Method and system for verifying identity

• US 20030204725A1
• Filed: 10/30/2002
• Published: 10/30/2003
• Est. Priority Date: 04/26/2002
• Status: Active Grant

• Current Assignee: Safety Angle Inc.
• Original Assignee: Safety Angle Inc.
• Inventors: Takagawa, Tomokazu, Itoi, Masayuki
• Granted Patent: US 8,060,918 B2
• Time in Patent Office: Days
• US Class Current: 713/168
• CPC Class Codes: G06Q 20/04 Payment circuits
• CPC Class Codes: G06Q 20/322 Aspects of commerce using mobile devices [M-devices]
• CPC Class Codes: G06Q 20/382 insuring higher security of transaction
• CPC Class Codes: G06Q 20/385 using an alias or single-use codes
• CPC Class Codes: G06Q 20/425 using two different networks, one for transaction and one for security confirmation
• CPC Class Codes: G07C 9/21 having a variable access code

Abstract

Verification facilitating company or companies X and verifying company or companies (e.g., credit service company or companies) Y may respectively manage member ID(s) and password(s) of user(s) 1 in mutually separate and mutually secret fashion. User(s) 1 may send member ID(s) to verification facilitating company or companies X from mobile telephone(s) 2, and verification facilitating company or companies X may use originating telephone number(s) and/or member ID(s) to carry out first-stage identity check(s). In the event of positive verification of identity as a result of such identity check(s), verification facilitating company or companies X may issue one-time ID(s) to user(s) 1 and may communicate such one-time ID(s) to verifying company or companies (e.g., credit service company or companies) Y. User(s) 1 may send one-time ID(s) and password(s) to verifying company or companies (e.g., credit service company or companies) Y from company or companies (e.g., store or stores) Z. Verifying company or companies (e.g., credit service company or companies) Y may use one-time ID(s) and password(s) to carry out second-stage identity check(s), and in the event of positive verification of identity as a result of such identity check(s), may provide credit transaction processing or other such service(s).

Claims

1. A method for verifying identity comprising:

a. a step wherein only first key or keys of one or more users possessing both first key or keys and second key or keys is or are saved by one or more first systems;

b. a step wherein only second key or keys of at least one of the user or users possessing both first key or keys and second key or keys is or are saved by one or more second systems;

c. a step wherein at least one of the first system or systems

i. receives input of data purporting to be at least one of the first key or keys from one or more parties purporting to be at least one of the user or users and

ii. carries out one or more first-stage identity checks by comparing at least one of the input purported first key or keys to at least one of the saved first key or keys of at least one of the user or users;

d. if at least one positive verification of identity is made at at least one of the first-stage identity check or checks, a step wherein at least one of the first system or systems causes one or more one-time IDs to be issued to at least one of the user or users;

e. a step wherein at least one of the first system or systems communicates to at least one of the second system or systems at least one of the one-time ID or IDs issued to at least one of the user or users;

f. a step wherein at least one of the second system or systems saves at least one of the one-time ID or IDs communicated thereto by the at least one first system;

g. a step wherein at least one of the second system or systems

i. receives input of data purporting to be at least one of the second key or keys and at least one of the one-time ID or IDs and

ii. carries out one or more second-stage identity checks by comparing at least one of the input purported second key or keys and at least one of the input purported one-time ID or IDs to at least one of the saved second key or keys and at least one of the saved one-time ID or IDs of at least one of the user or users; and

h. a step wherein provision of one or more services to at least one of the user or users is controlled in correspondence to at least one result of at least one of the second-stage identity check or checks.

