Systems and methods for universal enhanced log-in, identity document verification and dedicated survey participation

• US 8,959,584 B2
• Filed: 03/11/2013
• Issued: 02/17/2015
• Est. Priority Date: 06/01/2007
• Status: Active Grant

• Current Assignee: Albright Associates
• Original Assignee: Albright Associates
• Inventors: Piliouras, Teresa C.
• Primary Examiner(s): Lim, Krisna
• Application Number:
  US13/793,315
• Publication Number:
  US 20130191904A1
• Time in Patent Office: 708 Days
• US Class Current: 726/2
• CPC Class Codes: G06F 21/41 where a single sign-on provides access to a plurality of computers
• CPC Class Codes: G06F 21/6218 to a system of files or objects, e.g. local or distributed file system or database
• CPC Class Codes: G06F 2221/2117 User registration
• CPC Class Codes: G06F 2221/2119 Authenticating web pages, e.g. with suspicious links
• CPC Class Codes: G06Q 30/0203 Market surveys; Market polls
• CPC Class Codes: G06Q 30/0207 Discounts or incentives, e.g. coupons or rebates
• CPC Class Codes: G06Q 30/0269 based on user profile or attribute
• CPC Class Codes: H04L 63/10 for controlling access to devices or network resources
• CPC Class Codes: H04L 63/102 Entity profiles
• CPC Class Codes: H04L 63/105 Multiple levels of security
• CPC Class Codes: H04L 63/12 Applying verification of the received information cryptographic mechanisms or cryptographic arrangements for data integrity or data verification H04L9/32
• CPC Class Codes: H04L 67/02 based on web technology, e.g. hypertext transfer protocol [HTTP]
• CPC Class Codes: H04L 67/306 User profiles

Abstract

Systems and methods are provided for controlling access via a computer network to a subscriber server. A log-in server receives a query to connect through the computer network to the subscriber server, and the log-in server receives registrant identification data, A first session is established between the log-in server and the subscriber server to validate the registrant identification data, and to generate a session password. A second session is established between the log-in server and the subscriber server. The second session is configured to authorize, based in part on the registrant identification data, access to at least a portion of a website associated with the subscriber server.

Claims

1. A computer implemented method for controlling access via a computer network to a subscriber server, comprising:

receiving, at a log-in server, a query to connect a computer through the computer network to the subscriber server;

receiving, at the log-in server and from the computer, registrant identification data, the registrant identification data including information that identifies categories of content that the computer is authorized to access through the computer network and identity document data of at least one document;

receiving, from the subscriber server, subscriber server identification data, the subscriber server identification data including information that identifies categories of content that the subscriber server is configured to make available via the computer network;

storing at least one of the registrant identification data and the subscriber server identification data in at least one database associated with the log-in server;

evaluating by the log-in server at least one of the registrant identification data and the subscriber identification data; and

establishing by the log-in server a first session between the computer, the log-in server, and the subscriber server to provide, based in part on the registrant identification data and the subscriber identification data, access from the computer to at least a portion of a website associated with the subscriber server.

2. The computer implemented method of claim 1, wherein receiving the query, receiving the registrant identification data, receiving the subscriber server identification data, evaluating at least one of the registrant identification data and the subscriber identification data, and establishing the first session are performed by at least one processor, and wherein the method is implemented in a program stored in a computer readable medium and executed by one or more of the at least one processor.

3. The computer implemented method of claim 1, comprising:

generating, by the log-in server, a user profile based at least in part on the registrant identification data, including the identity document data of at least one document;

obtaining, by the log-in server, session data related to the first session; and

updating, by the log-in server, the user profile based at least in part on the session data.

4. The computer implemented method of claim 3, comprising:

providing the session data to at least one of a subscriber associated with the subscriber server, a user associated with the computer, and a third party.

5. The computer implemented method of claim 1, comprising:

receiving, at the log-in server, the subscriber server identification data including at least one of name data, date of birth data, family identification data, marital data, a government issued identification number and associated data, a geographic address, an Internet Protocol address, a media access control address, an email address, income data, and employment data.

6. The computer implemented method of claim 5, comprising:

generating, by the log-in server, a user pass string (UPS) based at least in part on user identification data obtained by the log-in server from at least one of the subscriber server identification data and the registrant identification data; and

evaluating the UPS to establish the first session.

