SYSTEM AND METHOD OF SECURE PERSONAL IDENTIFICATION

• US 20160165036A1
• Filed: 12/07/2015
• Published: 06/09/2016
• Est. Priority Date: 12/07/2014
• Status: Active Grant

• Current Assignee: Chon Hock Leow
• Original Assignee: Chon Hock Leow
• Inventors: Leow, Chon Hock
• Granted Patent: US 9,509,825 B2
• Time in Patent Office: Days
• US Class Current: 1/1
• CPC Class Codes: H04B 1/385 Transceivers carried on the body, e.g. in helmets
• CPC Class Codes: H04L 2463/082 applying multi-factor authentication cryptographic mechanisms or cryptographic arrangements including means for verifying the identity or authority of a user of the system or for message authentication H04L9/32
• CPC Class Codes: H04L 63/0442 wherein the sending and receiving network entities apply asymmetric encryption, i.e. different keys for encryption and decryption cryptographic mechanisms or cryptographic arrangements for public-key encryption H04L9/30
• CPC Class Codes: H04L 63/083 using passwords cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226
• CPC Class Codes: H04L 63/0853 using an additional device, e.g. smartcard, SIM or a different communication terminal cryptographic mechanisms or cryptographic arrangements for entity authentication involving additional secure or trusted devices H04L9/3234
• CPC Class Codes: H04L 63/0861 using biometrical features, e.g. fingerprint, retina-scan cryptographic mechanisms or cryptographic arrangements for entity authentication using biological data H04L9/3231
• CPC Class Codes: H04L 67/306 User profiles
• CPC Class Codes: H04L 67/535 Tracking the activity of the user network monitoring arrangements H04L43/00; recording of computer activity G06F11/34
• CPC Class Codes: H04M 1/724095 Worn on the wrist, hand or arm
• CPC Class Codes: H04M 1/72412 using two-way short-range wireless interfaces
• CPC Class Codes: H04W 12/065 Continuous authentication
• CPC Class Codes: H04W 12/068 using credential vaults, e.g. password manager applications or one time password [OTP] applications
• CPC Class Codes: H04W 4/021 Services related to particular areas, e.g. point of interest [POI] services, venue services or geofences

Abstract

A system and method for securely and automatically identifying users to an inquirer for purposes of obtaining user identifying information is described. The system consisting of at least one client device associated with a user, at least one inquiring device associated with a host, a client information server and a network. The system and method allows computer based systems to automatically authenticate the identities of a plurality of users entering a physical space and obtain information pertaining to user preferences. Users may control whether identifying information is provided to an inquirer as well as what preference information may be obtained by an inquirer.

Claims

1. An identity confirmation system and service provided by a computerized server connected to a wide area network (WAN) storing and executing software from memory, comprising:

an interface, accessible on the WAN, provided by the software at the server, enabling a user to register for service with the server;

a computerized client device carried by a user and enabled to connect to the WAN, the client device including transmission and receiving hardware enabling wireless communication, the client device storing and executing an instance of the software from memory;

a computerized inquiring device connected to the WAN including transmission and receiving hardware enabling wireless communication, the inquiring device storing and executing an instance of the software from memory, the inquiring device hosted by a party separate from the client device;

an identification token having a session code identifying the inquiring device to the server, time code and client code; and

a database accessible to the server storing identity tokens, profile data and preferences of the user;

wherein, upon initial access by the client device to the server via the interface, the client code is generated by the server and sent to the client device which uses the client code to generate the identification token which is sent back to the server and upon the client device coming within geographic proximity enabling wireless communication with the inquiring device, the inquiring device requests the token from the client device, the client device updates the time code and sends the token to the inquiring device, the inquiring device receives the token and updates the session token, forwards the token to the server which analyzes and validates identity of the user and client device forwarding the stored profile information to the inquiring device.

2. The system of claim 1 wherein the token is encrypted in the initial communication with asymmetric encryption between the client device and the server.

3. The system of claim 2, wherein the client device encrypts the session code, time code and client code of the identification token with a private key and sends it corresponding public key to the server, the server using the server'"'"'s public key to encrypt the client code, time code and session code and the server encrypting a copy of the client code with the server'"'"'s public key before sending the identification token back to the client device.

4. The system of claim 1, wherein the inquiring device utilizes the profile data received from the server to confirm identification of the user and facilitate transactions with the user.

5. The system of claim 4 wherein the users profile and preferences data includes any one or more of the user'"'"'s name, age, address, gender description, family members, choices regarding inquiring devices that the user wishes to provide or deny information to, general preferences regarding music, literature, food and sport, user identifying information, historical data involving user'"'"'s contact with the system, data collected from third party servers about the user.

6. A method for providing an identity confirmation system and service provided by a computerized server connected to a wide area network (WAN) storing and executing software from memory, comprising the steps of:

(a) initially connecting to the sever, via the WAN, a computerized client device carried by a user, the client device including transmission and receiving hardware enabling wireless communication, the client device storing and executing an instance of the software from memory;

(b) generating a client code by the software at the server and sending it to the client device;

(c) receiving the client code at the client device and generating an identification token by an instance of the software at the client device, the identification token including the client code, a session code and a time code;

(d) encrypting the identification token by the client device and sending it back to the server, wherein the server validates identification of the user via comparing at least the client code;

(e) requesting the identification token from the client device, via wireless communication, by a computerized inquiring device, the client device being in a geographic proximity enabling the wireless communication;

(f) updating the time code in the identification token by the client device and sending the token to the inquiring device which updates the session code and forwards the identification token to the server; and

(g) receiving the identification token at the server which analyzes the client code, session code and time code and validates identity of the user and client device forwarding stored profile information of the user to the inquiring device.

7. The method of claim 6, wherein the token is encrypted in steps (b) thru (d) with asymmetric encryption between the client device and the server.

8. The method of claim 7, wherein the client device encrypts the tine code, client code and session code of the identification token with a private key and sends its corresponding public key to the server, the server using the server'"'"'s public key to encrypt the client code, time code and session code and the server encrypting a copy of the client code with only the server'"'"'s public key before sending the identification token back to the client device enabling the server to quickly decrypt the copy of the client code upon subsequent receipt of the identification token.

9. The method of claim 6, wherein the inquiring device utilizes the profile data received from the server to confirm identification of the user and facilitate transactions with the user.

10. The method of claim 9 wherein the users profile and preferences data includes any one or more of the user'"'"'s name, age, address, gender description, family members, choices regarding inquiring devices that the user wishes to provide or deny information to, general preferences regarding music, literature, food and sport, user identifying information, historical data involving user'"'"'s contact with the system, data collected from third party servers about the user.