Methods and systems for establishing an electronic account for a customer

• US 7,984,289 B2
• Filed: 07/13/2005
• Issued: 07/19/2011
• Est. Priority Date: 03/17/2000
• Status: Active Grant

• Current Assignee: United States Postal Service (Government of the United States of America)
• Original Assignee: United States Postal Service (Government of the United States of America)
• Inventors: Tremaine, Samuel R., Orbke, Wayne H.
• Primary Examiner(s): Dada; Beemnet W
• Application Number:
  US11/179,546
• Publication Number:
  US 20050246550A1
• Time in Patent Office: 2,197 Days
• Field of Search: 713/155, 713/156, 713/176, 713/168, 713/179, 726/1, 726/5, 726/10
• US Class Current: 713/155
• CPC Class Codes: G06Q 10/107 Computer-aided management of electronic mailing [e-mailing]
• CPC Class Codes: G06Q 20/04 Payment circuits
• CPC Class Codes: G06Q 20/10 specially adapted for electronic funds transfer [EFT] systems; specially adapted for home banking systems
• CPC Class Codes: G06Q 20/102 Bill distribution or payments
• CPC Class Codes: G06Q 20/14 specially adapted for billing systems
• CPC Class Codes: G06Q 20/3674 involving authentication
• CPC Class Codes: G06Q 20/3821 Electronic credentials
• CPC Class Codes: G06Q 20/40 Authorisation, e.g. identification of payer or payee, verification of customer or shop credentials; Review and approval of payers, e.g. check credit lines or negative lists
• CPC Class Codes: G06Q 20/401 Transaction verification
• CPC Class Codes: G06Q 20/4012 Verifying personal identification numbers [PIN]
• CPC Class Codes: G06Q 30/0601 Electronic shopping [e-shopping]
• CPC Class Codes: H04L 2463/102 applying security measure for e-commerce data processing systems or methods, specially adapted for e-commerce G06Q30/00
• CPC Class Codes: H04L 51/214 using selective forwarding
• CPC Class Codes: H04L 51/222 using geographical location information, e.g. messages transmitted or received in proximity of a certain spot or area
• CPC Class Codes: H04L 51/48 Message addressing, e.g. address format or anonymous messages, aliases
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/0823 using certificates cryptographic mechanisms or cryptographic arrangements for entity authentication involving certificates H04L9/3263
• CPC Class Codes: H04L 63/083 using passwords cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226
• CPC Class Codes: H04L 63/102 Entity profiles
• CPC Class Codes: H04L 63/123 received data contents, e.g. message integrity
• CPC Class Codes: H04L 63/1408 : by monitoring network traffic monitoring network traffic per se H04L43/00
• CPC Class Codes: H04L 67/306 : User profiles
• CPC Class Codes: H04L 69/329 : in the application layer [OSI layer 7]
• CPC Class Codes: H04L 9/40 : Network security protocols

Abstract

Registration information is sent form a customer to a registration system over a network. The registration system creates an electronic account for the customer and facilitates the validation of the customer'"'"'s identity. When the customer'"'"'s identity is validated, the registration system activates the electronic account. The electronic account includes a unique electronic account number, a physical address of the customer, and an electronic address of the customer.

Claims

1. A method for initiating an electronic account over a network, comprising the steps of:

transmitting user information from a user to a registration system over the network;

receiving the user information from the user via the network to initiate the electronic account;

generating a unique electronic account number corresponding to the user information;

establishing the electronic account using the unique electronic account number, the electronic account being stored in a customer name database containing the user information;

retrieving a physical address of the user from an address database based on the user information, the physical address corresponding to the location where the user receives physical mail;

storing the physical address of the user in a customer address database;

generating, by a verification form generator, an identification verification form using the physical address and the user information;

sending the identification verification form to the user at the physical address;

notifying a confirmation host, by the verification form generator, when the identification verification form has been sent;

validating the identification verification form at the registration office;

transmitting validated identification verification information from the registration office to the confirmation host;

retrieving the validated identification verification information at the registration system from the confirmation host to establish the electronic account for the user;

requesting, by the registration system, an electronic certificate for the electronic account from a certificate authority;

receiving the electronic certificate by the registration system; and

linking the electronic certificate to the electronic account.

