The patent badge is an abbreviated version of the USPTO patent document. The patent badge does contain a link to the full patent document.
The patent badge is an abbreviated version of the USPTO patent document. The patent badge covers the following: Patent number, Date patent was issued, Date patent was filed, Title of the patent, Applicant, Inventor, Assignee, Attorney firm, Primary examiner, Assistant examiner, CPCs, and Abstract. The patent badge does contain a link to the full patent document (in Adobe Acrobat format, aka pdf). To download or print any patent click here.
Patent No.:
Date of Patent:
Apr. 30, 2013
Filed:
Jun. 22, 2010
Robert S. Philpott, Andover, MA (US);
Yong Qiao, Acton, MA (US);
Michael J. O'malley, Lowell, MA (US);
Daniel V. Bailey, Pepperell, MA (US);
Robert S. Philpott, Andover, MA (US);
Yong Qiao, Acton, MA (US);
Michael J. O'Malley, Lowell, MA (US);
Daniel V. Bailey, Pepperell, MA (US);
EMC Corporation, Hopkinton, MA (US);
Abstract
A transaction system combats malware and phishing-based MitM attacks on transaction processing systems by using digital signatures to integrity-protect the user-verified transaction data. With this system, a user submits a transaction from a client device (e.g., desktop web browser) over a communications channel to a server device, such as a transaction server. Before accepting the transaction, the transaction server securely delivers all relevant transaction data to a second device (e.g., the signing device), such as a smart phone, in the possession of the user. The signing device has its own distinct communication channel with the server device. The user verifies the data and the signing device creates a digital signature value for the transaction. The user submits the signature to the transaction server to confirm the transaction with the transaction server.