Doing business without SSN, EIN, and charge card numbers

• US 8,281,145 B2
• Filed: 12/14/2007
• Issued: 10/02/2012
• Est. Priority Date: 12/14/2007
• Status: Expired due to Fees

• Current Assignee: Mehran Randall Rasti
• Original Assignee: Mehran Randall Rasti
• Inventors: Rasti, Mehran Randall
• Primary Examiner(s): Schwartz, Darren B
• Application Number:
  US11/957,266
• Publication Number:
  US 20090158030A1
• Time in Patent Office: 1,754 Days
• Field of Search: 713150-153, 713155-156, 713/159, 713164-173, 713/175, 713/180, 713182-186, 713/193, 726 2- 10, 726 26- 30, 705 50- 51, 705 55- 56, 705 64- 67, 705 70- 76
• US Class Current: 713/182
• CPC Class Codes: H04L 63/0421 Anonymous communication, i.e. the party's identifiers are hidden from the other party or parties, e.g. using an anonymizer
• CPC Class Codes: H04L 63/083 using passwords cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226
• CPC Class Codes: H04L 63/0884 by delegation of authentication, e.g. a proxy authenticates an entity to be authenticated on behalf of this entity vis-à-vis an authentication entity

Abstract

The present invention introduces encrypted identifiers to be used when the owner of an identifier wants to hide the original identifier away from public exposure but still be able to be uniquely identified through the encrypted form of the identifier. The encrypted proxy identifiers are generated using a Rule Number that references a user-specific algorithm and encryption key that is different for every user. One or more identity-owner-specific passwords are also utilized.

Claims

1. A four way method for authenticating to a third party a person'"'"'s ownership of an object, the method comprising the steps of:

a trustee performing the steps comprising;

verifying a name and at least one identity-identifier of the person;

verifying said object as being uniquely identifiable through an object identifier;

verifying said person as being the owner of said object and said object identifier;

upon a positive authentication of proof of ownership, declaring said person as object owner and enrolling said object owner name associated with said object identifier in a computer system of the trustee by issuing one password;

issuing a data-set comprising at least one identity-password and at least one proxy-identifier associated with said object identifier;

storing said data-set in at least one of a plug-in memory, a card, or a portable electronic device;

delivering said data-set to said object owner through secure means;

associating and storing in the computer of the trustee said object identifier, the at least one proxy-identifier, the at least one identity-password, and said object owner name;

accepting and enrolling at least one of a third party business or an organization user of identity-identifiers as a third party and a user group member;

programming a plurality of different encryption rules and referencing each one of said encryption rule with a rule number allocated to each of said third party;

assigning each one of said rule and rule number to at least one of said third party;

associating and storing each of said rule and rule number with a name of said third party in a file;

customizing and storing one of said rule number with its associated rule in at least one Read-Only-Memory (ROM) embedded in at least one digital peripheral processor equipped with a keypad;

delivering said digital peripheral processor and ROM contents to said third party via secure means;

generating a first encrypted-proxy-identifier by applying a third party rule to at least one of the object owner'"'"'s proxy-identifier with at least one of said identity-password;

securely delivering to a credit bureau'"'"'s computer system said first encrypted-proxy-identifier, said object identifier, and said object owner name;

authenticating a person'"'"'s entitlement to the object;

the third party performing the steps comprising;

attaching and configuring said digital peripheral processor to a computer system of said third party;

informing said person of said rule number;

said person generating a second encrypted-proxy-identifier by applying the rule number of the third party to at least one of said proxy-identifier and at least one of said identity-password using said data-set;

transferring the generated second encrypted-proxy-identifier to said third party computer system;

the third party transmitting its own merchant number and its own merchant name along with the second encrypted-proxy-identifier to a credit bureau;

the credit bureau performing the steps comprising;

receiving the first encrypted-proxy-identifier, said object identifier, and said object owner name from the trustee;

receiving the third party'"'"'s merchant number, the merchant name, and the second encrypted-proxy-identifier;

comparing the first encrypted-proxy-identifier with the second encrypted-proxy-identifier; and

upon a positive match of the first encrypted-proxy-identifier with the second encrypted-proxy-identifier,

retrieving said object identifier and said object owner name associated with the first encrypted-proxy-identifier,

retrieving a proprietary credit bureau owned information upon a positive match of the said object identifier and said object owner name,

extracting at least one of the merchant number or the merchant name, and

providing the third party with said object owner name and the proprietary credit bureau information, excluding the object identifier.

2. The method of claim 1, further comprising:

the credit bureau registering and enrolling with the trustee.

3. The method of claim 1, further comprising:

the trustee assigning and issuing a different rule number and associated encryption rule to one or more of said third party.

4. The method of claim 1, wherein:

said object is one of a person, a business, a corporation, or an organization.

