System for secure enrollment and secure verification of network users by a centralized identification service

• US 8,701,170 B1
• Filed: 05/10/2002
• Issued: 04/15/2014
• Est. Priority Date: 05/11/2001
• Status: Active Grant

• Current Assignee: Kount Incorporated (Equifax, Inc.)
• Original Assignee: Kount Incorporated (Equifax, Inc.)
• Inventors: Barber, Timothy P.
• Primary Examiner(s): Dinh, Minh
• Application Number:
  US10/144,447
• Time in Patent Office: 4,358 Days
• Field of Search: None
• US Class Current: 726/7
• CPC Class Codes: G06Q 20/3821 Electronic credentials
• CPC Class Codes: G06Q 30/06 Buying, selling or leasing transactions
• CPC Class Codes: G06Q 30/0609 Buyer or seller confidence or verification
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/0861 using biometrical features, e.g. fingerprint, retina-scan cryptographic mechanisms or cryptographic arrangements for entity authentication using biological data H04L9/3231
• CPC Class Codes: H04L 63/12 Applying verification of the received information cryptographic mechanisms or cryptographic arrangements for data integrity or data verification H04L9/32
• CPC Class Codes: H04L 63/126 the source of the received data

Abstract

A system and method for providing, as a service over a computer network (especially a packet-switched computer network) to a body of merchants connected to the computer network, verification of consumer identification based on data provided over the computer network by scanning devices attached to the computers operated by consumers.

Claims

1. A computer-implemented method comprising:

assigning a unique merchant identifier to each of a plurality of participating online merchants;

maintaining a database storing a plurality of verification data items for a plurality of consumers, each verification data item being associated with a merchant identifier of a merchant and a username of a consumer enrolled at the merchant;

generating, by one or more computer processors, a random password associated with each verification data item;

receiving, by the one or more computer processors, a verification request to verify a consumer, the request including a first merchant identifier and a first username; and

in response to the verification request;

confirming, by the one or more computer processors, with the merchant associated with the first merchant identifier that the verification request is initiated by the merchant,

instructing the consumer associated with the first username, on behalf of the merchant, to perform a scan from a scanning device operated by the consumer,

receiving, by the one or more computer processors, a scanning result from the consumer,

determining, by the one or more computer processors, whether the scanning result matches the verification data item associated with the first merchant identifier and the first consumer username in the database, and

in response to the scanning result matching the verification data item, transmitting, by the one or more computer processors, the previously generated random password associated with the verification data item to the merchant as a verification of the consumer.

2. The method of claim 1, wherein the request further includes an indicator indicating that the first username is for a new account, and wherein the method further comprises:

in response to the verification request including an indicator indicating that the first username is for a new account;

instructing the consumer associated with the first username, on behalf of the merchant, to perform a scan from a scanning device operated by the consumer for the verification at the merchant,

receiving a scanning result from the consumer,

storing the scanning result as a verification data item associated with the first merchant identifier and the first username in the database,

generating a random password associated with the verification data item, and

transmitting the random password to the merchant as a verification of the consumer.

3. The method of claim 2, further comprising:

in response to the verification request with the new account indicator, confirming with the merchant associated with the first merchant identifier that the verification request with the new account indicator is initiated by the merchant.

4. The method of claim 2, wherein the scanning result is stored in the database to replace a previously stored verification data item associated with the first merchant identifier and the first username.

5. The method of claim 2, wherein the request further includes a random seed, and wherein the random password is generated based on the random seed.

6. The method of claim 1, wherein confirming the verification request with the merchant comprises:

transmitting the verification request including the first merchant identifier and the first username to a confirmation address of the merchant; and

receiving a confirmation result from the merchant indicating whether the request is confirmed or failed.

7. The method of claim 6, further comprising:

in response to a failed confirmation, directing the consumer to an error web page at the merchant indicating the failed confirmation of the verification request.

8. The method of claim 1, wherein instructing the consumer to perform a scan further comprises:

displaying a list of scanning devices for the consumer to choose; and

receiving a selection of the scanning device from the consumer.

9. The method of claim 1, further comprising:

in response to the scanning result not matching the verification data item, directing the consumer to an error web page at the merchant indicating that the scanning result does not match the stored verification data item.

