High Assurance Remote Identity Proofing

• US 20180124047A1
• Filed: 10/30/2017
• Published: 05/03/2018
• Est. Priority Date: 10/31/2016
• Status: Abandoned Application

• Current Assignee: David L. Fisher, Jesse C. Skrivseth, Jorge A. Rivera, Michael S. Mcclain
• Original Assignee: David L. Fisher, Jesse C. Skrivseth, Jorge A. Rivera, Michael S. Mcclain
• Inventors: Fisher, David L, McClain, Michael S, Skrivseth, Jesse C, Rivera, Jorge A
• Application Number:
  US15/796,914
• Publication Number:
  US 20180124047A1
• Time in Patent Office: Days
• CPC Class Codes: G06F 21/31 User authentication
• CPC Class Codes: G06F 21/32 using biometric data, e.g. fingerprints, iris scans or voiceprints
• CPC Class Codes: G06F 21/36 by graphic or iconic representation
• CPC Class Codes: G06F 21/50 Monitoring users, programs or devices to maintain the integrity of platforms, e.g. of processors, firmware or operating systems
• CPC Class Codes: G06Q 50/01 Social networking
• CPC Class Codes: G06V 20/00 Scenes; Scene-specific elements control of digital cameras H04N23/60
• CPC Class Codes: G06V 40/164 using holistic features
• CPC Class Codes: G06V 40/40 Spoof detection, e.g. liveness detection
• CPC Class Codes: G06V 40/70 Multimodal biometrics, e.g. combining information from different biometric modalities
• CPC Class Codes: H04L 63/0853 using an additional device, e.g. smartcard, SIM or a different communication terminal cryptographic mechanisms or cryptographic arrangements for entity authentication involving additional secure or trusted devices H04L9/3234
• CPC Class Codes: H04L 63/0861 using biometrical features, e.g. fingerprint, retina-scan cryptographic mechanisms or cryptographic arrangements for entity authentication using biological data H04L9/3231
• CPC Class Codes: H04L 63/126 the source of the received data

Abstract

Remote identity proofing is the process of uniquely verifying an individual who is a party to an online transaction. This presents an enormous challenge to the secure delivery of government services as well as online commerce. The degree of difficulty is compounded when attempting to remotely authenticate for the first time a previously unknown individual. The High Assurance Remote Identity Proofing method introduces a holistic approach to solving this problem. A rich collection of identity data, when evaluated by multiple verification methods, can be aggregated to an identity assurance score, which is a measure of the uniqueness and authenticity of a claimed identity and ultimately provides a high assurance that someone attempting to remotely verify his or her identity is who he or she claims to be.

Claims

1. A computer implemented method for verifying an individual'"'"'s claimed identity by aggregating multiple personal identity attributes comprising the following steps:

Collecting by a camera-enabled and network-connected access device, personally identifiable attributes from an individual claiming a specific identity (Claimant);

Verifying, by the computer processor, Claimant data by transmitting the collected identity attributes to multiple identity verification services;

Evaluating, by the computer processor, the responses that are returned from the identity verification services;

Scoring, by the computer processor, the identity verification responses and their subsequent evaluations into an identity assurance scorecard that is unique for each Claimant;

2. Method of claim 1 wherein the personal identity attribute data is collected through a mobile application or an Internet browser session;

3. Method of claim 1 wherein the collected personal identity attributes are provided by the Claimant and include some or all of this data:

home address, phone number(s), email address(es), Social Security number, image(s) of Government-issued credential(s), selfie, and other biometrics;

4. Method of claim 1 wherein the collected personal identity data elements are obtained by surreptitious means to include some or all of this information:

mobile phone number, session IP address, GPS location, MAC address, gestures, and other device forensics;

5. Method of claim 1 wherein the set of collected data elements required of the Claimant can be customized for each organization;

6. Method of claim 1 wherein the identity verification services include some or all of the following information:

face-matching metrics, IP address location, public records search, driver'"'"'s license validation, Social Security number matching, social media mining, and pulling Claimant'"'"'s credit file;

7. Method of claim 1 wherein the identity verification services may be API services, internal database matches, or comparison to authoritative data sources;

8. Method of claim 1 wherein the responses from verification services are evaluated according to configurable scoring rules;

9. Method of claim 1 wherein said configurable rules can be customized according to relevance, priority, consistency with other responses, or an organization'"'"'s specific business case;

10. Method of claim 1 wherein the identity assurance scorecard includes at least some of these identity assurance categories:

uniqueness, liveness/existence, authenticity, resolution, validation, verification, and binding;

11. Method of claim 1 wherein the identity assurance scorecard information is condensed into a single identity assurance score that is a concise and relative measure of identity confidence;

12. Method of claim 1 wherein the identity can be enriched over time as more information becomes available;

13. Method of claim 1 as used for remote identity proofing when the Identity Proofer has no prior relationship with the Claimant;

14. Method of claim 1 as used for visitor pre-registration/enrollment and background check confirmation.