System and method to access secure information related to a user

• US 20020073339A1
• Filed: 12/06/2001
• Published: 06/13/2002
• Est. Priority Date: 12/07/2000
• Status: Abandoned Application

• Current Assignee: Sony Corporation (Sony Group Corp.), Sony Electronics Inc. (Sony Group Corp.)
• Original Assignee: Sony Corporation (Sony Group Corp.), Sony Electronics Inc. (Sony Group Corp.)
• Inventors: Card, Ronald C.
• Application Number:
  US10/017,988
• Publication Number:
  US 20020073339A1
• Time in Patent Office: Days
• US Class Current: 713/201
• CPC Class Codes: G06F 21/6245 Protecting personal data, e.g. for financial or medical purposes
• CPC Class Codes: G06F 2221/2115 Third party
• CPC Class Codes: G06Q 30/06 Buying, selling or leasing transactions

Abstract

A system and method to access secure information related to a user are described. Identification information related to a user is transmitted to an authentication entity. Access to a secure entity coupled to the authentication entity is received if authentication information identifying the user is provided to the secure entity.

Claims

1. A method comprising:

transmitting identification information related to a user to an authentication entity; and

receiving access to a secure entity coupled to said authentication entity if authentication information identifying said user is provided to said secure entity.

2. The method according to claim 1, wherein said transmitting further comprises:

transmitting at least one access question to said authentication entity, said at least one access question being tailored by said user based on said identification information in order to uniquely identify and authenticate said user.

3. The method according to claim 1, wherein said authentication information includes a level of authentication related to a location of said user when requesting said access.

4. The method according to claim 1, wherein said authentication information is based on a profile of said user stored in said authentication entity.

5. The method according to claim 4, wherein said profile contains said identification information related to said user and at least one level of authentication related to a location of said user when requesting said access.

6. The method according to claim 2, wherein said receiving further comprises:

receiving an authentication request from said secure entity;

transmitting said authentication request to said authentication entity;

receiving said at least one access question from said authentication entity; and

transmitting an answer to said at least one access question to said authentication entity to authenticate said user.

7. The method according to claim 2, wherein said receiving further comprises:

receiving said at least one access question from said authentication entity; and

transmitting an answer to said at least one access question to said authentication entity to authenticate said user.

8. The method according to claim 2, wherein said transmitting further comprises establishing biometric access to said authentication entity using a biometric control module.

9. The method according to claim 1, wherein said receiving further comprises:

receiving at least one access question from said authentication entity, said at least one access question being created by said authentication entity based on said identification information in order to uniquely identify and authenticate said user; and

providing an answer to said at least one access question to said authentication entity to authenticate said user.

10. The method according to claim 1, wherein said secure entity specifies a plurality of authenticated users to said authentication entity and said authentication entity stores said authentication information related to each authenticated user of said plurality of authenticated users.

11. The method according to claim 1, wherein said authentication entity is a transaction privacy clearing house (TPCH) server.

13. The method according to claim 12, wherein said authentication request is received directly from said secure entity.

14. The method according to claim 12, wherein said authentication request is received from a personal transaction device coupled to said user and to said secure entity.

15. The method according to claim 12, wherein said authentication information is transmitted directly to said secure entity.

16. The method according to claim 12, wherein said authentication information is transmitted to a personal transaction device coupled to said user and to said secure entity.

17. The method according to claim 12, further comprising:

receiving identification information related to said user from a personal transaction device coupled to said user and said secure entity, said identification information including said at least one access question; and

storing said at least one access question and at least one level of authentication in said profile within said access database, said at least one level of authentication being related to a location of said user when requesting said access.

18. The method according to claim 17, wherein said personal transaction device establishes biometric access to transmit said identification information using a biometric control module.

19. The method according to claim 12, wherein said authentication information includes a level of authentication related to a location of said user when requesting said access.

20. The method according to claim 12, further comprising:

receiving identification information related to said user from a personal transaction device coupled to said user and said secure entity;

creating said at least one access question based on said identification information; and

storing said at least one access question and at least one level of authentication in said profile within said access database, said at least one level of authentication being related to a location of said user when requesting said access.

12. A method comprising:

receiving an authentication request related to a user requesting access to a secure entity;

retrieving a profile of said user from an access database, said profile containing at least one access question uniquely identifying said user; and

transmitting authentication information to said secure entity based on an answer to said at least one access question received from said user.

21. A system comprising:

a personal transaction device connected to a user requesting access to a secure entity; and

an authentication entity connected to said personal transaction device and said secure entity to retrieve a profile of said user from an access database in response to an authentication request related to said user, said profile containing at least one access question uniquely identifying said user, and to transmit authentication information identifying said user to said secure entity, based on an answer to said at least one access question received from said user.

22. The system according to claim 21, wherein said authentication request is received directly from said secure entity.

23. The system according to claim 21, wherein said authentication request is received from said secure entity through said personal transaction device.

24. The system according to claim 21, wherein said authentication entity further transmits said authentication information directly to said secure entity.

25. The system according to claim 21, wherein said authentication entity further transmits said authentication information to said secure entity through said personal transaction device.