2. The method of claim 1, further comprising the step of:

storing the user information and the unique electronic account number in a database.

3. The method of claim 1, wherein the address database is a United States Postal Service address database.

4. The method of claim 1, wherein the unique electronic account number comprises a plurality of digits.

5. The method of claim 4, wherein the unique electronic account number comprises ten digits.

6. The method of claim 4, wherein the unique electronic account number comprises alphanumeric characters and a check digit.

7. The method of claim 4, wherein the ten digits include alphanumeric characters.

8. The method of claim 4, wherein the ten digits include nine alphanumeric characters and a check digit.

9. A method for initiating an electronic account over a network, comprising the steps of:

transmitting registration information from a user to a registration system over the network;

receiving, at a network server, the registration information from the user;

transmitting the registration information from the network server to a database server;

storing the registration information in a customer name database by the database server;

retrieving a physical address of the user from an address database using the registration information;

storing the physical address of the user in a customer address database;

generating, by an application server, a unique electronic account number corresponding to the registration information;

generating, by verification form generator, an identification verification form using the physical address and the registration information;

sending the identification verification form to the user at the physical address;

notifying a confirmation host, by the verification form generator, when the identification verification form has been sent;

validating the identification verification form by the user at a registration office;

transmitting validated identification verification information from the registration office to the confirmation host;

retrieving the validated identification verification information at the registration system from the confirmation host to establish the electronic account for the user;

requesting, by the registration system, an electronic certificate for the electronic account from a certificate authority;

receiving the electronic certificate by the registration system; and

linking the electronic certificate to the electronic account.

10. The method of claim 9, wherein the registration information is received in response to a plurality of HTML documents transmitted from the network server to the user.

11. The method of claim 10, wherein the plurality of HTML documents includes an overview of the electronic account.

12. The method of claim 10, wherein the plurality of HTML documents includes registration procedures.

13. The method of claim 10, wherein the plurality of HTML documents includes a privacy statement.

14. The method of claim 10, wherein the plurality of HTML documents includes a security policy.

15. The method of claim 10, wherein the plurality of HTML documents requests the user'"'"'s name, date of birth, and telephone number.

16. The method of claim 10, wherein the plurality of HTML documents requests a preferred e-mail address.

17. The method of claim 10, wherein the plurality of HTML documents requests a preferred password.

18. The method of claim 10, wherein the plurality of HTML documents offers a selection of available e-mail addresses.

19. The method of claim 10, wherein the plurality of HTML documents requests the user'"'"'s residential address.

20. The method of claim 10, wherein the plurality of HTML documents requests identity validation information including a photo ID and a secondary ID.

21. The method of claim 10, wherein the plurality of HTML documents displays the registration information for the user to review.

22. The method of claim 10, wherein the plurality of HTML documents includes a private key generation process.

23. The method of claim 10, wherein the plurality of HTML documents requests the user to choose a communication password to protect the private key.

24. The method of claim 10, wherein the plurality of HTML documents enables the user to activate the electronic account by entering an e-mail address and a password.

25. The method of claim 10, wherein the plurality of HTML documents enables the user to obtain an electronic certificate for the electronic account.

26. A method for creating an electronic account for a user, comprising the steps of:

transmitting registration information from a user to a registration system over a network;

receiving the registration information from the user;

storing the registration information in a database;

generating a unique electronic account number corresponding to the registration information;

processing the registration information in a physical address matching engine to determine a physical address of the user;

generating, by a verification form generator, an identification verification form using the physical address and the registration information;

sending the identification verification form to the user at the physical address;

notifying a confirmation host, by the verification form generator, when the identification verification form has been sent;

validating the identification verification form from the user at a registration office;

transmitting validated identification verification information from the registration office to the confirmation host;

retrieving the validated identification verification information at the registration system from the confirmation host to establish the electronic account for the user;

sending a request to a certificate authority for an electronic certificate for the electronic account;

receiving the electronic certificate;

creating the electronic account, the electronic account being stored in a customer name database containing the registration information;

storing the physical address of the user in a customer address database; and

associating the electronic certificate with the electronic account.

