PROTECTED USE OF IDENTITY IDENTIFIER OBJECTS

• US 20110289322A1
• Filed: 07/07/2011
• Published: 11/24/2011
• Est. Priority Date: 12/14/2007
• Status: Abandoned Application

• Current Assignee: Mehran Rasti
• Original Assignee: Mehran Rasti
• Inventors: RASTI, Mehran
• Application Number:
  US13/178,036
• Publication Number:
  US 20110289322A1
• Time in Patent Office: Days
• US Class Current: 713/182
• CPC Class Codes: H04L 2209/56 Financial cryptography, e.g. electronic payment or e-cash
• CPC Class Codes: H04L 2209/60 Digital content management, e.g. content distribution
• CPC Class Codes: H04L 2209/76 Proxy, i.e. using intermediary entity to perform cryptographic operations network architectures or network communication protocols using hop-by-hop encryption H04L63/0464
• CPC Class Codes: H04L 2209/80 Wireless network architectures or network communication protocols for wireless network security H04W12/00
• CPC Class Codes: H04L 63/0421 Anonymous communication, i.e. the party's identifiers are hidden from the other party or parties, e.g. using an anonymizer
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/083 using passwords cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226
• CPC Class Codes: H04L 63/0884 by delegation of authentication, e.g. a proxy authenticates an entity to be authenticated on behalf of this entity vis-à-vis an authentication entity
• CPC Class Codes: H04L 9/321 involving a third party or a trusted authority
• CPC Class Codes: H04L 9/3247 involving digital signatures

Abstract

This invention states that any and all physical and virtual objects meeting certain criteria may be used as Identity-Identifier-Objects to authenticate people, businesses, organizations, as well as other physical or virtual objects. While accomplishing said task, this invention discloses objects, methods, and special data structures to hide said Identity-Identifier-Objects from exposure to the public, while being used in their intended roles. Additionally, the objects and methods introduced use ownership property of virtual and physical objects to control access and to implement access and licensing rights of physical and virtual objects. Numerous applications areas such as allocation of digital rights, licensing, notarization of digital signatures, and controlled use of personal photographs, fingerprints and other biometric identifier-objects are also illustrated.

Claims

1. A four way method for authenticating to third parties the ownership of an object, said method implemented on a computer system having processors configured to perform the steps of:

providing a trustee, via a computer system, with personal information, at least two proofs of identity of a person, and said person'"'"'s proof of ownership of said object, the trustee performing the steps of;

verifying the identity of the person;

upon a positive authentication, enrolling said person as the object'"'"'s owner in trustee'"'"'s computer system by issuing one access password;

issuing an owner-data set comprising at least one proxy-identifier, and at least one identity-identifier-password along with at least one identity-identifier-character-string, all associated with at least one proxy-identity-identifier of the said owner;

creating encryption program code and procedure;

creating an owner-member-file comprising said program code and owner-data set;

saving said owner registration information along with a copy of owner-member-file in owner-account-data base;

storing said owner-member-file in at least one of a plug-in memory or a portable electronic device;

delivering said owner-member-file to said owner through secure means;

accepting and enrolling third party business organization users and user-groups of identity-identifier-objects as third party user members;

providing said business organization users and user-groups with computer login information and password, and storing said information in user-account-data base;

for each user-member programming a dedicated encryption-algorithm-rule-string, associating said string with a rule-number, and referencing said encryption algorithm-rule-string with at least one rule-number, and a user-number;

assigning one of said rule-string and rule-number to at least one third party user or user-group in the same business;

assigning, associating and storing a rule-number, said rule-string with a third party user-number in user-data set;

saving a copy of user-data set in user-account-data base;

recording said user-data set in built-in memory of a digital peripheral fit for use with third party user computer;

delivering said digital peripheral, and digital contents to said third party user via secure means;

owner generating an encrypted-proxy-identifier by applying third party rule-string to a combination of at least one of owner'"'"'s proxy-identifier, one of owner identity-identifier-passwords, and one of owner identity-identifier-character-strings;

