Bank of America Corporation

Clay D Newton

Eric William Miller

Pavan K Chayanam

David Charles Shroyer

Todd Inskeep

A method for combating website spoofing can be used in connection with a website for a financial institution accessible by a plurality of users. Registration information is stored for a user having a financial account with the financial institution, including user login information and customization information for a website associated with the financial institution. A marker is issued, to be stored on a computer used by the user to access the website. At some point, a request is received from the user to display a webpage of the website on the computer, and the user is recognized based on the marker. A webpage is then provided to the computer, having an interface with an attribute customized according to the customization information. The user login information is entered via the website. Upon receiving the user login information, the user is provided access to the financial account.

System and method for consumer protection

Consistent one-time password (OTP) functionality is provided from a presentation server to secure various on-line resources. A seed file can be provided to or created by a service provider for execution as part of a hosted page displayed at a client to a user. A presentation server receives a call from the seed file. A user interface widget can be initialized at the presentation server in response to the call from the seed file. The widget can be displayed as part of the remotely hosted Web page so that the user perceives the UI widget to be embedded in the page as viewed on the client computer system. Security for the interaction between the servers can be provided through use of security assertion markup language (SAML).

Remote provision of consistent one-time password functionality for disparate on-line resources

A reusable authentication component may be integrated into a web page to communicate with an authentication server and authenticate a user to the web page. The reusable authentication component may implement a complex authentication process, including multiple user interfaces to receive multiple assurances of user identity and user confirmation of previously stored mutual authentication data. The authentication process may be performed by the authentication component without refreshing or redirecting the parent web page until completion of a successful user authentication, after which the parent web page may receive authentication data and refresh to provide user specific and/or secure user data on the web page.

Growing community of inventors

Napa, CA, United States of America

Clay D Newton