitting the transaction request and filled out web site form via a network to the secure web site; receiving the transaction request and the filled out web site form at the secure web site; wherein in response to receiving the transmitted transaction request and the filled out web site form, the secure website performs the following: retrieving a secure LFSR from a table utilizing the userid from the received web site form; decrypting the IPPW with the defined cycle count, using the IPPW as a starting point in the secure LFSR; wherein the number of cycles from the defined cycle count is used to run the secure LFSR backwards to an intended register state; determining if the IP portion of the decrypted IPPW is equal to the user's IP address; and wherein in the event the IP portion of the decrypted IPPW is equal to the user's IP address, the secure website proceeds to request transaction data from the user and wherein in the event the IP portion of the decrypted IPPW is not equal to the user's IP address, the secure website determines that an authorization infraction has occurred, and the secure website does not respond to the transaction request.