METHOD AND SYSTEM FOR CENTRALIZED IDENTITY AND ACCOUNT CONTROLS

• US 20100250411A1
• Filed: 03/30/2010
• Published: 09/30/2010
• Est. Priority Date: 03/30/2009
• Status: Active Grant

• Current Assignee: Albert Ogrodski
• Original Assignee: Albert Ogrodski
• Inventors: OGRODSKI, Albert
• Granted Patent: US 8,447,687 B2
• Time in Patent Office: Days
• US Class Current: 705/30
• CPC Class Codes: G06Q 10/10 Office automation; Time management
• CPC Class Codes: G06Q 40/02 Banking, e.g. interest calculation or account maintenance credit or loans G06Q40/03
• CPC Class Codes: G06Q 40/12 Accounting
• CPC Class Codes: G06Q 50/265 Personal security, identity or safety

Abstract

The method and system provides consumers with the ability to define and control their identity and accounts to minimize vulnerability to identity theft and credit fraud. This is accomplished using a centralized system where consumers can define their identity and account profile and define rules that control access to their identity and accounts. This process works independently of existing credit bureaus and credit authorization processes, creating a dual authentication and authorization system. The primary feature of the invention is a centralized database that is controlled by consumers. The database contains information and rules defined by the consumer that will proactively protect their identity and accounts. The idea is to minimize the allowable access to consumer'"'"'s identity and accounts. This creates an additional layer of protection that eliminates fraud.

Claims

1. A computer-implemented method for centralized identity and account controls, comprising the computer-implemented steps of:

receiving consumer identity and account data by an identity and account management process;

processing the consumer identity and account data and storing the data in a database;

accessing consumer identity and account data stored in the database by an identity and account authorization process;

verifying consumer identity and account data by the account authorization process to authorization requestors for enabling transaction authorization;

accessing consumer identity and account data stored in the database by a remote update process;

updating remote users by the remote update process with consumer identity and account data for enabling remote users to perform consumer identity and account authorization processes; and

monitoring authorization requests by a notification process for providing consumer notification based on consumer notification rules defined stored in the database.

2. The computer-implemented method of claim 1, wherein the step of receiving consumer identity and account data comprises receiving data for:

creating a web site account;

creating an identity profile;

creating identity rules;

creating an account profile;

creating account rules; and

creating notification rules.

3. The computer-implemented method of claim 1, wherein the step of receiving consumer identity and account data comprises receiving data for updating an identity profile, identity rules, an account profile, account rules and notification rules.

4. The computer-implemented method of claim 1, wherein the step of accessing consumer data by an identity and account authorization process further comprises:

receiving an account verification request from a requestor;

determining if an account profile exists in the consumer data stored in the database;

evaluating account profile rules in the consumer data stored in the database;

determining if a transaction is authorized;

sending a transaction authorization determination to the requestor and the notification process; and

storing the transaction to the database.

5. The computer-implemented method of claim 1, wherein the step of accessing consumer data by an identity and account authorization process further comprises:

receiving an identity verification request from a requestor;

determining if an identity profile exists;

evaluating identity profile rules stored in the database;

determining if a transaction identified by the requestor is authorized;

sending a transaction authorization determination to the requestor and the notification process; and

storing the transaction to the database.

6. The computer-implemented method of claim 1, wherein identity authorization requestors and remote update users are selected from the group consisting of banks, merchants, government agencies, utility companies, welfare services, cellular phone companies, department of motor vehicles, employers, health care providers, automobile dealerships, credit bureaus and anti-fraud services.

7. The computer-implemented method of claim 1, wherein account authorization requestors are selected from the group consisting of merchants, credit card processors, credit card interchanges, credit card issuers and anti-fraud services.

8. The computer-implemented method of claim 1, further comprising:

receiving a remote credit report access request by the remote update process from a credit bureau;

determining if a consumer'"'"'s identity profile exists;

evaluating the consumer identity profile;

determining if credit report access is allowed;

sending a credit report access determination to the credit card bureau and the notification process; and

storing the transaction to the database.

9. The computer-implemented method of claim 1, further comprising:

receiving a remote posting request by the remote update process from a credit bureau;

determining if a consumer'"'"'s identity profile and transaction history exists;

evaluating the consumer identity profile and transaction history;

determining if a posting to the credit bureau is allowed;

sending a posting determination to the credit card bureau and the notification process; and

storing the transaction to the database.

10. The computer-implemented method of claim 1, wherein the account authorization requestor is a credit card exchange.

11. A computer-readable medium containing instructions for controlling a computer system to implement the method of claim 1.

12. A computer-implemented method for centralized identity and account controls, comprising the computer-implemented steps of:

receiving and storing in a database consumer identity and account data including a consumer identity profile, identity rules, account profile, account rules and notification rules;

verifying consumer identity and account data to authorization requestors based on the consumer identity and account data stored in the database;

updating remote users with consumer identity and account data based on the consumer identity and account data stored in the database; and

notifying consumers of transactions based on the notification rules stored in the database.

13. The computer-implemented method of claim 12, wherein the verifying step includes:

receiving a verification request from a requestor;

evaluating the consumer account profile rules and identity profile rules stored in the database;

determining if a transaction identified by a requestor is authorized;

sending a transaction authorization determination to the requestor; and

storing the verification request and transaction authorization determination in the database.

14. The computer-implemented method of claim 12, wherein the updating step includes:

receiving an update request from a remote user;

evaluating a consumer identity profile and transaction history;

determining if data identified by the remote user is authorized;

sending the data requested by the remote user to the remote user; and

storing the update request and authorization determination in the database.

15. A computer-readable medium containing instructions for controlling a computer system to implement the method of claim 12.

16. A computer system for centralized identity and account controls, comprising;

means for receiving and storing in a database consumer identity and account data including a consumer identity profile, identity rules, account profile, account rules and notification rules;

means for verifying consumer identity and account data to authorization requestors based on the consumer identity and account data stored in the database;

remote update process means for updating remote users with consumer identity and account data based on the consumer identity and account data stored in the database; and

means for notifying consumers of transactions based on the notification rules stored in the database.

17. The computer system of claim 16, wherein the means for verifying includes:

means for receiving a verification request from a requestor;

means for evaluating the consumer account profile rules and identity profile rules stored in the database;

means for determining if a transaction identified by a requestor is authorized;

means for sending a transaction authorization determination to the requestor; and

database means for storing the verification request and transaction authorization determination in the database.

18. The computer system of claim 16, wherein the remote updating process means includes:

means for receiving an update request from a remote user;

means for evaluating a consumer identity profile and transaction history;

means for determining if data identified by the remote user is authorized;

means for sending the data requested by the remote user to the remote user; and

database means for storing the update request and authorization determination in the database.

19. The computer system of claim 16, wherein the means for receiving and storing in a database consumer identity and account data includes:

means for creating a web site account;

means for creating an identity profile;

means for creating identity rules;

means for creating an account profile;

means for creating account rules; and

means for creating notification rules.

20. The computer system of claim 16, further comprising:

means for receiving a remote consumer credit card access request from a credit bureau;

means for evaluating the consumer identity profile for determining if a credit report access is allowed; and

means for sending a credit report access determination to the credit bureau and the notifying means.