Listing Owner Authentication via Out-of-Band Verification Codes
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Online service providers face challenges in verifying the authenticity of users modifying public listings, leading to potential unauthorized changes that can harm businesses' reputations or divert customers, as existing verification methods like email and bank account verification are easily circumvented.
Innovation Solution
A method involving generating a verification code using a hashing algorithm combining user and listing identifiers, secret strings, and delivery via postal mail or voicemail, ensuring only the listing owner receives and inputs the code to authenticate ownership.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Productivity
If email or bank account verification is used to verify listing ownership, then the verification process can be automated and completed quickly, but the verification method can be easily circumvented by unauthorized users
Solution Approach 1:
The patent introduces postal mail and voicemail as intermediary channels for delivering verification codes. These traditional communication methods serve as mediators between the online service provider and the listing owner, creating a secure out-of-band verification path that cannot be easily compromised by unauthorized users who only have web access. The verification code is transmitted through a separate physical communication channel rather than through the potentially compromised online system.
Solution Approach 2:
The patent replaces electronic verification methods (email, bank account verification) with traditional mechanical communication systems (postal mail delivery, voicemail systems). This substitution leverages the inherent security of physical delivery systems that require actual physical presence or access to receive the verification code, making remote unauthorized verification significantly more difficult.
2Ease of operation
If no verification is required for listing modifications, then the ease of operation for legitimate owners is maximized, but unauthorized users can freely modify listings and harm business reputations
Solution Approach 1:
The patent implements preliminary verification action before allowing listing modifications. The system sends a verification code to the listing owner through secure channels (postal mail or voicemail) before permitting any modifications. This preliminary security check ensures that only authorized owners can access the modification functionality, preventing unauthorized users from making harmful changes while still allowing legitimate owners to modify their listings conveniently.
3Speed
If verification codes are delivered electronically, then the delivery process is fast and automated, but the codes can be intercepted or guessed by unauthorized users
Solution Approach 1:
The patent uses postal mail and voicemail systems as intermediary delivery channels for verification codes. These traditional communication media provide a secure transmission path that is not susceptible to electronic interception or guessing attacks. The physical nature of postal delivery and the access requirements for voicemail systems create inherent security barriers that protect the verification codes from unauthorized access while maintaining automated delivery capabilities.
Data Source
AI summary
A method and apparatus for verifying that a user is the owner of a public listing is provided. The user selects an option to claim ownership of the public listing offered by an online service provider. The online service provider uses information regarding the user and the public listing to generate a verification code. The online service provider delivers the verification code to the owner of the public listing via the contact information provided by the public listing. If the user owns the public listing, the user receives the verification code via contact information associated with the public listing. The user verifies ownership by inputting a code to the online service provider. If the inputted code matches the verification code, then the online service provider identifies the user as the owner of the listing. Once verified, the user modifies the listing.