System for detecting unauthorized account access

US5696824A · kind A · utility

Assignee

• E-Comm Incorporated · US

Inventor

• Joe Walsh · Denver, US

Key dates

• Filing date: Jun 7, 1995
• Grant date: Dec 9, 1997
• Expiry date: Jun 7, 2015

Classification

• Technology area (CPC G): Physics
• CPC primary: G06Q20/4037
• WIPO field: IT methods for management
• WIPO sector: Electrical engineering

Abstract

A method and system for detecting unauthorized account access. The system may operate in conjunction with known methods of remote access authentication. The system provides a unique account for each authorized person (i.e., each user) and a system sequence number and a user sequence number for each account. For each access to the account, the system updates the system sequence number corresponding to that account to the next number in a preselected sequence, and the user updates the user sequence number in like manner. The preselected sequence comprises a sequence of pseudorandom numbers and the update comprises selecting the next pseudorandom number using a pseudorandom number generator, but the sequence number may be updated using other techniques, so long as the system and the user are both capable of performing the same updates. The system and the user perform a handshake process, to assure that the system updates the system sequence number, and the user updates the user sequence number, in synchrony. Normally, the system sequence number and the user sequence number will be the same, but when there is an authorized access by third party the system will update the system sequenc…