26. The system according to claim 21, wherein said authentication entity further receives identification information related to said user from said personal transaction device, said identification information including said at least one access question and further stores said at least one access question and at least one level of authentication in said profile within said access database, said at least one level of authentication being related to a location of said user when requesting said access.

27. The system according to claim 21, wherein said authentication information includes a level of authentication related to a location of said user when requesting said access.

28. The system according to claim 21, wherein said authentication entity further receives identification information related to said user from said personal transaction device, creates said at least one access question based on said identification information, and stores said at least one access question and at least one level of authentication in said profile within said access database, said at least one level of authentication being related to a location of said user when requesting said access.

29. The system according to claim 28, wherein said personal transaction device establishes biometric access to transmit said identification information using a biometric control module.

30. The system according to claim 21, wherein said personal transaction device receives said at least one access question from said authentication entity and transmits said answer to said authentication entity to authenticate said user.

31. An apparatus comprising:

means for transmitting identification information related to a user to an authentication entity; and

means for receiving access to a secure entity coupled to said authentication entity if authentication information identifying said user is provided to said secure entity.

32. The apparatus according to claim 31, further comprising:

means for transmitting at least one access question to said authentication entity, said at least one access question being tailored by said user based on said identification information in order to uniquely identify and authenticate said user.

33. The apparatus according to claim 32, further comprising:

means for receiving an authentication request from said secure entity;

means for transmitting said authentication request to said authentication entity;

means for receiving said at least one access question from said authentication entity; and

means for transmitting an answer to said at least one access question to said authentication entity to authenticate said user.

34. The apparatus according to claim 32, further comprising:

means for receiving said at least one access question from said authentication entity; and

means for transmitting an answer to said at least one access question to said authentication entity to authenticate said user.

35. The apparatus according to claim 32, further comprising means for establishing biometric access to said authentication entity using a biometric control module.

36. The apparatus according to claim 31, further comprising:

means for receiving at least one access question from said authentication entity, said at least one access question being created by said authentication entity based on said identification information in order to uniquely identify and authenticate said user; and

means for providing an answer to said at least one access question to said authentication entity to authenticate said user.

38. The apparatus according to claim 37, further comprising:

means for receiving identification information related to said user from a personal transaction device coupled to said user and said secure entity, said identification information including said at least one access question; and

means for storing said at least one access question and at least one level of authentication in said profile within said access database, said at least one level of authentication being related to a location of said user when requesting said access.

39. The apparatus according to claim 37, further comprising:

means for receiving identification information related to said user from a personal transaction device coupled to said user and said secure entity;

means for creating said at least one access question based on said identification information; and

means for storing said at least one access question and at least one level of authentication in said profile within said access database, said at least one level of authentication being related to a location of said user when requesting said access.

37. An apparatus comprising:

means for receiving an authentication request related to a user requesting access to a secure entity;

means for retrieving a profile of said user from an access database, said profile containing at least one access question uniquely identifying said user; and

means for transmitting authentication information to said secure entity based on an answer to said at least one access question received from said user.

40. A computer readable medium containing executable instructions, which, when executed in a processing system, cause said processing system to perform a method comprising:

transmitting identification information related to a user to an authentication entity; and

receiving access to a secure entity coupled to said authentication entity if authentication information identifying said user is provided to said secure entity.

41. The computer readable medium according to claim 40, wherein said transmitting further comprises:

transmitting at least one access question to said authentication entity, said at least one access question being tailored by said user based on said identification information in order to uniquely identify and authenticate said user.

42. The computer readable medium according to claim 41, wherein said receiving further comprises:

receiving an authentication request from said secure entity;

transmitting said authentication request to said authentication entity;

receiving said at least one access question from said authentication entity; and

transmitting an answer to said at least one access question to said authentication entity to authenticate said user.

43. The computer readable medium according to claim 41, wherein said receiving further comprises:

receiving said at least one access question from said authentication entity; and

transmitting an answer to said at least one access question to said authentication entity to authenticate said user.

44. The computer readable medium according to claim 41, wherein said transmitting further comprises establishing biometric access to said authentication entity using a biometric control module.

45. The computer readable medium according to claim 40, wherein said receiving further comprises:

receiving at least one access question from said authentication entity, said at least one access question being created by said authentication entity based on said identification information in order to uniquely identify and authenticate said user; and

providing an answer to said at least one access question to said authentication entity to authenticate said user.

47. The computer readable medium according to claim 46, wherein said method further comprises:

receiving identification information related to said user from a personal transaction device coupled to said user and said secure entity, said identification information including said at least one access question; and

storing said at least one access question and at least one level of authentication in said profile within said access database, said at least one level of authentication being related to a location of said user when requesting said access.

48. The computer readable medium according to claim 46, wherein said method further comprises:

receiving identification information related to said user from a personal transaction device coupled to said user and said secure entity;

creating said at least one access question based on said identification information; and

storing said at least one access question and at least one level of authentication in said profile within said access database, said at least one level of authentication being related to a location of said user when requesting said access.

46. A computer readable medium containing executable instructions, which, when executed in a processing system, cause said processing system to perform a method comprising:

receiving an authentication request related to a user requesting access to a secure entity;

retrieving a profile of said user from an access database, said profile containing at least one access question uniquely identifying said user; and

transmitting authentication information to said secure entity based on an answer to said at least one access question received from said user.