CENTRALIZED IDENTITY AUTHENTICATION FOR ELECTRONIC COMMUNICATION NETWORKS

• US 20130125213A1
• Filed: 11/20/2012
• Published: 05/16/2013
• Est. Priority Date: 03/06/2000
• Status: Active Grant

• Current Assignee: CardinalCommerce Corporation (Visa, Inc.)
• Original Assignee: CardinalCommerce Corporation (Visa, Inc.)
• Inventors: Balasubramanian, Chandra, Sherwin, Francis M., Keresman, Michael A. III, Bowman, Jeffry J., Bhagavatula, Ravishankar S.
• Granted Patent: US 10,019,712 B2
• Time in Patent Office: Days
• US Class Current: 726/4
• CPC Class Codes: G06F 21/31 User authentication
• CPC Class Codes: G06F 21/445 by mutual authentication, e.g. between devices or programs
• CPC Class Codes: G06Q 20/4014 Identity check for transactions
• CPC Class Codes: G06Q 30/06 Buying, selling or leasing transactions
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/083 using passwords cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226

Abstract

A method of centralized identity authentication for use in connection with a communications network includes registering users of the communications network such that each registered user'"'"'s identity is uniquely defined and determinable, and registering a plurality of vendors having a presence on the communications network. The registered vendors selectively transact with registered users, wherein the transactions include: (i) the registered vendor selling goods and/or services to the registered user; (ii) the registered vendor granting the registered user access to personal records maintained by the registered vendor; and/or (iii) the registered vendor communicating to the registered user personal information maintained by the registered vendor. The method also includes each user'"'"'s identity being authenticated over the communications network prior to completion of transactions between registered vendors and registered users.

Claims

1. A method of centralized identity authentication over a communications network, comprising:

authenticating with a configured server identities of a registered user and a registered vendor over the communications network prior to completion of a transaction between the registered user and the registered vendor.

2. The method according to claim 1, wherein authenticating further includes:

receiving a dynamically changing password from at least one of;

an issued hardware token;

or

a software object.

3. The method according to claim 1, further including:

notifying the registered user of a non-authentic user attempt of the transaction with the registered vendor posing as the registered user.

4. The method according to claim 1, wherein authenticating further includes:

comparing data collected from a user attempting the transaction with corresponding data in a central database.

5. The method according to claim 1, further including:

collecting data about the registered user which includes at least one of;

name, address, length at residence, ownership or rental at residence, e-mail address, home phone number, work phone number, social security number, date of birth, mother'"'"'s maiden name, employer, income, or employment status.

6. The method according to claim 1, further including:

encrypting at least one communication related to the authentication.

7. The method according to claim 1, wherein the registered user includes a determination of credit worthiness which limits or restricts the transaction.

8. The method according to claim 1, further including:

restricting the transaction based on the registered user to authorized registered vendors.

9. The method according to claim 1, further including:

restricting the transaction based on a comparison of data collected from the registered user and data stored by the registered vendor.

10. The method according to claim 1, further including:

recording the transaction in a database.

11. A system of centralized identity authentication over a communications network, comprising:

a server configured to;

authenticate identities of a registered user and a registered vendor over the communications network prior to completion of a transaction between the registered user and the registered vendor.

12. The system according to claim 11, wherein the server is further configured to:

receive a dynamically changing password from at least one of;

an issued hardware token;

or

a software object.

13. The system according to claim 11, wherein the server is further configured to:

notify the registered user of a non-authentic user attempt of the transaction with the registered vendor posing as the registered user.

14. The system according to claim 11, wherein the server is further configured to:

compare data collected from a user attempting the transaction with corresponding data in a central database.

15. The system according to claim 11, wherein the server is further configured to:

collect data about the registered user which includes at least one of;

name, address, length at residence, ownership or rental at residence, e-mail address, home phone number, work phone number, social security number, date of birth, mother'"'"'s maiden name, employer, income, or employment status.

16. The system according to claim 11, wherein the server is further configured to:

encrypt or decrypt at least one communication related to the authentication.

17. The system according to claim 11, wherein the server is further configured to:

limit or restrict the transaction based on a determination of credit worthiness.

18. The system according to claim 11, wherein the server is further configured to:

restrict the transaction based on the registered user to authorized registered vendors.

19. The system according to claim 11, wherein the server is further configured to:

restrict the transaction based on a comparison of data collected from the registered user and data stored by the registered vendor.

20. The system according to claim 11, wherein the server is further configured to:

record the transaction in a database.