User Controlled Identity Authentication

• US 20100122316A1
• Filed: 11/12/2008
• Published: 05/13/2010
• Est. Priority Date: 11/12/2008
• Status: Abandoned Application

• Current Assignee: Dennis Bower Lyon
• Original Assignee: Dennis Bower Lyon
• Inventors: Lyon, Dennis Bower
• Application Number:
  US12/269,672
• Publication Number:
  US 20100122316A1
• Time in Patent Office: Days
• US Class Current: 726/1
• CPC Class Codes: G06F 21/32 using biometric data, e.g. fingerprints, iris scans or voiceprints
• CPC Class Codes: G06F 21/33 using certificates
• CPC Class Codes: G06F 21/34 involving the use of external additional devices, e.g. dongles or smart cards
• CPC Class Codes: G06F 21/6263 during internet communication, e.g. revealing personal data from cookies
• CPC Class Codes: G06F 2221/2141 Access rights, e.g. capability lists, access control lists, access tables, access matrices
• CPC Class Codes: G06Q 10/10 Office automation; Time management
• CPC Class Codes: H04L 63/102 Entity profiles

Abstract

A system, method for user controlled identity authentication comprising: a) At least one central computer having at least one user within a user database having user data and at least one service provider within a service provider database with service provider data; b) At least one service provider having electronic communication with the central computer; c) At least one user having electronic devices capable of communications with the central computer and service provider; e) Providing a user with a set of controls within the central computer to customize privacy, security and authentication of the user data; f) Providing a set of access rights within the service provider data of the central computer having a set of transaction rules for the service provider.

Claims

1. A system, method for user controlled identity authentication comprising:

A) At least one central computer having at least one user within a user database having user data and at least one service provider within a service provider database with service provider data;

B) At least one service provider having electronic communication with the central computer;

C) At least one user having electronic devices capable of communications with the central computer and service provider;

D) Providing a user with a set of controls within the central computer to customize privacy, security and authentication of the user data;

E) Providing a set of access rights within the service provider data of the central computer having a set of transaction rules for the service provider;

2. The system, method as in claim 1, further comprising an data table within the user data of the central computer having the method of the user enrollment;

3. The system, method as in claim 2, wherein the service provider may restrict access to resources based on the user enrollment method;

4. The system, method as in claim 1, further comprising a second user having user data within the user database of the central computer;

5. The system, method as in claim 4, further comprising a data table within the user data of the central computer having a score based on the interaction of the first user with the second user;

6. The system, method as in claim 5, wherein a service provider may use the score of the user to determine access or issuance of data to the user data;

7. The system, method as in claim 1, further comprising a data table within the user data of the central computer having a difference of administrator and guest between devices and tokens;

8. The system, method as in claim 7, providing a method for adding devices and token based on time and amount of devices and tokens;

9. The system, method as in claim 7, providing a method for the service provider and the user to distinguish a difference between devices and token and enabling authentication based on the difference;

10. The system, method as in claim 1, further comprising a data table within the user data of the central computer wherein the service provider may add, remove and change data;

11. The system, method as in claim 10, wherein the service provider may be limited and restricted to add, remove and change the data table based on the access rights within the service provider data within the service provider database of the central computer;

12. The system, method as in claim 1, further comprising of a data table within user data within the central computer having data that may be changed and updated by the user;

13. The system, method as in claim 1, further comprising a data table within the user data of the central computer having static data of the user that does not change enabling the user to only exist once within the central computer;

14. The system, method as in claim 1, further comprising of a data table within the user data of the central computer having the user'"'"'s biometric data;

15. The system, method as in claim 14, wherein the service provider may require authentication of this type from the user;

16. The system, method as in claim 1, providing the service provider with access to the user data within the central computer based on the user'"'"'s privacy and security settings and the service provider access rights to the central computer;

17. A system, method for user controlled identity authentication comprising:

A) At least one central computer having at least one user within a user database having user data and at least one service provider within a service provider database with service provider data;

B) At least one service provider having electronic communication with the central computer;

C) At least one user having electronic devices capable of communications with the central computer and service provider;

D) Providing a user with a set of controls within the central computer to customize privacy, security and authentication of the user data;

E) Providing a set of access rights within the service provider data of the central computer having a set of transaction rules for the service provider;

F) At least one service provider with communications with a resource;

18. The system, method as in claim 17, further comprising a owner of the resource of the service provider;

19. The system, method as in claim 18, wherein the user may authenticate against the resource and the owner may respond to the service provider with instructions to the resource and the user;