2. A method for verifying identity according to claim 1 further comprising:

a. a step wherein at least one of the first system or systems saves one or more identification numbers of one or more mobile communication terminals of at least one of the user or users;

b. the step at which one or more first-stage identity checks is or are carried out being such that

i. input of data purporting to be at least one of the first key or keys is received by way of one or more mobile communication terminals from at least one of the party or parties purporting to be at least one of the user or users and

ii. at least one of the first-stage identity check or checks is carried out by comparing at least one of the input purported first key or keys and at least one identification number of at least one of the mobile communication terminal or terminals used for input thereof to at least one of the saved first key or keys and at least one of the saved identification number or numbers of at least one of the mobile communication terminal or terminals of at least one of the user or users.

3. A method for verifying identity according to claim 1 further comprising:

a. a step wherein at least one of the first system or systems saves one or more facial images of at least one of the user or users;

b. the step at which one or more one-time IDs is or are issued being such that, in addition to the one or more one-time IDs, at least one of the saved facial image or images of at least one of the user or users is issued to at least one of the user or users in such fashion as to permit display thereof by at least one of the user or users.

4. A method for verifying identity comprising:

a. a step wherein only first key or keys of one or more users possessing both first key or keys and second key or keys is or are saved by one or more first systems;

b. a step wherein only second key or keys of at least one of the user or users possessing both first key or keys and second key or keys is or are saved by one or more second systems;

c. a step wherein at least one of the first system or systems

i. receives input of data purporting to be at least one of the first key or keys from one or more parties purporting to be at least one of the user or users and

ii. carries out one or more first-stage identity checks by comparing at least one of the input purported first key or keys to at least one of the saved first key or keys of at least one of the user or users;

d. if at least one positive verification of identity is made at at least one of the first-stage identity check or checks, a step wherein at least one of the first system or systems causes one or more first one-time IDs to be issued to at least one of the user or users;

e. a step wherein at least one of the first system or systems communicates to at least one of the second system or systems at least one of the first one-time ID or IDs issued to at least one of the user or users;

f. a step wherein at least one of the second system or systems saves at least one of the first one-time ID or IDs communicated thereto by the at least one first system;

g. a step wherein at least one of the second system or systems

i. receives input of data purporting to be at least one of the second key or keys and at least one of the first one-time ID or IDs from one or more parties purporting to be at least one of the user or users and

ii. carries out one or more second-stage identity checks by comparing at least one of the input purported second key or keys and at least one of the input purported first one-time ID or IDs to at least one of the saved second key or keys and at least one of the saved first one-time ID or IDs of at least one of the user or users;

h. if at least one positive verification of identity is made at at least one of the second-stage identity check or checks, a step wherein at least one of the second system or systems causes one or more second one-time IDs to be issued to at least one of the user or users;

i. a step wherein at least one of the second system or systems

i. receives input of data purporting to be at least one of the first one-time ID or IDs and at least one of the second one-time ID or IDs and

ii. carries out one or more third-stage identity checks by comparing at least one of the input purported first one-time ID or IDs and at least one of the input purported second one-time ID or IDs to at least one of the saved first one-time ID or IDs and at least one of the saved second one-time ID or IDs of at least one of the user or users; and

j. a step wherein provision of one or more services to at least one of the user or users is controlled in correspondence to at least one result of at least one of the third-stage identity check or checks.

5. A system for verifying identity comprising:

a. one or more first systems that saves or save only first key or keys of one or more users possessing both first key or keys and second key or keys; and

b. one or more second systems that saves or save only second key or keys of at least one of the user or users possessing both first key or keys and second key or keys;

c. at least one of the first system or systems comprising

i. means

1. for receiving input of data purporting to be at least one of the first key or keys from one or more parties purporting to be at least one of the user or users and

2. for carrying out one or more first-stage identity checks by comparing at least one of the input purported first key or keys to at least one of the saved first key or keys of at least one of the user or users;

ii. if at least one positive verification of identity is made at at least one of the first-stage identity check or checks, means for causing one or more one-time IDs to be issued to at least one of the user or users; and

iii. means for communicating at least one of the one-time ID or IDs issued to at least one of the user or users to at least one of the second system or systems;

d. at least one of the second system or systems comprising

i. means for saving at least one of the one-time ID or IDs communicated thereto by the at least one first system; and

ii. means

1. for receiving input of data purporting to be at least one of the second key or keys and at least one of the one-time ID or IDs and