27. The method of claim 26, wherein the unique electronic account number is generated by United States Postal Service account number generator software.

28. The method of claim 26, wherein the physical address matching engine is a United States Postal Service address matching engine.

29. The method of claim 26, wherein the certificate authority is a United States Postal Service Certificate Authority.

30. A system for initiating an electronic account over a network, comprising:

a processor; and

a memory coupled to the processor, wherein the memory comprises instructions that are executed by the processor to perform operations comprising;

receiving user information from a user via the network to initiate the electronic account;

storing the user information in a customer name database;

generating a unique electronic account number corresponding to the user information;

establishing the electronic account using the unique electronic account number, the electronic account being stored in the customer name database containing the user information;

retrieving a physical address of the user from an address database based on the user information, the physical address corresponding to the location where the user receives physical mail;

storing the physical address of the user in a customer address database;

generating, by a verification form generator, an identification verification form using the physical address and the user information;

sending the identification verification form to the user at the physical address;

notifying a confirmation host, by the verification form generator, when the identification verification form has been sent;

validating the identification verification form by the user at a registration office;

transmitting validated identification verification information from the registration office to the confirmation host;

retrieving the validated identification verification information at the registration system from the confirmation host to establish the electronic account for the user;

requesting, by the registration system, an electronic certificate for the electronic account from a certificate authority;

receiving the electronic certificate by the registration system; and

linking the electronic certificate to the electronic account.

31. The system of claim 30, wherein the address database is a United States Postal Service address database.

32. The system of claim 30, wherein the unique electronic account number comprises a plurality of digits.

33. The system of claim 32, wherein the unique electronic account number comprises ten digits.

34. The system of claim 32, wherein the unique electronic account number comprises alphanumeric characters and a check digit.

35. The system of claim 32, wherein the ten digits include alphanumeric characters.

36. The system of claim 32, wherein the ten digits include nine alphanumeric characters and a check digit.

37. A system for initiating an electronic account over a network, comprising:

a processor; and

a memory coupled to the processor, wherein the memory comprises instructions that are executed by the processor to perform operations comprising;

receiving registration information from a user;

transmitting the registration information from the network server to a database server;

storing the registration information in a customer name database by the database server;

retrieving a physical address of the user from an address database using the registration information;

storing the physical address of the user in a customer address database;

generating, by a verification form generator, an identification verification form using the physical address and the registration information;

sending the identification verification form to the user at the physical address;

notifying a confirmation host, by the verification form generator, when the identification verification form has been sent;

validating the identification verification form by the user at a registration office;

transmitting validated identification verification information from the registration office to the confirmation host;

retrieving the validated identification verification information at the registration system from the confirmation host to establish the electronic account for the user;

requesting, by the registration system, an electronic certificate for the electronic account from a certificate authority;

receiving the electronic certificate by the registration system;

and

linking the electronic certificate to the electronic account.

38. The system of claim 37, wherein the registration information is received in response to a plurality of HTML documents transmitted from the network server to the user.

39. The system of claim 38, wherein the plurality of HTML documents includes an overview of the electronic account.

40. The system of claim 38, wherein the plurality of HTML documents includes registration procedures.

41. The system of claim 38, wherein the plurality of HTML documents includes a privacy statement.

42. The system of claim 38, wherein the plurality of HTML documents includes a security policy.

43. The system of claim 38, wherein the plurality of HTML documents requests the user'"'"'s name, date of birth, and telephone number.

44. The system of claim 38, wherein the plurality of HTML documents requests a preferred e-mail address.

45. The system of claim 38, wherein the plurality of HTML documents requests a preferred password.

46. The system of claim 38, wherein the plurality of HTML documents offers a selection of available e-mail addresses.

47. The system of claim 38, wherein the plurality of HTML documents requests the user'"'"'s residential address.

48. The system of claim 38, wherein the plurality of HTML documents requests identity validation information including a photo ID and a secondary ID.

49. The system of claim 38, wherein the plurality of HTML documents displays the registration information for the user to review.

50. The system of claim 38, wherein the plurality of HTML documents includes a private key generation process.

51. The system of claim 38, wherein the plurality of HTML documents requests the user to choose a communication password to protect the private key.

