Centralized identity authentication for electronic communication networks

• US 20010037451A1
• Filed: 03/02/2001
• Published: 11/01/2001
• Est. Priority Date: 03/06/2000
• Status: Active Grant

• Current Assignee: CardinalCommerce Corporation (Visa, Inc.)
• Original Assignee: CardinalCommerce Corporation (Visa, Inc.)
• Inventors: Sherwin, Francis M., Bhagavatula, Ravishankar S., Bowman, Jeffry J., Balasubramanian, Chandra S., Keresman, Michael A. III
• Granted Patent: US 7,140,036 B2
• Time in Patent Office: Days
• US Class Current: 713/155
• CPC Class Codes: G06F 21/31 User authentication
• CPC Class Codes: G06F 21/445 by mutual authentication, e.g. between devices or programs
• CPC Class Codes: G06Q 20/4014 Identity check for transactions
• CPC Class Codes: G06Q 30/06 Buying, selling or leasing transactions
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/083 using passwords cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226

Abstract

A method of centralized identity authentication for use in connection with a communications network includes registering users of the communications network such that each registered user'"'"'s identity is uniquely defined and determinable, and registering a plurality of vendors having a presence on the communications network. The registered vendors selectively transact with registered users, wherein the transactions include: (i) the registered vendor selling goods and/or services to the registered user; (ii) the registered vendor granting the registered user access to personal records maintained by the registered vendor; and/or (iii) the registered vendor communicating to the registered user personal information maintained by the registered vendor. The method also includes each user'"'"'s identity being authenticated over the communications network prior to completion of transactions between registered vendors and registered users.

Claims

1. A method of centralized identity authentication for use in connection with a communications network comprising:

(a) registering users of the communications network such that each registered user'"'"'s identity is uniquely defined and determinable;

(b) registering a plurality of vendors having a presence on the communications network, said registered vendors selectively transacting with registered users, said transactions including at least one of;

(i) the registered vendor selling at least one of goods and services to the registered user;

(ii) the registered vendor granting the registered user access to personal records maintained by the registered vendor; and

,

(iii) the registered vendor communicating to the registered user personal information maintained by the registered vendor; and

,

(c) authenticating each user'"'"'s identity over the communications network prior to completion of transactions between registered vendors and registered users.

2. The method according to

claim 1

, further comprising:

(d) communicating results of the authentication to at least one of the registered user and the registered vendor involved in the transaction.

3. The method according to

claim 1

, further comprising:

(d) authorizing the completion of transactions between registered vendors and registered users.

4. The method according to

claim 3

, wherein the user'"'"'s identity is withheld from the vendor.

5. The method according to

claim 1

, wherein the authentication is carried out using at least two-factor authentication.

6. The method according to

claim 1

, wherein the vendors are selected from a group consisting of governmental agencies, medical-records keepers, financial institutions, credit card companies, insurance organizations, credit bureaus, pharmaceutical concerns and retail concerns.

7. The method according to

claim 1

, wherein the method further comprises notifying the registered user when a non-authentic user attempts to transact with a registered vendor posing as the registered user.

8. The method according to

claim 1

, wherein registering users comprises:

obtaining personal data related to the users; and

,

verifying the users'"'"' identities.

9. The method according to

claim 8

, wherein verifying the users identities is accomplished by comparing for consistency the personal data obtained with corresponding personal data maintained by registered vendors.

10. A centralized identity authentication system comprising:

a computer connected to a communications network;

means for registering users of the communications network such that each registered user'"'"'s identity is uniquely defined and determinable;

means for registering a plurality of vendors having a presence on the communications network;

a central database accessible by the computer, said central database containing accounts created by the registering means for each registered user and each registered vendor, said accounts including records of data collected by the registering means; and

,

means for authenticating registered users'"'"' identities, said authentication means collecting authentication data from users over the communication network and comparing it to corresponding data from account records in the central database such that when there is a match the user providing the authentication data is deemed to be the registered user which holds the account.

11. The centralized authentication system according to

claim 10

, wherein the communications network is the Internet.

12. The centralized authentication system according to

claim 10

, wherein the vendors are selected from a group consisting of governmental agencies, medical-records keepers, financial institutions, credit card companies, insurance organizations, credit bureaus, pharmaceutical concerns and retail concerns.

13. The centralized authentication system according to

claim 10

, further including means for communicating results of the authentication to at least one of respective users and vendors involved in transactions with one another.

14. The centralized authentication system according to

claim 10

, further including means for notifying a true registered user of a failed authentication attempt carried out by the authentication means on an imposter.