Centralized identity authentication for electronic communication networks

• US 8,321,912 B2
• Filed: 08/27/2010
• Issued: 11/27/2012
• Est. Priority Date: 03/06/2000
• Status: Expired due to Term

• Current Assignee: CardinalCommerce Corporation (Visa, Inc.)
• Original Assignee: CardinalCommerce Corporation (Visa, Inc.)
• Inventors: Bhagavatula, Ravishankar S., Balasubramanian, Chandra S., Sherwin, Francis M., Keresman, Michael A. III, Bowman, Jeffry J.
• Primary Examiner(s): Song, Hosuk
• Application Number:
  US12/870,052
• Publication Number:
  US 20100325694A1
• Time in Patent Office: 823 Days
• Field of Search: 713/150, 713/155, 713/168, 713/170, 726 2- 9, 705/50, 705/53, 705 67- 68, 705/70, 705 75- 79
• US Class Current: 726/2
• CPC Class Codes: G06F 21/31 User authentication
• CPC Class Codes: G06F 21/445 by mutual authentication, e.g. between devices or programs
• CPC Class Codes: G06Q 20/4014 Identity check for transactions
• CPC Class Codes: G06Q 30/06 Buying, selling or leasing transactions
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/083 using passwords cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226

Abstract

A method of centralized identity authentication for use in connection with a communications network includes registering users of the communications network such that each registered user'"'"'s identity is uniquely defined and determinable, and registering a plurality of vendors having a presence on the communications network. The registered vendors selectively transact with registered users, wherein the transactions include: (i) the registered vendor selling goods and/or services to the registered user; (ii) the registered vendor granting the registered user access to personal records maintained by the registered vendor; and/or (iii) the registered vendor communicating to the registered user personal information maintained by the registered vendor. The method also includes each user'"'"'s identity being authenticated over the communications network prior to completion of transactions between registered vendors and registered users.

Claims

1. A method of centralized identity authentication for use in connection with a communications network comprising:

(a) registering by at least one processor a user of the communications network such that the registered user'"'"'s identity is uniquely defined and determinable;

(b) registering by the processor a vendor having a presence on the communications network, said registered vendor selectively transacting with the registered user, said transaction including at least one of;

(i) the registered vendor granting the registered user access to registered user personal records maintained by the registered vendor; and

,

(ii) the registered vendor communicating to the registered user, registered user personal information maintained by the registered vendor; and

,

(c) authenticating by the processor the registered user'"'"'s identity over the communications network prior to completion of a transaction between the registered vendor and the registered user.

2. The method according to claim 1, further comprising:

(d) communicating results of the authentication to at least one of the registered user and the registered vendor involved in the transaction.

3. The method according to claim 1, further comprising:

(d) authorizing the completion of the transaction between the registered vendor and the registered user.

4. The method according to claim 3, wherein the registered user'"'"'s identity is withheld from the vendor.

5. The method according to claim 1, wherein the authentication is carried out using at least two-factor authentication.

6. The method according to claim 1, wherein the vendor is selected from a group consisting of governmental agencies, medical-records keepers, financial institutions, credit card companies, insurance organizations, credit bureaus, pharmaceutical concerns and retail concerns.

7. The method according to claim 1, wherein the method further comprises notifying the registered user when a non-authentic user attempts to transact with a registered vendor posing as the registered user.

8. The method according to claim 1, wherein registering a user comprises:

obtaining personal data related to the user; and

,

verifying the user'"'"'s identity.

9. The method according to claim 8, wherein verifying the user'"'"'s identity is accomplished by comparing for consistency the personal data obtained with corresponding personal data maintained by the registered vendor.

10. A centralized identity authentication system comprising:

a server connected to a communications network that is operative to;

register users of the communications network such that each registered user'"'"'s identity is uniquely defined and determinable;

register a plurality of vendors having a presence on the communications network;

authenticate registered users'"'"' identities by collecting authentication data from users over the communication network and comparing it to corresponding data from account records in a central database such that when there is a match the user providing the authentication data is deemed to be the registered user which holds the account; and

,

a central database accessible by the server, the central database containing accounts created for each registered user and each registered vendor, the accounts including records of data collected;

wherein the server is further operative to notify a true registered user of a failed authentication attempt carried out by the authentication means on an imposter.

11. The centralized authentication system according to claim 10, wherein the communications network comprises the Internet.

12. The centralized authentication system according to claim 10, wherein the vendors are selected from a group consisting of governmental agencies, medical-records keepers, financial institutions, credit card companies, insurance organizations, credit bureaus, pharmaceutical concerns and retail concerns.

13. The centralized authentication system according to claim 10, wherein the server is further operative to communicate results of the authentication to at least one of respective users and vendors involved in transactions with one another.

14. A method of centralized identity authentication for use in connection with a communications network comprising:

(a) registering by at least one processor a user of the communications network such that the registered user'"'"'s identity is uniquely defined and determinable;

(b) registering by the processor a vendor having a presence on the communications network, said registered vendor selectively transacting with the registered user, said transaction comprising the registered vendor selling at least one of goods and services to the registered user;

(c) authenticating by the processor the registered user'"'"'s identity over the communications network prior to completion of a transaction between the registered vendor and the registered user, wherein the registered user'"'"'s identity is withheld from the registered vendor.

15. The method according to claim 14 further comprising:

(d) communicating results of the authentication to at least one of the registered user and the registered vendor involved in the transaction.

16. The method according to claim 14, further comprising:

(d) authorizing the completion of the transaction between the registered vendor and the registered user using account privileges limiting use of an account of the registered user.

17. The method according to claim 14, wherein the authentication is carried out using at least two-factor authentication.

18. The method according to claim 14, wherein the vendor is selected from a group consisting of governmental agencies, medical-records keepers, financial institutions, credit card companies, insurance organizations, credit bureaus, pharmaceutical concerns and retail concerns.