Secure method and system of identity authentication

• US 20070219926A1
• Filed: 10/18/2006
• Published: 09/20/2007
• Est. Priority Date: 10/18/2006
• Status: Abandoned Application

• Current Assignee: Stanley Korn
• Original Assignee: Stanley Korn
• Inventors: Korn, Stanley
• Application Number:
  US11/550,412
• Publication Number:
  US 20070219926A1
• Time in Patent Office: Days
• US Class Current: 705/67
• CPC Class Codes: G06Q 20/341 Active cards, i.e. cards including their own processing means, e.g. including an IC or chip
• CPC Class Codes: G06Q 20/3674 involving authentication
• CPC Class Codes: G06Q 20/3823 combining multiple encryption tools for a transaction
• CPC Class Codes: G06Q 20/40145 Biometric identity checks
• CPC Class Codes: G06Q 20/40975 using encryption therefor
• CPC Class Codes: G07F 7/1008 Active credit-cards provided with means to personalise their use, e.g. with PIN-introduction/comparison system

Abstract

This application describes a system and method that enables the two parties to a transaction to authenticate each other'"'"'s identity in such a manner as to be secure against all known threats. We examined various situations to show that the system withstands various attacks, even the sophisticated ones. It can be applied to various transaction settings, such as for ATM, online, and telephone. It improves the security in many prior systems.

Claims

1. A system for transaction between multiple parties, said system comprising:

a database;

a communication means;

a secure card; and

a secure card interface device,

wherein a first entity transacts with a second entity through said communication means,

wherein said first entity authenticates the identity of said second entity,

wherein said database is used for said authentication of the identity of said second entity,

wherein said secure card is interfaced with said secure card interface device, and

wherein said second entity is interfaced with said secure card interface device.

2. A system as recited in claim 1, wherein said communication means is the Internet.

3. A system as recited in claim 1, wherein said communication means is a telephone network.

4. A system as recited in claim 1, wherein said communication means is a computer network.

5. A system as recited in claim 1, wherein said system uses a universal identification number.

6. A system as recited in claim 1, wherein said system uses at least one type of biometric information.

7. A system as recited in claim 6, wherein said at least one type of biometric information is a retinal scan.

8. A system as recited in claim 1, wherein said system uses public key encryption.

9. A system as recited in claim 1, wherein said system uses digital signature.

10. A system as recited in claim 1, wherein said system uses a smart card.

11. A system as recited in claim 1, wherein said system uses DNA information.

12. A system as recited in claim 1, wherein said system uses a personal identification number.

13. A system as recited in claim 1, wherein said system uses a list of trusted organizations.

14. A system as recited in claim 1, wherein said system is used in an ATM environment.

15. A system as recited in claim 1, wherein said system is interfaced with a customer service representative.

16. A system as recited in claim 1, wherein said system is used for counterterrorism.

17. A system as recited in claim 1, wherein a victim of a coerced transaction is enabled to take defensive actions through said system.

18. A system as recited in claim 17, wherein said defensive actions comprising secretly notifying the police.

19. A system as recited in claim 17, wherein said defensive actions comprising specifying the number of attackers.

20. A system as recited in claim 17, wherein said defensive actions comprising making an account balance appear to be artificially low.