7. The computer implemented method of claim 5, comprising:

accessing, by the log-in server via the computer network, public data from a public database; and

validating the user identification data based on the public data.

8. The computer implemented method of claim 1, comprising:

receiving, at the log-in server from the subscriber server via the computer network, authorization data authorizing the log-in server to provide identity verification data from the log-in server to a third party.

9. The computer implemented method of claim 1, comprising:

generating, by the log-in server, a user profile based at least in part on the registrant identification data;

assigning, by the log-in server, the user profile to a user account.

10. The computer implemented method of claim 9, comprising:

identifying, by the log-in server, a protocol violation associated with the user profile; and

canceling the user profile based on the protocol violation.

11. The computer implemented method of claim 1, comprising:

generating, by the log-in server, a user profile based at least in part on the registrant identification data;

receiving, at the log-in server, a request to suspend the user profile; and

denying, based on to the request to suspend the user profile, establishment of a second session via the computer network between the computer and at least one of the subscriber server and another server.

12. In a computer network, an access control system, comprising:

a subscriber server and a log-in server;

the log-in server configured to receive a query from at least one of the subscriber server and a computer, via the computer network, to connect the computer to the subscriber server;

the log-in server configured to receive from the computer registrant identification data, the registrant identification data including information that identifies categories of content that the computer is authorized to access via the computer network and including identity document data of at least one document;

the log-in server configured to receive subscriber server identification data from the subscriber server, the subscriber server identification data including information that identifies categories of content that the subscriber server is configured to make available via the computer network;

the log-in server configured to store at least one of the registrant identification data and the subscriber server identification data in at least one database associated with the log-in server;

the log-in server configured to evaluate at least one of the registrant identification data and the subscriber server identification data; and

the log-in server configured to establish a first session between the computer and at least one of the subscriber server and the log-in server in response to the query to provide access from the computer to content associated with at least one of the subscriber server and the log-in server.

13. The access control system of claim 12, further comprising:

the log-in server configured to establish the first session between the computer and the log-in server.

14. The access control system of claim 12, further comprising:

the log-in server configured to obtain, during the first session, a request originating from the computer for at least one of an identity status check of a user associated with the computer and an identity status check of a subscriber entity associated with the subscriber server; and

the log-in server configured to provide to the computer via the computer network, data responsive to at least one of the identity status check of the user and the identity status check of the subscriber entity.

15. The access control system of claim 12, further comprising:

the log-in server configured to obtain during the first session, a request originating from the computer for at least one of an identity status check of a user associated with the computer and an identity status check of a subscriber entity associated with the subscriber server; and

the log-in server configured to receive an alert indicating a compromised status of at least one of the user associated with the computer and the subscriber entity associated with the subscriber server.

16. The access control system of claim 12, comprising the log-in server configured to:

generate a user profile based at least in part on the registrant identification data;

obtain session data related to the first session and update the user profile based at least in part on the session data; and

provide the session data to at least one of a subscriber associated with the subscriber server, a user associated with the computer, and a third party.

17. The access control system of claim 12, comprising the log-in server configured to:

receive user identification data of a user associated with the computer;

generate a user pass string (UPS) based at least in part on the user identification data; and

access via the computer network, public data from a public database;

validate the user identification data based on the public data; and

evaluate the UPS to establish the first session.

18. The access control system of claim 12, comprising the log-in server configured to:

receive from the subscriber server via the computer network, authorization data authorizing the log-in server to provide identity verification data from the log-in server to a third party.

19. The access control system of claim 12, wherein the log-in server forms part of an identity theft prevention service.

20. A computer implemented method for controlling access via a computer network to a subscriber server, comprising:

receiving, at a log-in server, a query to connect a computer through the computer network to the subscriber server;

receiving, at the log-in server and from the computer, registrant identification data, the registrant identification data including information that identifies categories of content that the computer is authorized to access through the computer network and identity document data of at least one document;

receiving, from the subscriber server, subscriber server identification data, the subscriber server identification data including information that identifies categories of content that the subscriber server is configured to make available via the computer network;

evaluating by the log-in server at least one of the registrant identification data and the subscriber identification data; and

establishing by the log-in server a first session between the subscriber server and at least one of the log-in server and the computer to provide, based in part on the registrant identification data and the subscriber identification data, access from the computer to at least one of the subscriber server and the log-in server to access identity theft prevention service data indicative of an identity status of at least one of a user associated with the computer and a subscriber entity associated with the subscriber server.