52. The system of claim 38, wherein the plurality of HTML documents enables the user to obtain an electronic certificate for the electronic account.

53. The system of claim 38, wherein the plurality of HTML documents enables the user to activate the electronic account by entering an e-mail address and a password.

54. A system for creating an electronic account for a user, comprising:

a processor; and

a memory coupled to the processor, wherein the memory comprises instructions that are executed by the processor to perform operations comprising;

receiving registration information from the user;

storing the registration information in a database;

generating a unique electronic account number corresponding to the registration information;

processing the registration information in a physical address matching engine to determine a physical address of the user;

generating, by a verification form generator, an identification verification form using the physical address and the registration information;

sending the identification verification form to the user at the physical address;

notifying a confirmation host, by the verification form generator, when the identification verification form has been sent;

validating the identification verification form by the user at a registration office;

transmitting validated identification verification information from the registration office to the confirmation host;

retrieving the validated identification verification information at the registration system from the confirmation host to establish the electronic account for the user;

sending a request to a certificate authority for an electronic certificate for the electronic account;

receiving the electronic certificate;

creating the electronic account, the electronic account being stored in a customer name database containing the registration information;

storing the physical address of the user in a customer address database; and

associating the electronic certificate with the electronic account.

55. The system of claim 54, wherein the unique electronic account number is generated by United States Postal Service account number generator software.

56. The system of claim 54, wherein the physical address matching engine is a United States Postal Service address matching engine.

57. The system of claim 54, wherein the certificate authority is a United States Postal Service Certificate Authority.

58. A computer usable memory having computer readable code embodied therein, for initiating an electronic account over a network, the computer readable code comprising:

an information receiving module configured to receive user information from a user via the network to initiate the electronic account;

a first generating module configured to generate a unique electronic account number corresponding to the user information;

an establishing module configured to establish the electronic account using the unique electronic account number, the electronic account being stored in a customer name database containing the user information;

a first retrieving module configured to retrieve a physical address of the user from an address database based on the user information, the physical address corresponding to the location where the user receives physical mail;

a storing module configured to store the physical address of the user in a customer address database;

a second generating module configured to generate an identification verification form using the physical address and the user information;

a first transmitting module configured to transmit the identification verification form to the user at the physical address;

a notifying module configured to notify a confirmation host when the identification verification form has been transmitted;

a validating module configured to validate the identification verification form from the user at a registration office;

a second transmitting module configured to transmit validated identification verification information from the registration office to the confirmation host;

a second retrieving module configured to retrieve the validated identification verification information at the registration system from the confirmation host to establish the electronic account for the user;

a requesting module configured to request, by the registration system, an electronic certificate for the electronic account from a certificate authority;

a receiving module configured to receive the electronic certificate by the registration system; and

a linking module configured to link the electronic certificate to the electronic account.

59. A computer usable memory having computer readable code embodied therein, for initiating an electronic account over a network, the computer readable code comprising:

a first receiving module configured to receive registration information from a user;

a first transmitting module configured to transmit the registration information from the network server to a database server;

a first storing module configured to store the registration information in a customer name database by the database server;

a first retrieving module configured to retrieve a physical address of the user from an address database using the registration information;

a second storing module configured to store the physical address of the user in a customer address database;

a first generating module configured to generate an identification verification form using the physical address and the registration information;

a second transmitting module configured to transmit the identification verification form to the user at the physical address;

a notifying module configured to notify a confirmation host when the identification verification form has been sent;

a validating module configured to validate the identification verification form from the user at a registration office;

a third transmitting module configured to transmit validated identification verification information from the registration office to the confirmation host;

a second retrieving module configured to retrieve the validated identification verification information at the registration system from the confirmation host to establish the electronic account for the user;

a second generating module configured to generate by an application server, a unique electronic account number corresponding to the registration information and the customer name database;

a requesting module configured to request, by the registration system, an electronic certificate for the electronic account from a certificate authority;

a second receiving module configured to receive the electronic certificate by the registration system; and

a linking module configured to link the electronic certificate to the electronic account.