2. for carrying out one or more second-stage identity checks by comparing at least one of the input purported second key or keys and at least one of the input purported one-time ID or IDs to at least one of the saved second key or keys and at least one of the saved one-time ID or IDs of at least one of the user or users;

e. provision of one or more services to at least one of the user or users being capable of being controlled in correspondence to at least one result of at least one of the second-stage identity check or checks.

6. A system for verifying identity according to claim 5 wherein

a. the at least one first system further comprises means for saving one or more identification numbers of one or more mobile communication terminals of at least one of the user or users;

b. the means at the at least one first system for carrying out one or more first-stage identity checks being such that

i. input of data purporting to be at least one of the first key or keys is received by way of one or more mobile communication terminals from at least one of the party or parties purporting to be at least one of the user or users and

ii. at least one of the first-stage identity check or checks is carried out by comparing at least one of the input purported first key or keys and at least one identification number of at least one of the mobile communication terminal or terminals used for input thereof to at least one of the saved first key or keys and at least one of the saved identification number or numbers of at least one of the mobile communication terminal or terminals of at least one of the user or users.

7. A system for verifying identity according to claim 5 wherein

a. the at least one first system further comprises means for saving one or more facial images of at least one of the user or users;

b. the means at the at least one first system for issuing one or more one-time IDs being such that, in addition to the one or more one-time IDs, at least one of the saved facial image or images of at least one of the user or users is issued to at least one of the user or users in such fashion as to permit display thereof by at least one of the user or users.

8. A system for verifying identity comprising:

a. one or more first systems that saves or save only first key or keys of one or more users possessing both first key or keys and second key or keys; and

b. one or more second systems that saves or save only second key or keys of at least one of the user or users possessing both first key or keys and second key or keys;

c. at least one of the first system or systems comprising

i. means

1. for receiving input of data purporting to be at least one of the first key or keys from one or more parties purporting to be at least one of the user or users and

2. for carrying out one or more first-stage identity checks by comparing at least one of the input purported first key or keys to at least one of the saved first key or keys of at least one of the user or users;

ii. if at least one positive verification of identity is made at at least one of the first-stage identity check or checks, means for causing one or more first one-time IDs to be issued to at least one of the user or users; and

iii. means for communicating at least one of the first one-time ID or IDs issued to at least one of the user or users to at least one of the second system or systems;

d. at least one of the second system or systems comprising

i. means for saving at least one of the first one-time ID or IDs communicated thereto by the at least one first system;

ii. means

1. for receiving input of data purporting to be at least one of the second key or keys and at least one of the first one-time ID or IDs from one or more parties purporting to be at least one of the user or users and

2. for carrying out one or more second-stage identity checks by comparing at least one of the input purported second key or keys and at least one of the input purported first one-time ID or IDs to at least one of the saved second key or keys and at least one of the saved first one-time ID or IDs of at least one of the user or users;

iii. if at least one positive verification of identity is made at at least one of the second-stage identity check or checks, means for causing one or more second one-time IDs to be issued to at least one of the user or users; and

iv. means

1. for receiving input of data purporting to be at least one of the first one-time ID or IDs and at least one of the second one-time ID or IDs and

2. for carrying out one or more third-stage identity checks by comparing at least one of the input purported first one-time ID or IDs and at least one of the input purported second one-time ID or IDs to at least one of the saved first one-time ID or IDs and at least one of the saved second one-time ID or IDs of at least one of the user or users;

e. provision of one or more services to at least one of the user or users being capable of being controlled in correspondence to at least one result of at least one of the third-stage identity check or checks.

