Systems and methods for authorization of information access

• US 20090222897A1
• Filed: 02/29/2008
• Published: 09/03/2009
• Est. Priority Date: 02/29/2008
• Status: Active Grant

• Current Assignee: Vicki L. James
• Original Assignee: Callisto, LLC
• Inventors: Carow, Michael D., James, Vicki L.
• Granted Patent: US 8,621,641 B2
• Time in Patent Office: Days
• US Class Current: 726/6
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/083 using passwords cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226
• CPC Class Codes: H04L 63/102 Entity profiles

Abstract

Systems and methods according to the present invention provide a proactive approach to controlling access to information that may be correlated with a governmentally issued personal identifier. Included are systems and methods for proactive control of information access and liability incursion. Further included are systems and methods for emulating information access to an authorized person. Generally, a method according to the present invention includes the steps of requesting verification from a subscriber at any time that information is requested from registered information holders and any time that liability may be incurred through registered information holders. In this way, the subscriber, rather than reacting to invasive information or identity theft, may proactively control access to such information, thereby preventing the theft in the first place.

Claims

1. A method for approving access to or use of personal information correlated to a governmentally issued identifier, said method comprising the steps of:

receiving a verification communication from a verification system;

transmitting a first client identifier to said verification system;

transmitting said second client identifier to said verification system; and

transmitting a subscriber verification response to said verification system.

2. A method according to claim 1, wherein said verification communication is unsolicited.

3. A method according to claim 1 further comprising the step of:

registering with a protection service provider.

4. A method according to claim 3, said registering step comprising a sign-up step and an activation step.

5. A method according to claim 4, said sign-up step further including the steps of:

generating said first client identifier; and

submitting said first client identifier to said verification system.

6. A method according to claim 5, said sign-up step including the step of receiving said second client identifier.

7. A method according to claim 4, said activation step including the step of submitting a governmentally issued identifier to said verification system.

8. A method according to claim 5, said activation step including the step of submitting a governmentally issued identifier to said verification system.

9. A method according to claim 1, said first client identifier being a variable static client identifier.

10. A method according to claim 1, said second client identifier being a dynamic client identifier.

11. A method according to claim 1, said subscriber verification response comprising a third client identifier.

12. A method according to claim 11, said third client identifier being one of a plurality of predetermined static client identifiers.

13. A method according to claim 11, said verification communication being a subscriber verification request to allow access to personal information correlated to a governmentally issued identifier and said third client identifier indicating acceptance or declination of a system verification request that may have prompted said subscriber verification request.

14. A method according to claim 1, said verification communication being at least one of an electronic text message, a telephone call initiated by an interactive voice response unit and a facsimile transmission.

15. A method according to claim 14, said electronic text message being a short message service (SMS) text message.

16. A method according to claim 14, said electronic text message being an electronic mail message.

17. A method according to claim 1, said verification communication being received at a communication address, said address having been provided to said verification system by a person directly correlated with said governmentally issued identifier.

18. A method according to claim 17, said communication address being at least one of a telephone number, an e-mail address, a facsimile number, and an internet protocol address.

19. A method according to claim 1, all transmitting steps being conducted after the received verification communication.

20. A method for verifying access to personal information correlated to a governmentally issued identifier, said method comprising the steps of:

receiving a system verification request;

initiating a verification communication;

waiting until the expiry of a response time; and

replying to said system verification request with a system verification response.

21. A method according to claim 20, wherein said system verification request is unsolicited.

22. A method according to claim 20, said system verification request indicating a requested access to personal information correlated to a governmentally issued identifier.

23. A method according to claim 20, said system verification request indicating a requested creation of liability on behalf of a person correlated to a governmentally issued identifier.

24. A method according to claim 23, said system verification request indicating a requested electronic funds transfer.

25. A method according to claim 20, wherein said verification communication is initiated to a communication address, said method further comprising the step of:

transmitting a verification acknowledgement to said communication address.

26. A method according to claim 20, wherein said system verification request is received from an information holder that controls access to information correlated to a governmentally issued identifier.

27. A method according to claim 26, said method further comprising the step of receiving an information acknowledgment from said information holder.

28. A method according to claim 20, wherein said system verification request is received from a potential contracting party attempting to create a liability to be correlated to a governmentally issued identifier.

29. A method according to claim 28, wherein said potential contracting party is a party operating one of an Internet retail website, a currency-dispensing machine, and a point of sale (POS) device.

30. A method according to claim 20, wherein said system verification request is received from a transaction intermediary.

31. A method according to claim 30, wherein said transaction intermediary is a party operating to an electronic funds transfer switch.

32. A method according to claim 20, wherein said expiry of said response time is caused by an elapse of a predetermined period of time.

33. A method according to claim 20, said method further comprising the steps of:

receiving a first client identifier;

receiving a second client identifier; and

receiving a subscriber verification response.

34. A method according to claim 33, wherein said expiry of said response time is caused by said receiving of said subscriber verification response.

