METHODS AND APPARATUS FOR TRANSACTING WITH MULTIPLE DOMAINS BASED ON A CREDENTIAL

• US 20100116880A1
• Filed: 11/10/2008
• Published: 05/13/2010
• Est. Priority Date: 11/10/2008
• Status: Active Grant

• Current Assignee: Jeff Stollman
• Original Assignee: Jeff Stollman
• Inventors: Stollman, Jeff
• Granted Patent: US 8,549,589 B2
• Time in Patent Office: Days
• US Class Current: 235/380
• CPC Class Codes: G06Q 20/10 specially adapted for electronic funds transfer [EFT] systems; specially adapted for home banking systems
• CPC Class Codes: G06Q 20/4014 Identity check for transactions
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/0853 using an additional device, e.g. smartcard, SIM or a different communication terminal cryptographic mechanisms or cryptographic arrangements for entity authentication involving additional secure or trusted devices H04L9/3234

Abstract

In one embodiment, a method includes receiving from a credential a credential-owner authentication information associated with an identity of an individual. A issuer validation information associated with an issuer of the credential is also received. The method also includes providing a plurality of options, including a first option associated with a first domain and a second option associated with a second domain mutually exclusive from the first domain. The method also includes sending to a portion of the first domain the credential-owner authentication information and the issuer validation information in response to the first option being selected.

Claims

1. An apparatus, comprising:

a memory configured to store a credential-owner authentication information associated with an identity of an individual, the memory being configured to store a issuer validation information associated with an issuer of a credential; and

a module configured to transmit to a first terminal device the credential-owner authentication information and the issuer validation information such that a first set of privileges associated with a first domain can be determined based on the credential-owner authentication information and based on the issuer validation information,

the module configured to transmit to a second terminal device the credential-owner authentication information and the issuer validation information such that a second set of privileges different than the first set of privileges can be determined based on the credential-owner authentication information and based on the issuer validation information, the second set of privileges being associated with a second domain different than the first domain.

2. The apparatus of claim 1, wherein the first domain is at least one of a first physical domain or a first virtual domain, the second domain is at least one of a second physical domain or a second virtual domain.

3. The apparatus of claim 1, wherein the memory and the module can be included in at least a portion of the credential.

4. A method, comprising:

receiving from a credential a credential-owner authentication information associated with an identity of an individual;

receiving a issuer validation information associated with an issuer of the credential; and

providing a plurality of options including a first option associated with a first domain and a second option associated with a second domain mutually exclusive from the first domain; and

sending to a portion of the first domain the credential-owner authentication information and the issuer validation information in response to the first option being selected.

5. The method of claim 4, wherein the sending includes sending such that a privilege value associated with the first domain can be determined based on the credential-owner authentication information and the issuer validation information.

6. The method of claim 4, further comprising:

sending to a portion of the second domain the credential-owner authentication information and the issuer validation information in response to the second option being selected.

7. The method of claim 4, further comprising:

receiving an indicator associated with a characteristic associated with the individual; and

authenticating the identity of the individual based on the portion of the credential-owner authentication information and based on the characteristic.

8. The method of claim 4, wherein the first option is associated with a specified transaction type.

9. The method of claim 4, further comprising:

receiving from the portion of the first domain a signal associated with a privilege value, the privilege value being identified based on the credential-owner authentication information and the issuer validation information.

10. The method of claim 4, further comprising:

retrieving a privilege value associated with the first domain based on the credential-owner authentication information and based on the issuer validation information; and

retrieving a privilege value associated with the second domain based on the credential-owner authentication information and based on the issuer validation information, the privilege value associated with the second domain being different than the privilege value associated with the first domain.

11. The method of claim 4, wherein the credential is a card.

12. The method of claim 4, wherein the credential is included in an electronic processing device.

13. A method, comprising:

authenticating an identity of an individual based on a credential-owner authentication information included in a credential and associated with the identity;

determining an authenticity of the credential based on a credential-issuer validation information associated with the credential;

retrieving from a privilege database disposed outside of the credential a first privilege value associated with a first domain based on the authenticating and the determining; and

retrieving a second privilege value associated with a second domain different than the first domain based on the authenticating and the determining, the second privilege value being different that first privilege value.

14. The method of claim 13, wherein the retrieving associated with the second privilege value includes retrieving from the privilege database.

15. The method of claim 13, further comprising:

defining a plurality of options based on the first privilege value and the second privilege value, the plurality of options including a first option associated with the first domain and a second option associated with the second domain.

16. The method of claim 13, further comprising:

displaying the plurality of options such that at least one of the first option or the second option can be selected by the individual.

17. The method of claim 13, wherein the first domain is at least one of a physical domain or a virtual domain.

18. A method, comprising:

authenticating an identity of an individual based on a credential-owner authentication information included in a credential and associated with the identity;

determining an authenticity of the credential based on a credential-issuer validation information associated with the credential;

defining a request for confidential information associated with the individual in response to the authenticating and the determining; and

receiving an indicator that sending of the confidential information to a relying entity has been approved, the indicator being triggered by the individual.

19. The method of claim 18, wherein the request is defined based on a standard query.

20. The method of claim 18, wherein the request is defined based on a transaction type.