9. A method for facilitating verification of identity by one or more verifying systems that uses or use second key or keys of one or more users possessing both first key or keys and second key or keys to carry out verification of identity of one or more parties purporting to be at least one of the user or users, the method comprising:

a. step wherein only first key or keys of at least one of the user or users possessing both first key or keys and second key or keys is or are saved, at least one of the saved first key or keys being kept secret from at least one of the verifying system or systems;

b. a step wherein at least one of the saved first key or keys of at least one of the user or users is used to carry out one or more preliminary identity checks;

c. if at least one positive verification of identity is made at at least one of the preliminary identity check or checks, a step wherein one or more one-time IDs are issued to at least one of the user or users; and

d. a step wherein at least one of the one-time ID or IDs issued to at least one of the user or users is communicated to at least one of the verifying system or systems;

e. whereby at least one of the verifying system or systems is made capable of using at least one of the second key or keys and at least one of the one-time ID or IDs to verify identity of one or more parties purporting to be at least one of the user or users.

10. A method for facilitating verification of identity according to claim 9 further comprising:

a. a step wherein one or more identification numbers of one or more mobile communication terminals of at least one of the user or users is or are saved;

b. the step at which one or more preliminary identity checks is or are carried out being such that

i. communication is established with at least one of the party or parties purporting to be at least one of the user or users by way of one or more mobile communication terminals and,

ii. in addition to the at least one first key, at least one identification number of at least one of the mobile communication terminal or terminals used to establish the communication is used to carry out at least one of the preliminary identity check or checks.

11. A system for facilitating verification of identity by one or more verifying systems that uses or use second key or keys of one or more users possessing both first key or keys and second key or keys to carry out verification of identity of one or more parties purporting to be at least one of the user or users, the system comprising:

a. means for saving only first key or keys of at least one of the user or users possessing both first key or keys and second key or keys, at least one of the saved first key or keys being kept secret from at least one of the verifying system or systems;

b. means for using at least one of the saved first key or keys of at least one of the user or users to carry out one or more preliminary identity checks;

c. if at least one positive verification of identity is made at at least one of the preliminary identity check or checks, means for issuing one or more one-time IDs to at least one of the user or users; and

d. means for communicating at least one of the one-time ID or IDs issued to at least one of the user or users to at least one of the verifying system or systems;

e. whereby at least one of the verifying system or systems is made capable of using at least one of the second key or keys and at least one of the one-time ID or IDs to verify identity of one or more parties purporting to be at least one of the user or users.

12. A system for facilitating verification of identity according to claim 11 further comprising:

a. means for saving one or more identification numbers of one or more mobile communication terminals of at least one of the user or users;

b. the means for carrying out one or more preliminary identity checks being such that

i. communication is established with at least one of the party or parties purporting to be at least one of the user or users by way of one or more mobile communication terminals and,

ii. in addition to the at least one first key, at least one identification number of at least one of the mobile communication terminal or terminals used to establish the communication is used to carry out at least one of the preliminary identity check or checks.

13. A method for verifying identity as facilitated by one or more verification facilitating systems that uses or use first key or keys of one or more users possessing both first key or keys and second key or keys to carry out one or more first-stage identity checks of one or more parties purporting to be at least one of the user or users, the method comprising:

a. a step wherein only second key or keys of at least one of the user or users possessing both first key or keys and second key or keys is or are saved, at least one of the saved second key or keys being kept secret from at least one of the verification facilitating system or systems;

b. if at least one positive verification of identity is made at at least one of the first-stage identity check or checks carried out by at least one of the verification facilitating system or systems, a step wherein one or more one-time IDs issued to at least one of the user or users is or are received from at least one of the verification facilitating system or systems;

c. a step wherein at least one of the one-time ID or IDs received from the verification facilitating system or systems is saved; and

d. a step wherein at least one of the saved second key or keys and at least one of the saved one-time ID or IDs of at least one of the user or users are used to carry out one or more second-stage identity checks of one or more parties purporting to be at least one of the user or users.

