Using successive levels of authentication in online commerce

摘要

A method comprising performing following acts on a network server: receiving a communication from a client terminal operated by a client; performing a first authentication of the client terminal or client; in response to the first authentication, delivering a first service to the client; after delivering the first service, sending an offer for a second service to the client terminal; receiving an acceptance message for the second service from the client terminal; performing a second authentication of the client terminal and/or the client; in response to receiving the acceptance message for the second service from the client terminal and to the second authentication being successful, delivering a second service to the client; wherein the first authentication and the second authentication use different authentication techniques. Other aspects include a programmed data processing apparatus for carrying out the method and a tangible program carrier instructing the apparatus to perform the acts.

主权项

1. A method comprising:
performing following acts on a network server: receiving a communication from a mobile terminal operated by a client; performing a first authentication of the mobile terminal and/or the client; in response to the first authentication being successful, delivering a first service to the client; after delivering the first service to the client, sending an offer for a second service to the mobile terminal; receiving an acceptance message for the second service from the mobile terminal; performing a second authentication of the mobile terminal and/or the client; in response to receiving the acceptance message for the second service from the mobile terminal and to the second authentication being successful, delivering the second service to the client; wherein the first authentication and the second authentication use different authentication techniques; wherein the second authentication comprise: randomly selecting one of a finite number of telecommunication addresses by which the network server is accessible; using the randomly selected telecommunication address in an offer message from the network server to the mobile terminal; authenticating the mobile terminal and/or the client if a reply message to the offer message is received from the mobile terminal at the randomly selected telecommunication address.