System for secure enrollment and secure verification of network users by a centralized identification service

• US 10,305,880 B2
• Filed: 06/02/2017
• Issued: 05/28/2019
• Est. Priority Date: 05/11/2001
• Status: Expired due to Term

• Current Assignee: Kount Incorporated (Equifax, Inc.)
• Original Assignee: Kount Incorporated (Equifax, Inc.)
• Inventors: Barber, Timothy P.
• Primary Examiner(s): Kim, Tae K
• Assistant Examiner(s): Pan, Peiliang
• Application Number:
  US15/612,117
• Publication Number:
  US 20170272424A1
• Time in Patent Office: 725 Days
• Field of Search: 726 3, 726 5
• CPC Class Codes: G06Q 20/3821 Electronic credentials
• CPC Class Codes: G06Q 30/06 Buying, selling or leasing transactions
• CPC Class Codes: G06Q 30/0609 Buyer or seller confidence or verification
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/0861 using biometrical features, e.g. fingerprint, retina-scan cryptographic mechanisms or cryptographic arrangements for entity authentication using biological data H04L9/3231
• CPC Class Codes: H04L 63/12 Applying verification of the received information cryptographic mechanisms or cryptographic arrangements for data integrity or data verification H04L9/32
• CPC Class Codes: H04L 63/126 the source of the received data

Abstract

A system and method for providing, as a service over a computer network (especially a packet-switched computer network) to a body of merchants connected to the computer network, verification of consumer identification based on data provided over the computer network by scanning devices attached to the computers operated by consumers.

Claims

1. A computer-implemented method for enrolling consumers, the method comprising:

receiving a request to enroll a consumer, the request including a merchant identifier uniquely identifying a merchant of a plurality of merchants and an identity of the consumer;

sending the consumer a web page with a script embedded in the web page, wherein the script contains code that causes a computer used by the consumer to automatically determine a scanning device connected to the computer used by the consumer;

confirming with the merchant associated with the merchant identifier that the request to enroll the consumer is initiated by the merchant;

determining whether the identity of the consumer in the request is for a new account; and

responsive to a determination that the identity of the consumer in the request is for a new account, generating a random value uniquely identifying a verification data item associated with the merchant identifier and the identity of the consumer in the request.

2. The method of claim 1, further comprising:

instructing the consumer in the request to perform a scan from the scanning device for verification at the merchant;

receiving a scanning result from the consumer; and

storing the scanning result as the verification data item that is associated with the merchant identifier and the identity of the consumer in the request.

3. The method of claim 2, wherein storing the scanning result comprises replacing a previously stored verification data item associated with the merchant identifier and the identity of the consumer with the scanning result.

4. The method of claim 1, further comprising:

transmitting the random value to the merchant as a verification of the consumer.

5. The method of claim 1, wherein the verification data item associated with the merchant identifier and the identity of the consumer is stored in a database storing a plurality of verification data items for a plurality of consumers, and each verification data item of the plurality of verification data items is uniquely identified by a random value generated from a random seed.

6. The method of claim 1, further comprising:

retrieving a random seed included in the request;

generating a random value based on the retrieved random seed for the verification data item associated with the merchant identifier and the identity of the consumer.

7. The method of claim 1, wherein determining whether the identity of the consumer in the request is for a new account comprises:

retrieving a new account indicator from the request, a value of the indicator being set by the merchant identified in the request.

8. The method of claim 1, further comprising:

responsive to a determination that the identity of the consumer in the request is not for a new account, determining whether a scanning result from the consumer matches verification data item associated with the merchant identifier and the identity of the consumer in the request.

9. The method of claim 8, further comprising:

responsive to a determination that the identity of the consumer in the request is not for a new account;

transmitting device-specific instructions to the consumer to activate the scanning device; and

receiving the scanning result from the consumer using the scanning device based on the device-specific instructions.

10. The method of claim 1, wherein generating the random value uniquely identifying the verification data item comprises:

receiving a string of a plurality of random alphanumeric characters selected by the merchant; and

generating the random value using the string of the plurality of random alphanumeric characters.

11. A non-transitory computer readable storage medium storing computer program code executed by a computer processor, comprising code for:

receiving a request to enroll a consumer, the request including a merchant identifier uniquely identifying a merchant of a plurality of merchants and an identity of the consumer;

sending the consumer a web page with a script embedded in the web page, wherein the script contains code that causes a computer used by the consumer to automatically determine a scanning device connected to the computer used by the consumer;

confirming with the merchant associated with the merchant identifier that the request to enroll the consumer is initiated by the merchant;

determining whether the identity of the consumer in the request is for a new account; and

responsive to a determination that the identity of the consumer in the request is for a new account, generating a random value uniquely identifying a verification data item associated with the merchant identifier and the identity of the consumer in the request.

12. The computer readable storage medium of claim 11, further comprising computer program code for:

instructing the consumer in the request to perform a scan from the scanning device for verification at the merchant;

receiving a scanning result from the consumer; and

storing the scanning result as the verification data item that is associated with the merchant identifier and the identity of the consumer in the request.

13. The computer readable storage medium of claim 12, wherein storing the scanning result comprises replacing a previously stored verification data item associated with the merchant identifier and the identity of the consumer with the scanning result.

14. The computer readable storage medium of claim 11, further comprising computer program code for:

transmitting the random value to the merchant as a verification of the consumer.

15. The computer readable storage medium of claim 11, wherein the verification data item associated with the merchant identifier and the identity of the consumer is stored in a database storing a plurality of verification data items for a plurality of consumers, and each verification data item of the plurality of verification data items is uniquely identified by a random value generated from a random seed.

16. The computer readable storage medium of claim 11, further comprising computer program code for:

retrieving a random seed included in the request;

generating a random value based on the retrieved random seed for the verification data item associated with the merchant identifier and the identity of the consumer.

17. The computer readable storage medium of claim 11, wherein determining whether the identity of the consumer in the request is for a new account comprises:

retrieving a new account indicator from the request, a value of the indicator being set by the merchant identified in the request.

18. The computer readable storage medium of claim 11, further comprising computer program code for:

responsive to a determination that the identity of the consumer in the request is not for a new account, determining whether a scanning result from the consumer matches verification data item associated with the merchant identifier and the identity of the consumer in the request.

19. The computer readable storage medium of claim 18, further comprising computer program code for:

responsive to a determination that the identity of the consumer in the request is not for a new account;

transmitting device-specific instructions to the consumer to activate the scanning device; and

receiving the scanning result from the consumer using the scanning device based on the device-specific instructions.

20. The computer readable storage medium of claim 11, wherein generating the random value uniquely identifying the verification data item comprises:

receiving a string of a plurality of random alphanumeric characters selected by the merchant; and

generating the random value using the string of the plurality of random alphanumeric characters.