METHOD AND SYSTEM FOR IMPLEMENTING AND MANAGING AN ENTERPRISE IDENTITY MANAGEMENT FOR DISTRIBUTED SECURITY IN A COMPUTER SYSTEM

• US 20110184985A1
• Filed: 04/05/2011
• Published: 07/28/2011
• Est. Priority Date: 12/31/2002
• Status: Abandoned Application

• Current Assignee: Liberty Peak Ventures, LLC (Dominion Harbor Enterprises, LLC)
• Original Assignee: American Express Travel Related Services Company, Inc. (American Express Company)
• Inventors: Bishop, Fred
• Application Number:
  US13/080,473
• Publication Number:
  US 20110184985A1
• Time in Patent Office: Days
• US Class Current: 707/783
• CPC Class Codes: G06F 21/31 User authentication
• CPC Class Codes: G06Q 10/00 Administration; Management
• CPC Class Codes: G06Q 20/10 specially adapted for electronic funds transfer [EFT] systems; specially adapted for home banking systems
• CPC Class Codes: G06Q 40/02 Banking, e.g. interest calculation or account maintenance credit or loans G06Q40/03

Abstract

A method and system for facilitating the management of user identities includes an ownership component, a registration component, and a servicing component. When a user first desires to access a system using the present invention, the registration component verifies the user'"'"'s ownership of the underlying account by asking a variety of questions. Thereafter, when a user desires to service his account, the user may be re-queried to determine if he is attempting to access the correct information. An authentication and access component provides the functionality to access a system of the present invention. An audit component can be configured to periodically monitor the various accounts to ensure a continued linking between users and accounts.

Claims

1. A method comprising:

assigning, by a computer-based system for identity management, a positive weight to a first transaction initiated at a first time by an identity associated with an account;

assigning, by the computer-based system, a negative weight to a second transaction initiated at a second time by the identity associated with the account; and

determining, by the computer-based system, a likelihood that the identity owns the account based upon the positive weight and the negative weight.

2. The method of claim 1, further comprising aggregating, by the computer-based system, a plurality of positive weights and a plurality of negative weights to determine a usage history of a user.

3. The method of claim 1, wherein the determining a likelihood further comprises converting, by the computer-based system, the positive weight and the negative weight to a probability score.

4. The method of claim 1, wherein the first time is at least one of morning, afternoon, and evening, and wherein the second time is nighttime.

5. The method of claim 1, further comprising allowing, by the computer-based system, the identity to access a first account in a hierarchy of accounts based upon a probability score that is lower than a probability score required to access a second account in the hierarchy of accounts.

6. The method of claim 1, further comprising assigning, by the computer-based system, a cumulative negative weight to a series of transactions initiated by the identity associated with the account that occur at times inconsistent with the first time, wherein the cumulative negative weight exceeds the aggregate of each negative weight associated with each transaction in the series of transactions.

7. The method of claim 1, further comprising comparing, by the computer-based system, the first time to the second time, and assigning, by the computer-based system, a negative weight to the comparison based upon a difference between the first time and the second time that exceeds a threshold.

8. An article of manufacture including a non-transitory, tangible computer readable medium having instructions stored thereon that, in response to execution by a computer-based system for identity management, cause the computer-based system to perform operations comprising:

assigning, by the computer-based system, a positive weight to a first transaction initiated at a first time by an identity associated with an account;

assigning, by the computer-based system, a negative weight to a second transaction initiated at a second time by the identity associated with the account; and

determining, by the computer-based system, a likelihood that the identity owns the account based upon the positive weight and the negative weight.

9. The article of claim 8, further comprising aggregating, by the computer-based system, a plurality of positive weights and a plurality of negative weights to determine a usage history of a user.

10. The article of claim 8, wherein the determining a likelihood further comprises converting, by the computer-based system, the positive weight and the negative weight to a probability score.

11. The article of claim 8, wherein the first time is at least one of morning, afternoon, and evening, and wherein the second time is nighttime.

12. The article of claim 8, further comprising allowing, by the computer-based system, the identity to access a first account in a hierarchy of accounts based upon a probability score that is lower than a probability score required to access a second account in the hierarchy of accounts.

13. The article of claim 8, further comprising assigning, by the computer-based system, a cumulative negative weight to a series of transactions initiated by the identity associated with the account that occur at times inconsistent with the first time, wherein the cumulative negative weight exceeds the aggregate of each negative weight associated with each transaction in the series of transactions.

14. The article of claim 8, further comprising comparing, by the computer-based system, the first time to the second time, and assigning, by the computer-based system, a negative weight to the comparison based upon a difference between the first time and the second time that exceeds a threshold.

15. A system comprising:

a processor for identity management,

a tangible, non-transitory memory configured to communicate with the processor,

the tangible, non-transitory memory having instructions stored thereon that, in response to execution by the processor, cause the processor to perform operations comprising;

assigning, by the processor, a positive weight to a first transaction initiated at a first time by an identity associated with an account;

assigning, by the processor, a negative weight to a second transaction initiated at a second time by the identity associated with the account; and

determining, by the processor, a likelihood that the identity owns the account based upon the positive weight and the negative weight.

16. The system of claim 15, further comprising aggregating, by the processor, a plurality of positive weights and a plurality of negative weights to determine a usage history of a user.

17. The system of claim 15, wherein the determining a likelihood further comprises converting, by the processor, the positive weight and the negative weight to a probability score.

18. The system of claim 15, wherein the first time is at least one of morning, afternoon, and evening, and wherein the second time is nighttime.

19. The system of claim 15, further comprising allowing, by the processor, the identity to access a first account in a hierarchy of accounts based upon a probability score that is lower than a probability score required to access a second account in the hierarchy of accounts.

20. The system of claim 15, further comprising comparing, by the processor, the first time to the second time, and assigning, by the computer-based system, a negative weight to the comparison based upon a difference between the first time and the second time that exceeds a threshold.