Methods and systems for identifying, verifying, and authenticating an identity

• US 9,094,388 B2
• Filed: 05/01/2013
• Issued: 07/28/2015
• Est. Priority Date: 05/01/2013
• Status: Expired due to Fees

• Current Assignee: Dmitri Tkachev
• Original Assignee: Dmitri Tkachev
• Inventors: Tkachev, Dmitri
• Primary Examiner(s): Okeke, Izunna
• Application Number:
  US13/875,218
• Publication Number:
  US 20140331282A1
• Time in Patent Office: 818 Days
• US Class Current: 1/1
• CPC Class Codes: G06F 21/31 User authentication
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/0884 by delegation of authentication, e.g. a proxy authenticates an entity to be authenticated on behalf of this entity vis-à-vis an authentication entity

Abstract

A method of authenticating the identity of a user is disclosed. The method may include registering a user, where registering the user includes receiving identification of a plurality of individuals associated with the user and a communication address for each of the plurality of individuals. The method may also include receiving a request to authenticate the identity of the user. The method may further include selecting at least one of the plurality of individuals to serve as an authentication agent. The method may additionally include initiating at least a first communication between the user and the authentication agent via the communication address. The method may moreover include receiving a second communication from the authentication agent. The method may furthermore include sending a message indicating the identity of the user is authenticated based at least in part on the second communication including a confirmation of the identity of the user.

Claims

1. A machine-implemented method of authenticating the identity of a user who is a human being, the method comprising:

registering the user, wherein registering the user comprises receiving identification of a plurality of persons associated with the user and a communication address for each of the plurality of persons;

receiving a request to authenticate the identity of the user;

selecting at least one of the plurality of persons to serve as an authentication agent;

initiating at least a first communication between the user and the authentication agent via the communication address, wherein the first communication is live between the user and the authentication agent;

receiving a second communication from the authentication agent; and

sending a message indicating the identity of the user is authenticated based at least in part on the second communication including a confirmation of the identity of the user.

2. The machine-implemented method of authenticating the identity of a user who is a human being of claim 1, wherein registering the user further comprises:

verifying the identity of the user.

3. The machine-implemented method of authenticating the identity of a user who is a human being of claim 1, wherein registering the user further comprises:

receiving a communication address for the user.

4. The machine-implemented method of authenticating the identity of a user who is a human being of claim 1, wherein receiving the request to authenticate the identity of the user comprises:

receiving the request from the user.

5. The machine-implemented method of authenticating the identity of a user who is a human being of claim 1, wherein receiving the request to authenticate the identity of the user comprises:

receiving the request from a third party.

6. The machine-implemented method of authenticating the identity of a user who is a human being of claim 1, wherein selecting at least one of the plurality of persons to serve as an authentication agent comprises:

determining that at least one security requirement applies to the request; and

selecting at least one of the plurality of persons is based at least in part on the at least one security requirement.

7. The machine-implemented method of authenticating the identity of a user who is a human being of claim 6, wherein the security requirement comprises:

a requirement that at least one selected person be a person not specified by the user.

8. The machine-implemented method of authenticating the identity of a user who is a human being of claim 6, wherein the security requirement comprises:

a requirement that a minimum number of persons be selected.

9. The machine-implemented method of authenticating the identity of a user who is a human being of claim 1, wherein the method further comprises:

determining a trustworthiness of at least one of the plurality of persons.

10. The machine-implemented method of authenticating the identity of a user who is aha human being of claim 9, wherein sending a message indicating the identity of the user is authenticated is further based at least in part on:

the trustworthiness the authentication agent.

11. The machine-implemented method of authenticating the identity of a user who is a human being of claim 1, wherein initiating at least a first communication between the user and the authentication agent via the communication address comprises:

initiating at least one communication between the user and a server; and

initiating at least one communication between the server and the authentication agent.

12. The machine-implemented method of authenticating the identity of a user who is a human being of claim 1 wherein initiating at least a first communication between the user and the authentication agent via the communication address comprises:

initiating a direct communication between the user and the authentication agent.

13. The machine-implemented method of authenticating the identity of a user who is a human being of claim 1, wherein the method further comprises:

sending a message indicating the identity of the user is not authenticated based at least in part on the second communication including an indication that the identity of the user is not authenticated.

14. The machine-implemented method of authenticating the identity of a user who is a human being of claim 1, wherein the method further comprises:

sending a query to a person who is not one of the plurality of persons associated with the user;

receiving a response to the query; and

wherein sending the message indicating the identity of the user is authenticated is further based at least in part on the response to the query.

15. A non-transitory computer-readable medium containing instructions stored thereon for implementing a method of authenticating the identity of a user of a client device, wherein the user is a human being, and the method comprises:

sending, from the client device to a remote server, a request to authenticate the identity of the user;

receiving, at the client device from the remote server, a first instruction to initiate at least a first communication between the user and a first authentication agent, wherein;

the first authentication agent is a first person; and

the first communication is live between the user and the authentication agent;

initiating, with the client device, the first communication; and

receiving, at the client device from the remote server, a message indicating the identity of the user is authenticated based at least in part on a second communication received by the remote server from the first authentication agent confirming the identity of the user.

16. The non-transitory computer-readable medium containing instructions stored thereon for implementing a method of authenticating the identity of a user of a client device of claim 15, wherein the user is a human being, and wherein the method further comprises:

receiving, at the client device, from the remote server, a second instruction to initiate at least a third communication between the user and a second authentication agent, wherein;

the second authentication agent is a second person; and

the third communication is live between the user and the second authentication agent;

initiating, with the client device, the third communication; and

wherein the message indicating the identity of the user is authenticated is further based at least in part on a fourth communication received by the remote server from the second authentication agent confirming the identity of the user.

17. The non-transitory computer-readable medium containing instructions stored thereon for implementing a method of authenticating the identity of a user of a client device of claim 15, wherein the user is a human being, and wherein the method further comprises:

sending, from the client device, to the remote server, information independent of the first communication to the server; and

wherein the message indicating the identity of the user is authenticated is further based at least in part on the remote server comparing the information independent of the first communication to stored information associated with the user.

18. A server configured to authenticate the identity of a user who is a human being, the server comprising:

a processor; and

a storage medium comprising instructions executable by the processor for;

receiving a request to authenticate the identity of the user;

selecting at least one of a plurality of persons to serve as an authentication agent;

initiating at least a first communication between the user and the authentication agent, wherein the first communication is live between the user and the authentication agent;

receiving a second communication from the authentication agent; and

sending a message indicating the identity of the user is authenticated based at least in part on the second communication including a confirmation of the identity of the user.

19. The server configured to authenticate the identity of a user who is a human being of claim 18, wherein the storage medium further comprises instructions executable by the processor for:

registering the user by receiving identification of the plurality of individuals associated with the user.

20. The server configured to authenticate the identity of a user who is a human being of claim 19, wherein the identification of at least a portion of the plurality of individuals associated with the user is not received from the user.