Systems and methods for universal enhanced log-in, identity document verification and dedicated survey participation

• US 8,893,241 B2
• Filed: 03/11/2013
• Issued: 11/18/2014
• Est. Priority Date: 06/01/2007
• Status: Active Grant

• Current Assignee: Albright Associates
• Original Assignee: Albright Associates
• Inventors: Piliouras, Teresa C.
• Primary Examiner(s): Lim, Krisna
• Application Number:
  US13/794,007
• Publication Number:
  US 20130198815A1
• Time in Patent Office: 617 Days
• Field of Search: 726/5
• US Class Current: 726/5
• CPC Class Codes: G06F 21/33 using certificates
• CPC Class Codes: G06F 21/335 for accessing specific resources, e.g. using Kerberos tickets
• CPC Class Codes: G06F 21/41 where a single sign-on provides access to a plurality of computers
• CPC Class Codes: G06F 21/60 Protecting data
• CPC Class Codes: G06F 2221/2117 User registration
• CPC Class Codes: G06F 2221/2119 Authenticating web pages, e.g. with suspicious links
• CPC Class Codes: G06Q 30/0203 Market surveys; Market polls
• CPC Class Codes: G06Q 30/0207 Discounts or incentives, e.g. coupons or rebates
• CPC Class Codes: G06Q 30/0269 based on user profile or attribute
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/083 using passwords cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226
• CPC Class Codes: H04L 63/10 for controlling access to devices or network resources
• CPC Class Codes: H04L 63/12 Applying verification of the received information cryptographic mechanisms or cryptographic arrangements for data integrity or data verification H04L9/32
• CPC Class Codes: H04L 67/02 based on web technology, e.g. hypertext transfer protocol [HTTP]
• CPC Class Codes: H04L 67/306 User profiles

Abstract

Systems and methods are provided for controlling access via a computer network to a subscriber server. A log-in server receives a query to connect through the computer network to the subscriber server, and the log-in server receives registrant identification data, A first session is established between the log-in server and the subscriber server to validate the registrant identification data, and to generate a session password. A second session is established between the log-in server and the subscriber server. The second session is configured to authorize, based in part on the registrant identification data, access to at least a portion of a website associated with the subscriber server.

Claims

1. A computer implemented method for identifying potentially improper use of identity documents as part of an identity theft prevention service, comprising:

receiving, at a server of a fraud data collection platform via a computer network, from a first subscriber server of a first subscriber, information related to an identity document and authorization data indicating registration of the first subscriber with an identity theft prevention service;

storing the information related to the identity document in a database;

performing a comparison of the information related to the identity document with prior activity data related to use of the identity document and received from a second subscriber registered with the identify theft prevention service, the prior activity data stored in the database;

identifying, based on the comparison, at least one instance of potential identity document misuse; and

informing, based at least in part on the authorization data, at least one of the first subscriber, the second subscriber and a third subscriber registered with the identify theft prevention service of data identifying the at least one instance of potential identity document misuse via a communication session established between the fraud data collection platform and at least one of the first subscriber server associated with the first subscriber, a second subscriber server of the second subscriber, and a third subscriber server of the third subscriber.

2. The computer implemented method of claim 1, wherein the prior activity data includes information related to a presentation of the identity document.

3. The computer implemented method of claim 1, comprising:

receiving the authorization data from the first subscriber, wherein the authorization data identifies at least one of the second subscriber and the third subscriber.

4. The computer implemented method of claim 1, comprising:

receiving, at the server and from a subscriber server associated with the first subscriber via the computer network, registrant identification data of the first subscriber;

generating an account for the first subscriber based at least in part on the registrant identification data; and

updating the account for the first subscriber with a result of the comparison identifying the at least one instance of potential identity document misuse.

5. The computer implemented method of claim 1, comprising:

denying, responsive to a result of the comparison identifying the at least one instance of potential identity document misuse, by the server of the fraud data collection platform, a request to establish a session via the computer network between a computer and at least one of a first subscriber server of the first subscriber, a second subscriber server of the second subscriber, and a third subscriber server of the third subscriber.

6. The computer implemented method of claim 1, comprising:

receiving registrant identification data that identifies categories of content that a computer is authorized to access via the computer network;

receiving, from a subscriber server of one of a plurality of subscriber servers associated with the identity theft prevention service, subscriber server identification data that identifies categories of content that the subscriber server is configured to make available via the computer network; and

authorizing establishment of a first communication session between the computer and at least one of the server of the fraud data collection platform and the subscriber server to provide, based in part on the registrant identification data and the subscriber identification data, access from the computer to content associated with the subscriber server via the computer network.

7. The computer implemented method of claim 1, comprising:

receiving registrant identification data that identifies categories of content that a computer is authorized to access via the computer network;

receiving, from a subscriber server of one of a plurality of subscriber servers associated with the identity theft prevention service, subscriber server identification data that identifies categories of content that the subscriber server is configured to make available via the computer network; and

blocking establishment of a first session between the computer and at least one of the server of a fraud data collection platform and the subscriber server to provide, based in part on the registrant identification data and the subscriber identification data, access from the computer to content associated with the subscriber server.