10. The method of claim 1, wherein instructing the consumer to perform a scan further comprises:

transmitting, by the one or more processors, a web page including device-specific instructions to the consumer to activate the scanning device for the consumer to perform a scan.

11. A consumer verification system, comprising:

a database storing;

a unique merchant identifier assigned to each of a plurality of participating online merchants,

verification data items for a plurality of consumers, each verification data item being associated with a merchant identifier of a merchant and a username of a consumer enrolled at the merchant, and

a random password associated with each verification data item;

a non-transitory computer readable storage medium storing executable program code comprising code for;

receiving a verification request to verify a consumer, the request including a first merchant identifier and a first username, and

in response to the verification request;

confirming with the merchant associated with the first merchant identifier that the verification request is initiated by the merchant,

instructing the consumer associated with the first username, on behalf of the merchant, to perform a scan from a scanning device operated by the consumer,

receiving a scanning result from the consumer,

determining whether the scanning result matches the verification data item associated with the first merchant identifier and the first consumer username in the database, and

in response to the scanning result matching the verification data item, transmitting the previously generated random password associated with the verification data item to the merchant as a verification of the consumer; and

one or more processors for executing the program code.

12. The system of claim 11, wherein the request further includes an indicator indicating that the first username is for a new account, and wherein the executable program code further comprises code for:

in response to the verification request with the new account indicator;

instructing the consumer associated with the first username, on behalf of the merchant, to perform a scan from a scanning device operated by the consumer for the verification at the merchant;

receiving a scanning result from the consumer;

storing the scanning result as a verification data item associated with the first merchant identifier and the first username in the database;

generating a random password associated with the verification data item; and

transmitting the random password to the merchant as a verification of the consumer.

13. The system of claim 12, wherein the executable program code further comprises code for:

in response to the verification request with the new account indicator, confirming with the merchant associated with the first merchant identifier that the verification request with the new account indicator is initiated by the merchant.

14. The system of claim 12, wherein the scanning result is stored in the database to replace a previously stored verification data item associated with the first merchant identifier and the first username.

15. The system of claim 12, wherein the request further includes a random seed, and wherein the random password is generated based on the random seed.

16. The system of claim 11, wherein confirming the verification request with the merchant comprises:

transmitting the verification request including the first merchant identifier and the first username to a confirmation address of the merchant; and

receiving a confirmation result from the merchant indicating whether the request is confirmed or failed.

17. The system of claim 16, wherein the executable program code further comprises code for:

in response to a failed confirmation, directing the consumer to an error web page at the merchant indicating the failed confirmation of the verification request.

18. The system of claim 11, wherein instructing the consumer to perform a scan further comprises:

displaying a list of scanning devices for the consumer to choose; and

receiving a selection of the scanning device from the consumer.

19. The system of claim 11, wherein the executable program code further comprises code for:

in response to the scanning result not matching the verification data item, directing the consumer to an error web page at the merchant indicating that the scanning result does not match the stored verification data item.

20. The system of claim 11, wherein instructing the consumer to perform a scan further comprises:

transmitting, by the one or more processors, a web page including device-specific instructions to the consumer to activate the scanning device for the consumer to perform a scan.

21. A computer-implemented method comprising:

assigning a unique merchant identifier to each of a plurality of participating online merchants;

maintaining a database storing a plurality of verification data items for a plurality of consumers, each verification data item being associated with a merchant identifier of a merchant and a username of a consumer enrolled at the merchant;

generating, by one or more computer processors, a random password associated with each verification data item;

receiving, by the one or more computer processors, a verification request to verify a consumer, the request including a first merchant identifier and a first username; and

in response to the verification request;

instructing the consumer associated with the first username, on behalf of the merchant, to indicate a preferred device for scanning from a list of scanning devices;

instructing the consumer to perform a scan from the preferred scanning device; and

receiving, by the one or more computer processors, a scanning result from the consumer.

22. The method of claim 21, wherein instructing the consumer to indicate a preferred device further comprises:

transmitting, by the one or more processors, a list of scanning devices automatically generated by an embedded script in a web page to the consumer;

receiving, by the one or more processors, an indication of the preferred device for scanning from the web page by the consumer.

23. The method of claim 21, wherein instructing the consumer to perform a scan further comprises:

transmitting, by the one or more processors, a web page including device-specific instructions to the consumer to activate the scanning device for the consumer to perform a scan.