Systems and methods for authorization of information access

• US 8,621,641 B2
• Filed: 02/29/2008
• Issued: 12/31/2013
• Est. Priority Date: 02/29/2008
• Status: Expired due to Fees

• Current Assignee: Vicki L. James
• Original Assignee: Vicki L. James
• Inventors: Carow, Michael D., James, Vicki L.
• Primary Examiner(s): PYZOCHA, MICHAEL J
• Application Number:
  US12/074,037
• Publication Number:
  US 20090222897A1
• Time in Patent Office: 2,132 Days
• Field of Search: 726/6, 726/26
• US Class Current: 726/26
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/083 using passwords cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226
• CPC Class Codes: H04L 63/102 Entity profiles

Abstract

Systems and methods according to the present invention provide a proactive approach to controlling access to information that may be correlated with a governmentally issued personal identifier. Included are systems and methods for proactive control of information access and liability incursion. Further included are systems and methods for emulating information access to an authorized person. Generally, a method according to the present invention includes the steps of requesting verification from a subscriber at any time that information is requested from registered information holders and any time that liability may be incurred through registered information holders. In this way, the subscriber, rather than reacting to invasive information or identity theft, may proactively control access to such information, thereby preventing the theft in the first place.

Claims

1. A method for approving access to or use of personal information correlated to a governmentally issued identifier, said method comprising the steps of:

receiving, through an internet capable device, an unsolicited verification communication from a verification system;

using said internet capable device to transmit a variable static client identifier to said verification system;

using said internet capable device to transmit a dynamic client identifier to said verification system; and

using said internet capable device to transmit a subscriber verification response to said verification system,

said verification communication being received at a communication address, said address having been provided to said verification system by a person directly correlated with said governmentally issued identifier,

wherein said subscriber verification response indicates an approval or denial of permission for a third party to access or use said personal information, and said third party is different from said verification system.

2. A method according to claim 1 further comprising the step of:

registering with a protection service provider.

3. A method according to claim 2, said registering step comprising a sign-up step and an activation step.

4. A method according to claim 3, said activation step including the step of submitting a governmentally issued identifier to said verification system.

5. A method according to claim 3, said sign-up step further including the steps of:

generating said variable static client identifier; and

submitting said variable static client identifier to said verification system.

6. A method according to claim 5, said sign-up step including the step of receiving said dynamic client identifier.

7. A method according to claim 5, said activation step including the step of submitting a governmentally issued identifier to said verification system.

8. A method according to claim 1, said subscriber verification response comprising a third client identifier.

9. A method according to claim 8, said third client identifier being one of a plurality of predetermined static client identifiers.

10. A method according to claim 8, said verification communication being a subscriber verification request to allow access to personal information correlated to a governmentally issued identifier and said third client identifier indicating acceptance or declination of a system verification request that may have prompted said subscriber verification request.

11. A method according to claim 1, said verification communication being at least one of an electronic text message, a telephone call initiated by an interactive voice response unit and a facsimile transmission.

12. A method according to claim 11, said electronic text message being a short message service (SMS) text message.

13. A method according to claim 11, said electronic text message being an electronic mail message.

14. A method according to claim 1, said communication address being at least one of a telephone number, an e-mail address, a facsimile number, and an internet protocol address.

15. A method according to claim 1, all transmitting steps being conducted after the received verification communication.

16. A method for verifying access to personal information correlated to a governmentally issued identifier, said method comprising the steps of:

at a verification system including an internet server, receiving a system verification request from a first party holding said personal information, wherein said verification request was prompted by a request from a second party;

using said verification system to initiate a verification communication to a third party that controls permission to access said personal information, wherein said first party, said second party, and said third party are different from each other;

receiving a variable static client identifier;

receiving a dynamic client identifier;

receiving a subscriber verification response;

waiting until the expiry of a response time, wherein said expiry of said response time is caused by one of an elapse of a predetermined period of time and said receiving of said subscriber verification response; and

after said waiting step, using said verification system to reply to said system verification request with a system verification response

wherein said system verification response indicates an approval or denial of permission by said third party for said second party to access or use said personal information.

17. A method according to claim 16, wherein said system verification request is unsolicited.

18. A method according to claim 16, said system verification request indicating a requested access to personal information correlated to a governmentally issued identifier.

19. A method according to claim 16, said system verification request indicating a requested creation of liability on behalf of a person correlated to a governmentally issued identifier.

20. A method according to claim 19, said system verification request indicating a requested electronic funds transfer.

21. A method according to claim 16, wherein said verification communication is initiated to a communication address, said method further comprising the step of:

transmitting a verification acknowledgement to said communication address.

22. A method according to claim 16, wherein said system verification request is received from an information holder that controls access to information correlated to a governmentally issued identifier.

23. A method according to claim 22, said method further comprising the step of receiving an information acknowledgment from said information holder.

24. A method according to claim 16, wherein said system verification request is received from a potential contracting party attempting to create a liability to be correlated to a governmentally issued identifier.

25. A method according to claim 24, wherein said potential contracting party is a party operating one of an Internet retail website, a currency-dispensing machine, and a point of sale (POS) device.

26. A method according to claim 16, wherein said system verification request is received from a transaction intermediary.

27. A method according to claim 26, wherein said transaction intermediary is a party operating to an electronic funds transfer switch.

28. A method according to claim 16, wherein said system verification request is received from a correlator of personal information to a governmentally issued identifier.

29. A method according to claim 16, wherein said verification communication is initiated to a communication address provided by a person directly correlated with said governmentally issued identifier.

30. A method according to claim 29, said communication address being at least one of a telephone number, an e-mail address, a facsimile number, and an internet protocol address.

31. A method according to claim 16, said verification communication being at least one of an electronic text message, a telephone call initiated by an interactive voice response unit and a facsimile transmission.

32. A method according to claim 31, said electronic text message being a short message service (SMS) text message.

33. A method according to claim 31, said electronic text message being an electronic mail message.

34. A system comprising:

a web server;

a database accessible by said web server, said database correlating the following with a client;

a static client identifier,

a variable static client identifier,

a unique dynamic identification device identifier consisting of a serial number associated with a physical dynamic identification device,

a client password,

a static answer to a security question,

at least one uniform resource locator (URL) with a correlated site user name and site user password,

a governmentally issued identifier and at least one communication address;

a communications server communicatively coupled to said web server and configured to transmit an unsolicited subscriber verification request to at least one communication address;

wherein said system is configured to receive a response variable static client identifier, a response dynamic client identifier, and a subscriber verification response in response to said subscriber verification request, and further wherein at least a portion of said system is programmed to compare said variable static identifier to said response variable static client identifier.