8. The computer implemented method of claim 1, comprising:

blocking establishment of the first session based at least in part on the at least one instance of potential identity document misuse.

9. The computer implemented method of claim 1, the identity theft prevention service having a plurality of subscribers including the first subscriber, the second subscriber, and the third subscriber, further comprising:

receiving, by a computing device of the fraud data collection platform, a request for a research study;

generating first data indicating at least one of a frequency, a type, a geographic location, and a nature of the identity document;

generating second data indicating a misuse of at least one of the identity document and a class of identity documents; and

providing the research study to one of the plurality of subscribers, the research study including at least one of the first data and the second data.

10. The computer implemented method of claim 1, the identity theft prevention service having a plurality of subscribers including the first subscriber, the second subscriber, and the third subscriber, further comprising:

informing at least one of the plurality of subscribers of the at least one instance of potential identity document misuse indicating past improper use of the identity document.

11. The computer implemented method of claim 1, wherein at least one of the first subscriber, the second subscriber, and the third subscriber includes at least one of a merchant, a government agent, a registrar, a parent, a health care provider, an educational institution, a registered organizational entity, a governmental organization, and a financial institution.

12. The computer implemented method of claim 1, further comprising:

determining a risk level associated with the identity document; and

providing an indicator of the risk level to at least one of the first subscriber, the second subscriber, and the third subscriber.

13. A system for identifying potentially improper use of an identity document via a computer network as part of an identity theft prevention service, comprising:

a fraud data collection platform having at least one server and at least one database, the fraud data collection platform configured to;

receive, from a first subscriber of a first subscriber, during at least one communication session via the computer network between the fraud data collection platform and a subscriber server of the first subscriber, information related to the identity document and authorization data indicating registration of the first subscriber with an identity theft prevention service;

store at least one of the information related to the identity document and the authorization data in the database;

perform a comparison of the information related to the identity document with prior activity data related to use of the identity document and received from a second subscriber registered with the identity theft protection service;

identify, based on the comparison, at least one instance of potential identity document misuse; and

inform, based at least in part on the authorization data, at least one of the first subscriber, the second subscriber, and a third subscriber of the identity theft prevention service, of data identifying the at least one instance of potential identity document misuse.

14. The system of claim 13, wherein the prior activity data includes information related to a presentation of the identity document.

15. The system of claim 13, comprising the fraud data collection platform configured to:

receive the authorization data from the first subscriber, wherein the authorization data identifies at least one of the second subscriber and the third subscriber.

16. The system of claim 13, comprising the fraud data collection platform configured to:

receive registrant identification data of the first subscriber;

generate an account for the first subscriber based at least in part on the registrant identification data; and

update the account for the first subscriber with a result of the comparison identifying the at least one instance of potential identity document misuse.

17. The system of claim 13, comprising the fraud data collection platform configured to:

deny, responsive to a result of the comparison identifying the at least one instance of potential identity document misuse, by the server of the fraud data collection platform, a request to establish a session via the computer network between a computer and at least one of a first subscriber server of the first subscriber, a second subscriber server of the second subscriber, and a third subscriber server of the third subscriber.

18. The system of claim 13, comprising the fraud data collection platform configured to:

receive registrant identification data that identifies categories of content that a computer is authorized to access via the computer network;

receiving, from a subscriber server of one of a plurality of subscriber servers associated with the identity theft prevention service, subscriber server identification data that identifies categories of content that the subscriber server is configured to make available via the computer network; and

authorizing establishment of a first session between the computer and at least one of the server of a fraud data collection platform and the subscriber server to provide, based in part on the registrant identification data and the subscriber identification data, access from the computer to content associated with the subscriber server.

19. The system of claim 13, comprising the fraud data collection platform configured to:

obtain registrant identification data that identifies categories of content that a computer is authorized to access via the computer network;

obtain, from a subscriber server of one of a plurality of subscriber servers associated with the identity theft prevention service, subscriber server identification data that identifies categories of content that the subscriber server is configured to make available via the computer network; and

block establishment of a first session between the computer and at least one of the server of a fraud data collection platform and the subscriber server to provide, based in part on the registrant identification data and the subscriber identification data, access from the computer to content associated with the subscriber server.

20. A non-transitory computer readable storage medium having instructions to provide information via a computer network, the instructions comprising instructions to:

receive, from a first subscriber via the computer network, information related to the identity document and authorization data indicating registration of the first subscriber with an identity theft prevention service;

store at least one of the information related to the identity document and the authorization data in the database;

perform a comparison of the information related to the identity document with prior activity data related to use of the identity document and received from a second subscriber registered with the identity theft protection service;

identify, based on the comparison, at least one instance of potential identity document misuse; and

inform, based at least in part on the authorization data, at least one of the first subscriber, the second subscriber, and a third subscriber of the identity theft prevention service, of data identifying the at least one instance of potential identity document misuse.