owner delivering said encrypted-proxy-identifier to trustee;

trustee decrypting the received encrypted-proxy-identifier by applying decrypting algorithms and extracting owner proxy-identity-identifier-object and third party rule-string;

trustee searching owner-account-data base with owner proxy-identity-identifier-object and extracting owner-identity-identifier-object, and transmitting it to credit bureau'"'"'s computer system;

trustee searching third party user-account-data base with user-rule-string and extracting user-number with third party user information, and transmitting it to credit bureau'"'"'s computer system;

credit bureau searching its data base and matching transmitted owner-identity-identifier-object against its predisposed owner information on file;

credit bureau declaring the person to be the owner of said object upon positive match;

credit bureau searching its data base and matching transmitted user-number against its predisposed third party user information on file; and

credit bureau granting access to object'"'"'s pre-disposed information per credit bureau'"'"'s contract to third party user, excluding object'"'"'s original identifier.

2. The method of claim 1, further comprising wherein said object is a) a physical or virtual object with a physical or virtual defined boundary, and b) is traceable to its owner through a unique token, alphanumeric tag, or serial number.

3. The method of claim 2, further comprising wherein said object is pre-registered with a trustee, and is authenticated through the trustee using an ownership property.

4. The method of claim 1, further comprising:

requiring the credit bureau to register and enroll with the trustee.

5. The method of claim 1, further comprising:

trustee assigning and issuing one of a different rule, associated rule-number, and user-number for use by one third party user or third-party business associates that are engaged in conducting same, or related business function.

6. The method of claim 1, further comprising wherein said object'"'"'s identifier being an alphanumeric or digital representation of at least one of fixed-for-life-of-the-object identity identifiers, including at least one of an organization'"'"'s Employer Identification Number (EIN), Tax Identification Number, a person'"'"'s social security number, iris pattern, earlobe pattern, DNA structure, biometric information, or other fixed for life unique identifiers.

7. The method of claim 1, further comprising wherein said object'"'"'s identifier being an alphanumeric or digital representation of a semi fixed personal identifier including at least one of a charge card number, driver'"'"'s license number, patient number, insurance number, student number, log-on user'"'"'s name, access code, software license number, a token, a tag, or other semi-fixed identifiers.

8. The method of claim 1, further comprising wherein said object'"'"'s identifier being an alphanumeric or digital representation of a variable-personal-identifier including at least one of a person'"'"'s signature, fingerprint, picture or other variable-personal-identifiers.

9. The method of claim 1, further comprising wherein said object'"'"'s identifier being at least one of a person'"'"'s or an organization'"'"'s digital production, software, usage rights, rights of ownership, authority, or privilege of various degrees with said right having been allocated through one of an identifier, access code, a serial-number, an identity-verifier, or an identity-identifier to said object'"'"'s owner.

10. The method of claim 1, further comprising wherein by entering an access password a person generates an encrypted-proxy-identifier-object by applying a third party-user'"'"'s pre-allocated encryption rule or set of rules to at least one of a proxy identifiers-objects and one of said object'"'"'s related passwords.

11. The method of claim 1, further comprising wherein after entering a valid password and a numeric index, a person transfers at least one of object owner'"'"'s encrypted proxy-identifier-objects to trustee or third party user'"'"'s computer system or peripheral out of owner'"'"'s computer, portable device, and/or plug-in memory.

12. The method of claim 1, further comprising wherein after entering a valid password and a numeric index, a person remotely transfers at least one of object owner'"'"'s encrypted proxy-identifier-objects combined with an identifier-password to trustee or third party'"'"'s computer system or peripheral out of owner'"'"'s personal computer or electronic device.

13. The method of claim 1, further comprising wherein by entering a password and a numeric index, a person transfers at least the one of an object owner'"'"'s encrypted proxy-identifiers combined with an identifier-password to a third party user'"'"'s computer system or peripheral out of one of an optical device, a smart card, RFID, or other computer and digital devices.

14. The method of claim 1, further comprising wherein by entering at least one password and a proxy-identifier-index, a person retrieves owner-data set and encrypts it with a third party'"'"'s rule through trustee'"'"'s computer interface.