5. The method of claim 1, wherein:

said object identifier is at least one or more of an alphanumeric or digital representation of at least one of fixed-for-life-identity-identifiers, including at least one of an organization'"'"'s Employer Identification Number (EIN), Tax Identification Number, a person'"'"'s social security number, fingerprint, iris pattern, earlobe pattern, DNA structure, biometric information, or other fixed-for-life unique identifier.

6. The method of claim 1, wherein:

said object identifier is at least one of an alphanumeric or digital representation of a semi-fixed personal identifier including at least one of a person'"'"'s signature, picture, debit card account number, charge card account number, driver'"'"'s license number, patient number, insurance number, student number, log-on user name, access code, software license number, a fixed identifier, or semi-fixed identifier.

7. The method of claim 1, wherein:

said object identifier is at least one of an access code, a serial-number, an identity-verifier, or an identifier comprising;

object usage rights, rights of ownership, authority, or privilege of various degrees wherein said usage rights or rights of ownership have been allocated through at least one of said object owner.

8. The method of claim 1, further comprising the steps of entering at least one password, and said person generating said second encrypted-proxy-identifier by applying at least one of an encryption rule associated with said rule number of said third party to at least one of the proxy-identifier and at least one of said identity-password of at least zero in length.

9. The method of claim 1, wherein:

after entering a valid password, said person initiates the delivery of said second encrypted-proxy-identifier to either of said trustee or said third party computer system from one of;

the plug-in memory, a card, or an electronic device.

10. The method of claim 1, wherein:

after entering a valid password, said person generates said second encrypted-proxy-identifier utilizing one of;

a cell phone, a computer, or an electronic device; and

transferring said second encrypted-proxy-identifier to one of said trustee or said third party computer system.

11. The method of claim 1, wherein:

after entering a valid password, said person transfers to one of said trustee or said third party computer system said second encrypted-proxy-identifier from at least one of;

a smart card, RFID (Radio-Frequency Identification Device), or other data storage device.

12. The method of claim 1, wherein:

after entering at least one valid password, said person retrieves the at least one of said proxy-identifier from a plurality of proxy-identifiers associated with said object identifier and generates said second encrypted-proxy-identifier through an interface of said trustee computer.

13. The method of claim 1, wherein:

said person transmitting at least one of said proxy-identifier, a valid password, and the rule number to the trustee, after which, the trustee transmits an authenticated instance of an encrypted object identifier to said third party.

14. The method of claim 1, wherein:

said person sending an encrypted instance of the one of said proxy-identifier to either one of said trustee or said third party where the person is not physically present at a location of the third party.

15. The method of claim 1, further comprising:

issuing a plurality of proxy-identifiers to the object owner wherein the proxy-identifiers are each associated with;

said object identifier associated with said owner and at least one of said identity-password of at least zero in length.

16. The method of claim 1, wherein:

a plurality of said proxy-identifiers wherein each one of said proxy-identifier comprises at least one password of at least zero in length, and at least one of said rule number, wherein each one of said proxy-identifier is associated with at least one of said object identifier.

17. The method of claim 1, wherein:

a plurality of said proxy-identifiers each comprise one of said identity-password of at least zero in length and at least one object identifier, wherein each proxy-identifier is associated with at least one of said third party rule number.

18. The method of claim 1, wherein:

the trustee decrypting said first encrypted-proxy-identifier and said second encrypted-proxy-identifier to original binaries through programming a reverse algorithm associated with the rule number used in encrypting said first encrypted-proxy-identifier and said second encrypted-proxy-identifier.

19. The method of claim 1, wherein:

the credit bureau further performs functions of the trustee.

20. The method of claim 1, wherein:

the trustee further performs functions of the credit bureau.

21. The method of claim 1, wherein:

the at least one of said proxy-identifier further comprises at least one character where the character is from the UTF (Unicode Transformation Format) international character set and said identity-password further comprises at least one character where the character is from the UTF international character set.

22. The method of claim 1, wherein:

an encrypted instance of said object-identifier is used in lieu of one of the said proxy-identifier of said object.

23. The method of claim 1, wherein:

said object owner is one of a corporation, a business, an organization, or a computer that owns said object, where said object is a data object.

24. The method of claim 1, wherein:

said identity-password has a minimum length of zero and a maximum length of 16,777,216 terabytes.

25. The method of claim 1, wherein:

said first encrypted-proxy-identifier is one of;

an encrypted object identifier or one of an encrypted proxy-identifier; and

said second encrypted-proxy-identifier is one of;

an encrypted object identifier or one of an encrypted proxy-identifier.

26. The method of claim 1, further comprising:

said third party peripheral processor comprising said ROM (Read Only Memory) wherein said ROM is pre-programmed and custom designed by said trustee to process the at least one of said proxy-identifier, said identity-password, and an encryption rule where the encryption rule is associated with a rule number.