System and method for protecting identity information

• US 7,162,640 B2
• Filed: 03/11/2003
• Issued: 01/09/2007
• Est. Priority Date: 03/11/2003
• Status: Expired due to Fees

• Current Assignee: Microsoft Technology Licensing LLC (Microsoft Corporation)
• Original Assignee: Microsoft Corporation
• Inventors: Cluts, Jonathan C., Heath, Pamela J., Pleyer, Sven
• Primary Examiner(s): Barron; Gilberto
• Assistant Examiner(s): HERRING, VIRGIL A
• Application Number:
  US10/386,345
• Publication Number:
  US 20040187013A1
• Time in Patent Office: 1,400 Days
• Field of Search: 705/38, 705/44, 726/6, 726/7, 726/18
• US Class Current: 713/185
• CPC Class Codes: G06F 21/6263 during internet communication, e.g. revealing personal data from cookies
• CPC Class Codes: G06F 21/6272 by registering files or documents with a third party
• CPC Class Codes: G06Q 20/341 Active cards, i.e. cards including their own processing means, e.g. including an IC or chip
• CPC Class Codes: G06Q 20/4014 Identity check for transactions
• CPC Class Codes: G07F 7/1008 Active credit-cards provided with means to personalise their use, e.g. with PIN-introduction/comparison system
• CPC Class Codes: G07F 7/1083 Counting of PIN attempts

Abstract

A method is provided for using an identity service for protecting identity information during an electronic transaction. The method includes registering an identity client, wherein the identity client possesses an associated multi-component identity. The method further includes regulating access to the multi-component identity such that the identity service authorizes dissemination of fewer than all components of the multi-component identity to an identity requestor. Additionally, a method for providing client identity repair protect a client from fraudulent distribution of electronically available client identity information. Upon detection of fraudulent distribution of identity information, a new identity reference is created and attempts to access an old identity reference are tracked. If the attempts to access the old identity reference are authorized, the attempts are re-directed to the new identity reference. However, if the attempts were unauthorized, access to the new identity reference is denied.

Claims

1. A method for providing client identity repair in order to protect a client from fraudulent distribution of electronically available client identity information, the method comprising:

creating a new identity reference upon detection of potentially fraudulent distribution of identity information;

tracking attempts to access an old identity reference;

determining if the attempts to access the old identity reference are authorized; and

re-directing the attempts to the new identity reference if the attempts were authorized and denying access to the new identity reference if the attempts were not authorized.

2. The method of claim 1, further comprising marking electronically disseminated information in order to identify a source of the disseminated information.

3. A computer-readable medium having computer-executable instructions for performing the method recited in claim 1.

4. One or more computer-readable media having computer-executable instructions for performing a method that provides client identity repair in order to protect a client from fraudulent distribution of electronically available client identity information, the method:

creating a new identity reference upon detection of potentially fraudulent distribution of identity information;

tracking attempts to access an old identity reference;

determining if the attempts to access the old identity reference are authorized; and

re-directing the attempts to the new identity reference if the attempts were authorized and denying access to the new identity reference if the attempts were not authorized.

5. The method of claim 4, further comprising marking electronically disseminated information in order to identify a source of the disseminated information.