15. The method of claim 1, further comprising wherein by transmitting an index to an identifier-object with a password and a third party'"'"'s user-number, a not physically present person would have trustee transmit one of said person'"'"'s identifier-objects to a credit bureau.

16. The method of claim 1, further comprising wherein for the purpose of ownership identity authentication, or usage to the extent of preset rights, authorization, and permissions person would have trustee transmit to third party user location, preset values of data set strings indicating an extent of a right or permission to a computer system software having a pre-defined SID, MAC, static IP, other hardware or software addresses within a network.

17. The method of claim 1, further comprising wherein for every trustee-registered identifier-object of an owner, at least one indexed proxy-identifier-object is also issued, such that for each proxy-identifier-object there exists at least one object-identifier-password and one constant-character-string.

18. The method of claim 1, further comprising wherein for every trustee-registered identifier-object of an owner, at least one indexed proxy-identifier-object is also issued, such that for each proxy-identifier-object there exists at least one of object-identifier-password or one constant-character-string.

19. The method of claim 1, further comprising wherein trustee decrypting one of encrypted proxy-identifier-object to its original comprising components through applying reverse algorithm to owner-data set and rule corresponding to rule-number used in encrypting said encrypted proxy-identifier-object.

20. The method of claim 1, further comprising wherein in the absence of trustee entity, a credit bureau functions as both credit bureau and trustee entity, and assumes the additional duties, functions, and role of trustee.

21. The method of claim 1, further comprising wherein in the absence of a credit bureau entity, trustee functions as both credit bureau and trustee entity, and assumes the additional duties, functions, and role of a credit bureau.

22. The method of claim 1, further comprising wherein after login, by transmitting an index to an identifier-object with a password and a third party'"'"'s user-number, a not physically present person would have trustee transmit one of said person'"'"'s encrypted-proxy-identifier-objects to a third-party-user.

23. The method of claim 1, further comprising wherein after login, by transmitting one of an identifier-object or its associated index along with a password and a third party'"'"'s user-number, a not physically present person would have trustee and credit bureau transmit said owner'"'"'s identity-authentication result along with credit score and/or other retrieved information to said third party user'"'"'s computer.

24. The method of claim 1, further comprising wherein a charge processing entity is replaced for credit bureau entity in charge card processing operations.

25. The method of claim 1, further comprising wherein an owner-member-file is delivered to owner with no encryption program code included.

26. The method of claim 1, further comprising wherein at least one intelligent computer substituting and functioning as any or all of owner, trustee, credit bureau, and/or user enteritis sending data to other computers, electronic devices and peripherals functioning collectively or separately as owner, user, trustee, and/or credit bureau entities.

27. The method of claim 1, further comprising wherein each of the at least one identity-identifier-constant-strings, and at least one encryption-rule-strings include at least one character out of the extended UTF international character set.

28. The method of claim 1, further comprising wherein each of the at least one of proxy-identity-identifier-object is as small as one byte of data.

29. The method of claim 1, further comprising wherein any and all encrypted or unencrypted substitutions of identifier object is deemed to be a proxy identifier object.

30. The method of claim 1, further comprising wherein said object identifies at least one of a virtual or physical object, a person, a business, or an organization comprising a number of people that officiate or conduct the business of a unit, provided said object had uniquely been registered to its owner through a trustee.

31. The method of claim 1, further comprising wherein an encrypted proxy-identity-identifier-object is used in lieu of a person'"'"'s notarized signature when said person is the owner of a trustee-registered digital signature that had been registered as an identity-identifier-object.

32. The method of claim 1, further comprising wherein said identity-identifier-object is a digital representation of one of a uniquely identifiable DNA sequence of its owner that had been registered as an identity-identifier-object through a trustee.

33. The method of claim 1, further comprising wherein said identity-identifier-object is a digital representation of an instance of one of a person'"'"'s fingerprint or a person'"'"'s photograph that had been registered as an identity-identifier-object through a trustee.