Personal criteria verification using fractional information

• US 7,996,491 B2
• Filed: 05/22/2009
• Issued: 08/09/2011
• Est. Priority Date: 05/08/2000
• Status: Active Grant

• Current Assignee: Kioba Processing, LLC (IP Investments Group LLC)
• Original Assignee: Hoshiko LLC (Raoul Management LLC)
• Inventors: Shuster, Gary Stephen
• Primary Examiner(s): Serrao; Ranodhi N
• Application Number:
  US12/471,240
• Publication Number:
  US 20090249449A1
• Time in Patent Office: 809 Days
• Field of Search: 709/217, 709/219, 707/705, 707/758
• US Class Current: 709/217
• CPC Class Codes: H04L 63/126 the source of the received data
• CPC Class Codes: Y10S 707/99933 Query processing, i.e. searching
• CPC Class Codes: Y10S 707/99935 Query augmenting and refining, e.g. inexact access
• CPC Class Codes: Y10S 707/99936 Pattern matching access

Abstract

A method for verifying the identity of users connected to a computer network comprises providing fractional information queries to users, wherein responses to these individual queries are not sufficient to identify the user. This method further comprises receiving responses to these fractional information queries and comparing these responses to data available from within a computer network. A set of potential matches to the user is generated according to these responses and is used in determining whether the set of potential matches is sufficient to identify the user.

Claims

1. A method comprising:

in response to a request for access to data that is accessible only to individuals meeting at least one predetermined criterion, requesting only partial identifying information for a person requesting access to the data, wherein the partial identifying information includes less than all characters of a data element that is usable to identify the person;

requesting, using a computer, information regarding records associated with respective individuals having attributes matching the partial identifying information;

receiving, by the computer, information regarding a plurality of records associated with respective individuals each having attributes matching the partial identifying information;

determining whether each of the plurality of records includes attributes matching the at least one predetermined criterion; and

in response to determining that each of the plurality of records includes attributes matching the at least one predetermined criterion, providing an indication that the person requesting access is authorized to access the data without providing a specific identity of the person.

2. The method of claim 1, wherein, in response to determining that not all of the plurality of records include attributes matching the at least one predetermined criterion, denying access to the data by the person.

3. The method of claim 1, wherein, in response to determining that not all of the plurality of records include attributes matching the at least one predetermined criterion, requesting additional partial identifying information distinct from the partial identifying information for the person requesting access.

4. The method of claim 3, further comprising:

requesting, using the computer, information regarding a second plurality of records associated with respective individuals each having attributes matching the partial identifying information and the additional partial identifying information; and

in response to determining that each of the second plurality of records includes attributes matching the at least one predetermined criterion, providing an indication that the person requesting access is authorized to access the data without providing a specific identity of the person.

5. The method of claim 1, wherein the at least one predetermined criterion defines a current age of a person.

6. The method of claim 1, wherein the at least one predetermined criterion defines a current residence location of a person.

7. The method of claim 1, further comprising receiving the request for access at a user computer, wherein the requested data is stored in a data storage device operably associated with the user computer.

8. The method of claim 1, wherein said requesting comprises querying at least two independent data sources.

9. The method of claim 8, further comprising withholding part of the partial identifying information from at least one of the at least two independent data source.

10. An apparatus comprising:

a computer operably associated with a memory, the memory holding instructions configured to cause the computer to;

request partial identifying data of a person requesting access to information that is accessible only to persons meeting at least one predetermined criterion wherein the partial identifying data includes less than all characters of a data element that is usable to identify the person;

query at least one data source using the partial identifying data to identify one or more records associated with respective individuals each having attributes matching the partial identifying data;

determining whether each of the identified one or more records includes attributes matching the at least one predetermined criterion; and

in response to determining that each of the identified one or more records includes attributes matching the at least one predetermined criterion, providing an indication that the person requesting access is authorized to access the information without providing a specific identity of the person.

11. The apparatus of claim 10, wherein the memory holds further instructions configured to cause the computer to provide access to the information only if each of the identified one or more records includes attributes matching the at least one predetermined criterion.

12. The apparatus of claim 10, wherein the memory holds further instructions configured to cause the computer to request additional partial identifying data if one or more of the identified one or more records does not include attributes matching the at least one predetermined criterion, the additional partial identifying data distinct from the partial identifying data for the person.

13. The apparatus of claim 12, wherein the memory holds further instructions configured to cause the computer to query the at least one data source a second time using the partial identifying data and the additional partial identifying data to obtain a second one or more records each having attributes matching the partial identifying data and the additional partial identifying data;

and provide access to the information only if each of the second one or more records includes attributes matching the at least one predetermined criterion.

14. The apparatus of claim 10, wherein one of the predetermined criterion comprises a minimum age.

15. The apparatus of claim 10, wherein one of the predetermined criterion comprises a current residence location.

16. The apparatus of claim 10, wherein the memory holds further instructions configured to cause the computer to receive a request for access at a user computer, wherein the information is stored in a data storage device operably associated with the user computer.

17. The apparatus of claim 10, wherein said querying comprises querying at least two independent data sources.

18. The apparatus of claim 17, wherein the memory holds further instructions configured to cause the computer to withhold part of the partial identifying data from at least one of the at least two independent data sources.

19. A non-transitory tangible computer readable storage medium having software instructions stored thereon that, in response to execution by a computing device, cause the computing device to perform operations comprising:

in response to a request for access to data that is accessible only to individuals meeting at least one predetermined criterion, requesting only partial identifying information for a person requesting access to the data, wherein the partial identifying information includes less than all characters of a data element that is usable to identify the person;

requesting information regarding records associated with respective individuals having attributes matching the partial identifying information;

receiving information regarding a plurality of records associated with respective individuals each having attributes matching the partial identifying information;

determining whether each of the plurality of records includes attributes matching the at least one predetermined criterion; and

in response to determining that each of the plurality of records includes attributes matching the at least one predetermined criterion, providing an indication that the person requesting access is authorized to access the data without providing a specific identity of the person.

20. The non-transitory tangible computer readable storage medium of claim 19, wherein said requesting comprises querying at least two independent data sources.