Oanh Ngoc Hoang

US Patent:

20110161289, Jun 30, 2011

Filed:

Dec 30, 2009

Appl. No.:

12/649829

Inventors:

Mingliang Pei - Palo Alto CA, US
Oanh Hoang - Fremont CA, US
Ruiping Sun - Fremont CA, US
John Huang - San Ramon CA, US

Assignee:

VeriSign, Inc. - Mountain View CA

International Classification:

G06F 17/30
G06F 21/00

US Classification:

707613, 707803, 707783, 707634, 707E17005, 707E17032, 707E17044

Abstract:

Systems and methods for synchronizing verification data in a distributed database including client and server databases. The server database may exchange verification data regarding one-time passwords to multiple client databases. An update to the server database may be initiated based on information stored in the client database by pushing updated verification information from the client database to the server database via an SSL tunnel. An update to the client database may be initiated based on information stored in the server database by pulling updated verification data from the server database to the client database via an SSL tunnel. The client database and the server database may include a two-dimensional data field including the verification data and an associated key identifier, and a site ID. The site ID may include a unique identifier to identify the respective database in which it is included. The data field may include a sequence number assigned to each row of data that increases every time the row of information is updated. The client database and the server database may also include a replication tracking table including a record of the last known update to a remote database. Data fields that require updating may be determined based on the site ID and a comparison of the sequence numbers from the replication tracking table and the server's database.

US Patent:

20140250008, Sep 4, 2014

Filed:

Mar 15, 2013

Appl. No.:

13/843664

Inventors:

- Mountain View CA, US
Oanh Hoang - Mountain View CA, US
Eirik Herskedal - Mountain View CA, US

International Classification:

G06Q 20/38

US Classification:

705 44

Abstract:

Techniques are disclosed for authenticating transactions conducted over computer networks, e.g., online banking transactions or other transactions performed by a financial institution at a customer's request. After receiving a transaction request (and associated transaction details), the transaction signing service signs the transaction data and sends the resulting blob to the user requesting the transaction. After being transmitted to the user, the signed transaction data itself is then signed using PKI credentials of the user, which then returns the twice-signed bundle to the financial institution. Rather than rely on the cryptographic signature of the client, the financial intuition (or other replying party) validates that the transaction data signed using its own highly trusted key has not been altered prior to being signed and returned by the client