14. A system for verifying identity as facilitated by one or more verification facilitating systems that uses or use first key or keys of one or more users possessing both first key or keys and second key or keys to carry out one or more first-stage identity checks of one or more parties purporting to be at least one of the user or users, the system comprising:

a. means for saving only second key or keys of at least one of the user or users possessing both first key or keys and second key or keys, at least one of the saved second key or keys being kept secret from at least one of the verification facilitating system or systems;

b. if at least one positive verification of identity is made at at least one of the first-stage identity check or checks carried out by at least one of the verification facilitating system or systems, means for receiving from at least one of the verification facilitating system or systems one or more one-time IDs issued to at least one of the user or users;

c. means for saving at least one of the one-time ID or IDs received from the verification facilitating system or systems; and

d. means for using at least one of the saved second key or keys and at least one of the saved one-time ID or IDs of at least one of the user or users to carry out one or more second-stage identity checks of one or more parties purporting to be at least one of the user or users.

15. A method for verifying identity as facilitated by one or more verification facilitating systems that uses or use first key or keys of one or more users possessing both first key or keys and second key or keys to carry out one or more first-stage identity checks of one or more parties purporting to be at least one of the user or users, the method comprising:

a. a step wherein only second key or keys of at least one of the user or users possessing both first key or keys and second key or keys is or are saved, at least one of the saved second key or keys being kept secret from at least one of the verification facilitating system or systems;

b. if at least one positive verification of identity is made at at least one of the first-stage identity check or checks carried out by at least one of the verification facilitating system or systems, a step wherein one or more first one-time IDs issued to at least one of the user or users is or are received from at least one of the verification facilitating system or systems;

c. a step wherein at least one of the first one-time ID or IDs received from the verification facilitating system or systems is saved;

d. a step wherein at least one of the saved second key or keys and at least one of the saved first one-time ID or IDs of at least one of the user or users are used to carry out one or more second-stage identity checks of one or more parties purporting to be at least one of the user or users;

e. if at least one positive verification of identity is made at at least one of the second-stage identity check or checks, a step wherein

i. one or more second one-time IDs are issued to at least one of the user or users and

ii. at least one of the issued second one-time ID or IDs is saved; and

f. a step wherein at least one of the saved first one-time ID or IDs and at least one of the saved second one-time ID or IDs of at least one of the user or users are used to carry out one or more third-stage identity checks of one or more parties purporting to be at least one of the user or users.

16. A system for verifying identity as facilitated by one or more verification facilitating systems that uses or use first key or keys of one or more users possessing both first key or keys and second key or keys to carry out one or more first-stage identity checks of one or more parties purporting to be at least one of the user or users, the system comprising:

a. means for saving only second key or keys of at least one of the user or users possessing both first key or keys and second key or keys, at least one of the saved second key or keys being kept secret from at least one of the verification facilitating system or systems;

b. if at least one positive verification of identity is made at at least one of the first-stage identity check or checks carried out by at least one of the verification facilitating system or systems, means for receiving from at least one of the verification facilitating system or systems one or more first one-time IDs issued to at least one of the user or users;

c. means for saving at least one of the first one-time ID or IDs received from the verification facilitating system or systems;

d. means for using at least one of the saved second key or keys and at least one of the saved first one-time ID or IDs of at least one of the user or users to carry out one or more second-stage identity checks of one or more parties purporting to be at least one of the user or users;

e. if at least one positive verification of identity is made at at least one of the second-stage identity check or checks, means

i. for issuing one or more second one-time IDs to at least one of the user or users and

ii. for saving at least one of the issued second one-time ID or IDs; and

f. means for using at least one of the saved first one-time ID or IDs and at least one of the saved second one-time ID or IDs of at least one of the user or users to carry out one or more third-stage identity checks of one or more parties purporting to be at least one of the user or users.