Service assisted reliable transaction signing

US9704158B2 · kind B2 · utility

Assignee

• Symantec Corporation · US

Inventors

• Alan Dundas · Los Altos Hills, US
• Oanh Hoang · Mountain View, US
• Eirik Herskedal · Issaquah, US

Key dates

• Filing date: Mar 15, 2013
• Grant date: Jul 11, 2017
• Expiry date: Apr 2, 2035

Classification

• Technology area (CPC G): Physics
• CPC primary: G06Q20/40
• WIPO field: IT methods for management
• WIPO sector: Electrical engineering

Abstract

Techniques are disclosed for authenticating transactions conducted over computer networks, e.g., online banking transactions or other transactions performed by a financial institution at a customer's request. After receiving a transaction request (and associated transaction details), the transaction signing service signs the transaction data and sends the resulting blob to the user requesting the transaction. After being transmitted to the user, the signed transaction data itself is then signed using PKI credentials of the user, which then returns the twice-signed bundle to the financial institution. Rather than rely on the cryptographic signature of the client, the financial intuition (or other replying party) validates that the transaction data signed using its own highly trusted key has not been altered prior to being signed and returned by the client.