SYSTEMS AND METHODS FOR EXTENDING IDENTITY ATTRIBUTES AND AUTHENTICATION FACTORS IN AN ePAYMENT ADDRESS REGISTRY

• US 20130282580A1
• Filed: 03/15/2013
• Published: 10/24/2013
• Est. Priority Date: 02/28/2003
• Status: Abandoned Application

• Current Assignee: Intercontinental Exchange Holdings, Inc. (Intercontinental Exchange, Inc.)
• Original Assignee: Payment Pathways Incorporated
• Inventors: O'Brien, Richard J., Gallant, Andrew
• Application Number:
  US13/838,187
• Publication Number:
  US 20130282580A1
• Time in Patent Office: Days
• US Class Current: 705/44
• CPC Class Codes: G06F 16/951 Indexing; Web crawling techniques
• CPC Class Codes: G06Q 10/10 Office automation; Time management
• CPC Class Codes: G06Q 20/02 involving a neutral party, e.g. certification authority, notary or trusted third party [TTP]
• CPC Class Codes: G06Q 20/065 using e-cash
• CPC Class Codes: G06Q 20/227 characterised in that multiple accounts are available, e.g. to the payer
• CPC Class Codes: G06Q 20/24 Credit schemes, i.e. "pay after"
• CPC Class Codes: G06Q 20/381 Currency conversion
• CPC Class Codes: G06Q 20/3829 involving key management
• CPC Class Codes: G06Q 20/385 using an alias or single-use codes
• CPC Class Codes: G06Q 20/4014 Identity check for transactions
• CPC Class Codes: G06Q 2220/00 Business processing using cryptography
• CPC Class Codes: G06Q 40/02 Banking, e.g. interest calculation or account maintenance credit or loans G06Q40/03
• CPC Class Codes: G06Q 40/04 Trading; Exchange, e.g. stocks, commodities, derivatives or currency exchange
• CPC Class Codes: G06Q 50/265 Personal security, identity or safety
• CPC Class Codes: G16H 10/60 for patient-specific data, e.g. for electronic patient records
• CPC Class Codes: H04L 2209/56 Financial cryptography, e.g. electronic payment or e-cash
• CPC Class Codes: H04L 63/0435 wherein the sending and receiving network entities apply symmetric encryption, i.e. same key used for encryption and decryption cryptographic mechanisms or cryptographic arrangements for symmetric key encryption H04L9/06
• CPC Class Codes: H04L 63/083 using passwords cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226
• CPC Class Codes: H04L 63/0876 based on the identity of the terminal or configuration, e.g. MAC address, hardware or software configuration or device fingerprint
• CPC Class Codes: H04L 9/006 involving public key infrastructure [PKI] trust models network architecture or network communication protocol for supporting authentication of entities using certificates in a packet data network H04L63/0823
• CPC Class Codes: H04L 9/14 : using a plurality of keys or algorithms
• CPC Class Codes: H04L 9/30 : Public key, i.e. encryption algorithm being computationally infeasible to invert or user's encryption keys not requiring secrecy
• CPC Class Codes: H04L 9/3226 : using a predetermined code, e.g. password, passphrase or PIN network architectures or network communication protocols for supporting authentication of entities using passwords in a packet data network H04L63/083

Abstract

The present invention relates to a network of registries that are: synchronized in whole or in part to a root registry; and are compilations of registrant data from accredited Identity Providers that accept liability for registering verified and accurate identity attributes. Registries associate a unique identifier with: a financial account owner'"'"'s Personally Identifying Information; one or more linked publicly discoverable ePayment addresses to an account at a Financial Institution; and a financial account owner'"'"'s profile of preferences related to the capture, handling, transfer and storage of monetary and informational assets. Preferences extensions include: operating instructions and rule sets; and authentication factors that may make use of time sensitive data at one or more institutions.

Claims

1. A method comprising:

receiving, via at least one server connected to a communication network, a rule set, wherein said rule set comprises at least one explicit permission to allow customer information to be transferred to at least one community of interest;

associating said rule set with a unique identifier, wherein said unique identifier is associated with an identifiable customer;

receiving, via said at least one server, from a requestor, a request for customer information associated with said unique identifier;

determining, via said at least one server, based on said rule set associated with said unique identifier, whether requestor has permission to receive said requested customer information; and

transferring said requested customer information to said requestor, if said requestor is determined to have permission to receive said requested customer information.

2. The method of claim 1 wherein said determination is based at least in part on which community of interest the requestor belongs to.

3. The method of claim 1 wherein said at least one explicit permission comprises the level of information that may be released and/or categories of information that may be released.

4. The method of claim 1 further comprising the step of notifying said identifiable customer when said request from requestor is received.

5. The method of claim 4 wherein said determination is based at least in part on response from said identifiable customer to said notification.

6. A computer system for use in facilitating electronic transfer of funds, comprising:

a communication link to permit the reception and transmission of communications over a network, wherein said communications relate to commercial transactions or the transfer of funds and/or assets and the proper identification of entities involved in said transfers and/or transactions;

a database organized to permit access to select account information wherein said account information includes one or more identity attributes to support a reduced risk identification of an entity involved in said transfer and said identity attributes includes transaction specific information; and

a data transmission processor for receiving requests for data associated with one or more entities and for retrieving data from said database corresponding to said request and responsive so as to support a reduced risk identification in support of a select transfer.

7. The system of claim 6 wherein said database further comprises authentication factors that permit system determination of identity with a reduction of risk of misidentification.