35. A method according to claim 33, said first client identifier being a variable static client identifier.

36. A method according to claim 33, said second client identifier being a dynamic client identifier.

37. A method according to claim 20, wherein said system verification request is received from a correlator of personal information to a governmentally issued identifier.

38. A method according to claim 20, wherein said verification communication is initiated to a communication address provided by a person directly correlated with said governmentally issued identifier.

39. A method according to claim 38, said communication address being at least one of a telephone number, an e-mail address, a facsimile number, and an internet protocol address.

40. A method according to claim 20, said verification communication being at least one of an electronic text message, a telephone call initiated by an interactive voice response unit and a facsimile transmission.

41. A method according to claim 40, said electronic text message being a short message service (SMS) text message.

42. A method according to claim 40, said electronic text message being an electronic mail message.

43. A method of managing online account profile information, said method comprising the steps of:

registering a first client identifier;

synchronizing to a second client identifier;

receiving said first client identifier from a subscriber;

receiving said second client identifier from said subscriber;

creating an emulation session communication link;

providing a selection of servers to said subscriber, said servers being connected to an information network;

receiving a user selection of one of said servers;

logging into said selected server using a site username and an initial site password, thereby enabling access to information correlated with an identifier that has been governmentally issued to said subscriber, wherein said information is accessible by said selected server;

communicating with said selected server to change said site password, thereby creating a modified site password;

overwriting said initial site password with said modified site password; and

terminating said emulation session communication link.

44. A method according to claim 43, said method further comprising the steps of receiving a login request prior to said step of creating said emulation session communication link, said login request including a protection service account user name and a protection service account password.

45. A method according to claim 43, said second client identifier being received from said subscriber after receiving said first client identifier.

46. A method according to claim 43, said method further including the step of:

displaying at least a portion of said information to said subscriber over said emulation session communication link.

47. A method according to claim 43, said first client identifier being a variable static client identifier.

48. A method according to claim 43, said second client identifier being a dynamic client identifier.

49. A method according to claim 43, said selection of servers being abstracted from the network internet protocol address of said servers.

50. A method according to claim 43, said initial site username being different than said first client identifier and also different than said second client identifier;

and

said initial site password being different than said first client identifier and also different than said second client identifier.

51. A method according to claim 43, said modified site password being different than said first client identifier and also different than said second client identifier.

52. A system comprising:

a web server;

a database accessible by said web server, said database correlating a static client identifier, a variable static client identifier, a governmentally issued identifier and at least one communication address with a client;

a communications server communicatively coupled to said web server and adapted to transmit a subscriber verification request to at least one communication address.

53. A system according to claim 52, said database further correlating a unique dynamic identification device identifier with said client.

54. A system according to claim 53, said unique dynamic identification device identifier being a serial number associated with a physical dynamic identification device.

55. A system according to claim 52, said database further correlating a client password with said client.

56. A system according to claim 52, said database further correlating a static answer to a security question with said client.

57. A system according to claim 52, said database further correlating at least one uniform resource locator (URL) with said client.

58. A system according to claim 57, said database further correlating a site user name with one of said URLs.

59. A system according to claim 58, said database further correlating a site user password with said URL having a correlated site user name.

60. A system according to claim 52, said system further adapted to receive a subscriber verification response to said transmitted subscriber verification request.

61. A system according to claim 60, at least a portion of said system being programmed to compare said variable static identifier to a portion of said subscriber verification response.

62. A method of registering a client with a verification system, said method comprising the steps of:

receiving a sign-up request from a client;

receiving initial profile information from said client;

providing a service list to said client, said service list comprising at least one information protection service;

receiving a selection from said client, said selection indicating an information protection service provided in said service list;

validating said initial profile information;

creating a protection service account;

receiving a login request at a web server, said login request comprising at least some of said initial profile information;

validating said login request;

receiving a governmentally issued identifier corresponding to said client; and

correlating said governmentally issued identifier with said protection service account.

63. A method according to claim 62, said method further comprising the steps of:

correlating a unique identifier corresponding to a dynamic client identifier device to said protection service account;

transmitting said dynamic client identifier device to said client;

receiving a solicited unique identifier corresponding to said dynamic client identifier device;

receiving a dynamic client identifier; and

validating said solicited unique identifier and said dynamic client identifier against expected values.

64. A method according to claim 63, wherein said transmitting step comprises sending a physical dynamic client identifier device to a post address.

65. A method according to claim 63, wherein said dynamic client identifier is generated by said dynamic client identifier device.

66. A method according to claim 62, said method further comprising the steps of:

receiving a uniform resource locator; and

receiving an account user name and an account password to be used to log into an information account accessible through said uniform resource locator.

67. A method according to claim 62, said method further comprising the steps of:

receiving payment information from said client; and

validating said payment information.

68. A method according to claim 62, said initial profile information comprising:

a protection service account user name; and

a protection service account password.

69. A method according to claim 68, said initial profile information further comprising:

a variable static client identifier; and

a security question response.