60. A computer readable memory having computer readable code embodied therein for creating an electronic account for a user, the computer readable code comprising:

a registration receiving module configured to receive registration information from the user;

a storing module configured to store the registration information in a database;

a first generating module configured to generate a unique electronic account number corresponding to the registration information;

a processing module configured to process the registration information in a physical address matching engine to determine a physical address of the user;

a second generating module configured to generate an identification verification form using the physical address and the registration information;

a first transmitting module configured to transmit the identification verification form to the user at the physical address;

a notifying module configured to notify a confirmation host when the identification verification form has been sent;

a validating module configured to validate the identification verification form from the user at a registration office;

a second transmitting module configured to transmit validated identification verification information from the registration office to the confirmation host;

a retrieving module configured to retrieve the validated identification verification information at the registration system from the confirmation host to establish the electronic account for the user;

a sending module configured to send a request to a certificate authority for an electronic certificate for the electronic account;

a certificate receiving module configured to receive the electronic certificate;

a creating module configured to create the electronic account, the electronic account being stored in a customer name database containing the registration information;

a storing module configured to store the physical address of the user in a customer address database; and

an associating module configured to associate the electronic certificate.

61. A system for initiating an electronic account over a network, comprising:

a processor; and

a memory coupled to the processor, wherein the memory comprises instructions that are executed by the processor to perform operations comprising;

receiving user information from a user via the network to initiate the electronic account;

generating a unique electronic account number corresponding to the user information;

establishing the electronic account using the unique electronic account number, the electronic account being stored in a customer name database containing the user information;

retrieving a physical address of the user from an address database based on the user information, the physical address corresponding to the location where the user receives physical mail;

storing the physical address of the user in a customer address database;

generating, by a verification form generator, an identification verification form using the physical address and the user information;

sending the identification verification form to the user at the physical address;

notifying a confirmation host, by the verification form generator, when the identification verification form has been sent;

validating the identification verification form from the user at a registration office;

transmitting validated identification verification information from the registration office to the confirmation host;

retrieving the validated identification verification information at the registration system from the confirmation host to establish the electronic account for the user;

requesting, by the registration system, an electronic certificate for the electronic account from a certificate authority;

receiving the electronic certificate by the registration system; and

linking the electronic certificate to the electronic account.

62. A system for initiating an electronic account over a network, comprising:

a processor; and

a memory coupled to the processor, wherein the memory comprises instructions that are executed by the processor to perform operations comprising;

receiving, at a network server, registration information from a user;

transmitting the registration information from the network server to a database server;

storing the registration information in a customer name database by the database server;

retrieving a physical address of the user from an address database using the registration information;

storing the physical address of the user in a customer address database;

generating, by a verification form generator, an identification verification form using the physical address and the registration information;

sending the identification verification form to the user at the physical address;

notifying a confirmation host, by the verification form generator, when the identification verification form has been sent;

validating the identification verification form from the user at a registration office;

transmitting validated identification verification information from the registration office to the confirmation host;

retrieving the validated identification verification information at the registration system from the confirmation host to establish the electronic account for the user;

generating, by an application server, a unique electronic account number corresponding to the registration information and the customer name database;

requesting, by the registration system, an electronic certificate for the electronic account from a certificate authority;

receiving the electronic certificate by the registration system; and

linking the electronic certificate to the electronic account.

63. A system for creating an electronic account for a user, comprising:

a processor; and

a memory coupled to the processor, wherein the memory comprises instructions that are executed by the processor to perform operations comprising;

receiving registration information from the user;

storing the registration information in a database;

generating a unique electronic account number corresponding to the registration information;

processing the registration information in a physical address matching engine to determine a physical address of the user;

generating, by a verification form generator, an identification verification form using the physical address and the registration information;

sending the identification verification form to the user at the physical address;

notifying a confirmation host, by the verification form generator, when the identification verification form has been sent;

validating the identification verification form from the user at a registration office;

transmitting validated identification verification information from the registration office to the confirmation host;

retrieving the validated identification verification information at the registration system from the confirmation host to establish the electronic account for the user;

sending a request to a certificate authority for an electronic certificate for the electronic account;

receiving the electronic certificate;

creating the electronic account, the electronic account being stored in a customer name database containing the registration information;

storing the physical address of the user in a customer address database; and

associating the electronic certificate with the electronic account.

