Method and system for identity verification for e-transactions

• US 20020083008A1
• Filed: 12/22/2000
• Published: 06/27/2002
• Est. Priority Date: 12/22/2000
• Status: Abandoned Application

• Current Assignee: Albert L. Bessey, Brian C. Bartlett, Christopher F. Smith, Dan Murray, Richard A. Stewart, Robert J. Mossi, Ron Kopolovic, Steven E. Brenner, Victor Beck
• Original Assignee: Albert L. Bessey, Brian C. Bartlett, Christopher F. Smith, Dan Murray, Richard A. Stewart, Robert J. Mossi, Ron Kopolovic, Steven E. Brenner, Victor Beck
• Inventors: Brenner, Steven E., Smith, Christopher F., Stewart, Richard A., Murray, Dan, Kopolovic, Ron, Beck, Victor, Bartlett, Brian C., Bessey, Albert L., Mossi, Robert J.
• Application Number:
  US09/747,746
• Publication Number:
  US 20020083008A1
• Time in Patent Office: Days
• US Class Current: 705/64
• CPC Class Codes: G06Q 20/00 Payment architectures, schemes or protocols apparatus for performing or posting payment transactions G07F7/08, G07F19/00; electronic cash registers G07G1/12
• CPC Class Codes: G06Q 20/18 involving self-service terminals [SST], vending machines, kiosks or multimedia terminals
• CPC Class Codes: G06Q 20/351 Virtual cards
• CPC Class Codes: G06Q 20/382 insuring higher security of transaction
• CPC Class Codes: G06Q 20/4014 Identity check for transactions
• CPC Class Codes: G06Q 30/02 Marketing; Price estimation or determination; Fundraising

Abstract

A user of a verification system registers directly at the verification system web site or by proxy at the time of engaging in an e-transaction through a vendor'"'"'s web site. Upon registration, the user provides personal information in a secure environment. The verification system checks the database to cross-reference the user-provided information with the government-certified, or non-government certified data stored in the verification system databases. The verification system then creates a unique identifier and a digital identification badge. The user inputs the unique identifier into the system at the start of an e-transaction and the digital identification badge is securely transmitted from the verification system to the vendor in response to the unique identifier. The vendor decrypts the digital identification badge to confirm that the user is authorized to make a particular e-transaction.

Claims

1. A method for personal identification and authentication, comprising the steps of:

a) creating a first central database of certified personal information;

b) creating a second central database to store digital identification badge data;

c) collecting over the Internet user personal information from a user requesting a digital identification badge;

d) transferring said user personal information to a verification station over the Internet using a secure transmission protocol;

e) cross-referencing said user personal information with said certified personal information to certify, deny, or determine inconclusive evidence for creating a digital identification badge;

f) if a digital identification badge is not certified in step e),

i) storing said user personal information in said second central database;

ii) notifying said user of badge status with instructions for corrective action;

g) if a digital identification badge is certified in step e),

i) creating a digital identification badge;

ii) storing personal information in said digital identification badge;

iii) storing said digital identification badge in said second central database;

iv) providing over the Internet using said secure transmission protocol, access to said encrypted digital identification badge to said user for use in facilitating transactions and purchases over the Internet.

2. The method of claim 1 wherein said certified personal information further comprises government data.

3. The method of claim 1 wherein said certified personal information further comprises data from a non-government institution.

4. The method of claim 3 wherein said non-government institution is a bank.

5. The method of claim 3 wherein said non-government institution is an insurance company.

6. The method of claim 3 wherein said non-government institution is a credit bureau.

7. The method of claim 1 wherein said user personal information further comprises biometric data.

8. The method of claim 1 wherein said collecting step further comprises collecting said user personal information from a user.

9. The method of claim 8 wherein said collecting step further comprises collecting said user personal information from a user through an on-line vendor.

10. A personal authentication/identification method for creating a digital identification badge, comprising the steps of:

a) providing a central information database of certified personal information;

b) creating a central badge database for the storing personal information of users and incorruptible digital identification badges;

c) receiving a request for a digital identification badge from a user, said request containing personal information from said user;

d) encrypting said request for a digital identification badge;

e) transferring said encrypted request to a verification site;

f) checking said personal information in said request with said certified personal information to determine whether said user is eligible for a digital identification badge;

g) storing said personal information in said central badge database;

h) if said user is eligible for a digital identification badge,

i) creating a digital identification badge for said user;

ii) storing said digital identification badge for said user;

iii) encrypting certified personal information in said digital identification badge; and

,

iv) providing over the Internet access to said encrypted digital identification badge to said user for use in facilitating transactions and purchases over the Internet.

11. The method of claim 10 wherein step a) further comprises providing a central certified information database of government data.

12. The method of claim 10 wherein step a) further comprises providing a central certified information database of data from a non-government institution.

13. The method of claim 12 wherein said non-government institution is a bank.

14. The method of claim 12 wherein said non-government institution is an insurance company.

17. The process of claim 16 wherein the personal information provided by said first party as a component of said transaction is personal information related to said transaction.

