US 12,288,211 B2
Secure authentication and transaction system and method
Raymond J. Gallagher, III, Colo De Caza, CA (US)
Assigned to Multiple Shift Key, Inc., Rancho Cucamonga, CA (US)
Filed by Multiple Shift Key, Inc., Rancho Cucamonga, CA (US)
Filed on Apr. 30, 2018, as Appl. No. 15/967,377.
Application 15/967,377 is a continuation of application No. 14/797,160, filed on Jul. 12, 2015, abandoned.
Application 14/797,160 is a continuation of application No. 12/978,105, filed on Dec. 23, 2010, granted, now 9,112,842, issued on Aug. 18, 2015.
Application 12/978,105 is a continuation of application No. 11/544,302, filed on Oct. 6, 2006, granted, now 7,861,077, issued on Dec. 28, 2010.
Claims priority of provisional application 60/724,691, filed on Oct. 7, 2005.
Prior Publication US 2019/0333062 A1, Oct. 31, 2019
Prior Publication US 2023/0196357 A9, Jun. 22, 2023
Int. Cl. G06Q 20/40 (2012.01); G06Q 20/38 (2012.01); H04L 9/30 (2006.01); H04L 9/40 (2022.01)
CPC G06Q 20/401 (2013.01) [G06Q 20/3829 (2013.01); G06Q 20/385 (2013.01); H04L 9/30 (2013.01); H04L 63/083 (2013.01); H04L 63/0853 (2013.01)] 41 Claims
OG exemplary drawing
 
1. A method of authenticating a plurality of client devices in an authentication server, comprising the steps of:
registering an application server site with the authentication server;
storing first authentication-enabling data unique to a client device of the plurality of client devices and information concerning one or more payment transaction activities enabled over a public computer network;
receiving a request, at the authentication server from the client device over a secure connection automatically established by a software program of a client token with a unique network address for the authentication server, responsive to actuation of the client token, to authenticate the client device to the application server site and the application server site to the client device for the one or more payment transaction activities over the public computer network;
authenticating the client device, at the authentication server, with encrypted second authentication-enabling data encrypted and sent by the software program of the client token in the request by decrypting the encrypted second authentication-enabling data and comparing to the first authentication-enabling data;
authenticating the application server site with a unique identifier by verifying a previous registration; and
responsive to authenticating the client device and the application server site, enabling the one or more payment transaction activities over the public computer network.