64. A method for registering an electronic account over a network, comprising the steps of:

transmitting registration information from a user to a registration system over the network;

receiving the registration information at the registration system over the network;

storing the registration information in a database;

retrieving a physical address of the user from an address database using the registration information;

generating, by a verification form generator, an identification verification form using the physical address and the registration information;

sending the identification verification form to the user at the physical address;

notifying a confirmation host, by the verification form generator, when the identification verification form has been sent;

validating the identification verification form by the user at a registration office;

transmitting validated identification verification information from the registration office to the confirmation host;

retrieving the validated identification verification information at the registration system from the confirmation host to establish the electronic account for the user;

requesting, by the registration system, an electronic certificate for the electronic account from a certificate authority;

receiving the electronic certificate by the registration system; and

linking the electronic certificate to the electronic account.

65. The method of claim 64, wherein the linking step further includes the step of:

downloading the electronic certificate to a computer of the user.

66. The method of claim 64, wherein the linking step further includes the step of:

downloading the electronic certificate to a Smart Card.

67. The method of claim 64, wherein the linking step further includes the step of:

downloading the electronic certificate to a certificate holding device.

68. A system for registering an electronic account over a network, comprising:

a processor; and

a memory coupled to the processor, wherein the memory comprises instructions that are executed by the processor to perform operations comprising;

transmitting registration information from a user to a registration system over the network;

receiving the registration information at the registration system over the network;

storing the registration information in a database;

retrieving a physical address of the user from an address database using the registration information;

generating an identification verification form using the physical address and the registration information;

sending the identification verification form to the user at the physical address;

notifying a confirmation host when the identification verification form has been sent;

validating the identification verification form by the user at a registration office;

transmitting validated identification verification information from the registration office to the confirmation host;

retrieving the validated identification verification information at the registration system from the confirmation host to establish the electronic account for the user;

requesting an electronic certificate for the electronic account from a certificate authority;

receiving the electronic certificate by the registration system; and

linking the electronic certificate to the electronic account.

69. The system of claim 68, wherein linking further includes:

downloading the electronic certificate to a computer of the user.

70. The system of claim 68, wherein linking further includes:

downloading the electronic certificate to a Smart Card.

71. The system of claim 68, wherein linking further includes:

downloading the electronic certificate to a certificate holding device.

72. A system for registering an electronic account over a network, comprising:

a processor; and

a memory coupled to the processor, wherein the memory comprises instructions that are executed by the processor to perform operations comprising;

transmitting registration information from a user to a registration system over the network;

receiving the registration information at the registration system over the network;

storing the registration information in a database;

retrieving a physical address of the user from an address database using the registration information;

generating an identification verification form using the physical address and the registration information;

sending the identification verification form to the user at the physical address;

notifying a confirmation host when the identification verification form has been sent;

validating the identification verification form by the user at a registration office;

transmitting validated identification verification information from the registration office to the confirmation host;

retrieving the validated identification verification information at the registration system from the confirmation host to establish the electronic account for the user;

requesting an electronic certificate for the electronic account from a certificate authority;

receiving the electronic certificate by the registration system; and

means for linking the electronic certificate to the electronic account.

73. A computer readable memory having computer readable code embodied therein for registering an electronic account over a network, the computer readable code comprising:

a registration information transmitting module configured to transmit registration information from a user to a registration system over the network;

a registration receiving module configured to receive the registration information at the registration system over the network;

a storing module configured to store the registration information in a database;

a physical address retrieving module configured to retrieve a physical address of the user from an address database using the registration information;

a generating module configured to generate an identification verification form using the physical address and the registration information;

a verification sending module configured to send the identification verification form to the user at the physical address;

a notifying module configured to notify a confirmation host when the identification verification form has been sent;

a validating module configured to validate the identification verification form by the user at a registration office;

a verification transmitting module configured to transmit validated identification verification information from the registration office to the confirmation host;

a retrieving module configured to retrieve the validated identification verification information at the registration system from the confirmation host to establish the electronic account for the user;

a requesting module configured to request an electronic certificate for the electronic account from a certificate authority;

a certificate receiving module configured to receive the electronic certificate by the registration system; and

a linking module configured to link the electronic certificate to the electronic account.