USER CONTROLLED IDENTITY AUTHENTICATION

• US 20090138953A1
• Filed: 01/28/2009
• Published: 05/28/2009
• Est. Priority Date: 06/22/2005
• Status: Abandoned Application

• Current Assignee: Dennis Bower Lyon
• Original Assignee: Dennis Bower Lyon
• Inventors: Lyon, Dennis Bower
• Application Number:
  US12/361,459
• Publication Number:
  US 20090138953A1
• Time in Patent Office: Days
• US Class Current: 726/9
• CPC Class Codes: G06Q 20/04 Payment circuits
• CPC Class Codes: G06Q 20/341 Active cards, i.e. cards including their own processing means, e.g. including an IC or chip
• CPC Class Codes: G06Q 20/3823 combining multiple encryption tools for a transaction
• CPC Class Codes: G06Q 20/40 Authorisation, e.g. identification of payer or payee, verification of customer or shop credentials; Review and approval of payers, e.g. check credit lines or negative lists
• CPC Class Codes: G06Q 20/4014 Identity check for transactions
• CPC Class Codes: G06Q 20/4016 involving fraud or risk level assessment in transaction processing
• CPC Class Codes: G07C 9/22 in combination with an identity check of the pass holder
• CPC Class Codes: G07F 7/1008 Active credit-cards provided with means to personalise their use, e.g. with PIN-introduction/comparison system
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/0876 based on the identity of the terminal or configuration, e.g. MAC address, hardware or software configuration or device fingerprint
• CPC Class Codes: H04L 63/102 Entity profiles

Abstract

A system, method for user controlled identity authentication comprising: a) At least one central computer having at least one user within a user database having user data and at least one service provider within a service provider database with service provider data; b) At least one service provider having electronic communication with the central computer; c) At least one user having electronic devices capable of communications with the central computer and service provider; e) Providing a user with a set of controls within the central computer to customize privacy, security and authentication of the user data; f) Providing a set of access rights within the service provider data of the central computer having a set of transaction rules for the service provider.

Claims

1. A system, method for user controlled identity authentication comprising:

A) At least one central computer having at least one user within a user database having user data and at least one service provider within a service provider database with service provider data;

B) At least one service provider having electronic communication with the central computer;

C) At least one user having electronic devices capable of communications with the central computer and service provider;

D) Providing a user with a set of controls within the central computer to customize privacy, security and authentication of the user data;

E) At least one form of authentication that may be what a person knows, has or is;

2. The system, method as in claim 1, further comprising an data table within the user data of the central computer having at least one method of the user enrollment;

3. The system, method as in claim 2, wherein the service provider may restrict access to resources based on the user enrollment method;

4. The system, method as in claim 1, further comprising a second user having user data within the user database of the central computer;

5. The system, method as in claim 4, further comprising a data table within the user data of the central computer having a score based on the interaction of the first user with the second user;

6. The system, method as in claim 5, wherein a service provider may use the score of the user to determine access or issuance of data to the user data;

7. The system, method as in claim 1, further comprising a data table within the user data of the central computer having a difference of administrator and guest between devices and tokens;

8. The system, method as in claim 7, providing a method for adding devices and token based on time and amount of devices and tokens;

9. The system, method as in claim 7, providing a method for the service provider and the user to distinguish a difference between devices and token and enabling authentication based on the difference;

10. The system, method as in claim 1, further comprising a data table within the user data of the central computer wherein the service provider may add, remove and change data;

11. The system, method as in claim 10, wherein the service provider may be limited and restricted to add, remove and change the data table based on the access rights within the service provider data within the service provider database of the central computer;

12. The system, method as in claim 1, Providing a set of access rights within the service provider data of the central computer having a set of transaction rules for the service provider;

13. The system, method as in claim 12, wherein a service provider may be restricted from access to certain data added by a second service provider based on its access right to the central computer;

14. The system, method as in claim 1, further comprising of a data table within user data within the central computer having data that may be changed and updated by the user;

15. The system, method as in claim 1, further comprising a data table within the user data of the central computer having static data of the user that does not change enabling the user to only exist once within the central computer;

16. A system, method for user controlled identity authentication comprising:

A) At least one central computer having at least one user within a user database having user data and at least one service provider within a service provider database with service provider data;

B) At least one service provider having electronic communication with the central computer;

C) At least one user having electronic devices capable of communications with the central computer and service provider;

D) Providing a user with a set of controls within the central computer to customize privacy, security and authentication of the user data;

E) Providing a set of access rights within the service provider data of the central computer having a set of transaction rules for the service provider;

F) At least one form of authentication that may be what a person knows, has or is;

G) At least one service provider with communications with a resource;

17. The system, method as in claim 16, further comprising a owner of the resource of the service provider;

18. The system, method as in claim 17, wherein the user may authenticate against the resource and the owner may respond to the service provider with instructions to the resource and the user;

19. The system, method as in claim 16, further comprising a second central computer;

20. The system, method as in claim 19, wherein a user may migrate his or hers identity to the second central computer allowing service providers to rely on one or multiple central computers for authentication and identity information;