18. The process of claim 16 wherein said information provided by said third party for comparison in step (c) to said certificate information is provided subsequent to step (a).

19. The process of claim 16 wherein step (c) is performed by said third party as a proxy for said second party.

20. The process of claim 16 wherein said personal information is biometric data.

21. The process of claim 16 wherein said electronic transaction is an e-commerce transaction and further comprising the steps of:

receiving by said second party an order from said first party for an item; and

providing by said second party said item to said first party in response to said order and said certificate of identity.

22. The process of claim 16 wherein said electronic transaction is an e-pharmacy transaction and further comprising the steps of:

receiving by said second party a prescription for said first party; and

providing by second party a prescription item to said first party in response to said prescription and said certificate of identity.

23. The process of claim 16 wherein said electronic transaction is an e-government transaction and further comprising the steps of:

receiving by said second party a vote from said first party; and

authenticating said vote in response to said certificate of identity.

25. The system of claim 24 wherein the personal information provided by the first party is personal information related to the transaction.

26. The system of claim 24 wherein said means for submitting further comprises a secure network link transmission.

27. The system of claim 24 wherein said secure network link transmission further comprises Secure Lockets Layer communication.

28. The system of claim 24 wherein said secure network link transmission further comprises a public key encryption scheme transmission.

29. The system of claim 24 wherein said personal information provided by the first party is biometric data.

15. A method of buyer identity verification for e-commerce, comprising the steps of:

a) providing a database of certified personal data;

b) receiving buyer-submitted personal data and a request for a unique identification from a buyer;

c) validating said buyer-submitted personal data with said certified personal data;

d) if said buyer-submitted personal data validates,

i) creating a unique identification for said buyer; and

ii) storing said unique identification in anticipation of confirming said unique identification to vendors servicing said buyer.

16. A process for verification of the identity of a first party in an electronic transaction with a second party, said process comprising the steps of:

a) submitting by said first party to said second party a non-governmental third party certificate of said identity, said certificate including personal information of said first party and certified information provided by said third party; and

subsequently

b) comparing by said second party or its proxy said personal information to personal information provided by said first party as a component of said transaction; and

c) comparing by said second party or its proxy of said certificate information to information provided by said third party for said first party;

said steps performed during substantially a single session of communication.

24. A system for identity verification of a first party by a second party in a transaction, comprising:

a) means for submitting by the first party to the second party an identity certificate having personal information of the first party and certified information provided by a third party;

b) personal information comparing means for comparing by said second party said identity certificate personal information to personal information provided by the first party; and

c) certificate information comparing means for comparing by said second party said identity certificate third party information to information provided by the third party for the first party,

whereby verification of said identity certificate personal information and said identity certificate certified information verifies to said second party the identity of the first party.

30. A system for personal identity verification, comprising:

a first secure link between a vendor and a customer to be used by said customer for transmitting personal information to said vendor;

a verification system having a database of certified personal information;

a second secure link between said vendor and said verification system;

a database builder having links to at least one source of certified personal information, said database builder providing periodic updates to said database of certified personal information; and

a data comparison subsystem for comparing said customer personal information with said certified personal information,

said verification system issuing a customer badge if said customer personal information is verified.

31. The system of claim 30 wherein said at least one source of certified personal information comprises a government agency.

32. The system of claim 30 wherein said government agency is a Department of Motor Vehicles.

33. The system of claim 30 wherein said at least one source of certified personal information comprises a non-government agency.

34. The system of claim 33 wherein said non-government agency is an insurance company.

35. The system of claim 33 wherein said non-government agency is a bank.

38. The system of claim 37 wherein said verification further comprises a digital certificate to be forwarded by the vendor to the customer.

40. The verification system of claim 39 further comprising:

an encryption subsystem for encrypting verification transmissions verifying the identity of a requester.

36. A verification system for verifying identity (of which age is a subset of) of persons for Internet-commerce, comprising:

a secure link for use by vendors and customers for transmitting customer personal information to the verification system;

a database of certified personal information;

a verification processor for comparing customer personal information transmitted over said secure link with said certified personal information, said verification processor for generating a unique identifier in response to verification of said customer personal information; and

a database of storing said transmitted personal information and said unique identifier for use in authorizing Internet-commerce transactions by said customer.

37. A system for a vendor to verify identity of a customer, comprising:

means for receiving personal information from the customer;

means for establishing a secure link to a verification station;

means for forwarding said received personal information over said secure link;

means for receiving verification from said verification station in response to said received personal information,

whereby the vendor approves a transaction with the customer in response to receiving said verification.

39. A verification system for identity verification comprising:

a first database of user data to store user personal information and associated unique identifiers and digital identification badges;

a second database to store certified data; and

a processor to build the first database by verifying user data with certified data and to created a unique identifier and a digital identification badge in response to verified user data.