System for secure enrollment and secure verification of network users by a centralized identification service

• US 9,172,691 B2
• Filed: 02/28/2014
• Issued: 10/27/2015
• Est. Priority Date: 05/11/2001
• Status: Expired due to Term

• Current Assignee: Kount Incorporated (Equifax, Inc.)
• Original Assignee: Kount Incorporated (Equifax, Inc.)
• Inventors: Barber, Timothy P.
• Primary Examiner(s): Najjar, Saleh
• Assistant Examiner(s): Gao, Shu Chun
• Application Number:
  US14/193,459
• Publication Number:
  US 20140181906A1
• Time in Patent Office: 606 Days
• US Class Current: 1/1
• CPC Class Codes: G06Q 20/3821 Electronic credentials
• CPC Class Codes: G06Q 30/06 Buying, selling or leasing transactions
• CPC Class Codes: G06Q 30/0609 Buyer or seller confidence or verification
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/0861 using biometrical features, e.g. fingerprint, retina-scan cryptographic mechanisms or cryptographic arrangements for entity authentication using biological data H04L9/3231
• CPC Class Codes: H04L 63/12 Applying verification of the received information cryptographic mechanisms or cryptographic arrangements for data integrity or data verification H04L9/32
• CPC Class Codes: H04L 63/126 the source of the received data

Abstract

A system and method for providing, as a service over a computer network (especially a packet-switched computer network) to a body of merchants connected to the computer network, verification of consumer identification based on data provided over the computer network by scanning devices attached to the computers operated by consumers.

Claims

1. A computer-implemented method for enrolling consumers, the method comprising:

receiving a request to enroll a consumer, the request including a merchant identifier uniquely identifying a merchant of a plurality of merchants and an identity of the consumer;

determining that the identity of the consumer in the request is for a new account; and

responsive to the determination that the identity of the consumer in the request is for a new account;

instructing the consumer associated with the identity to perform a scan from a scanning device for verification at the merchant;

receiving a scanning result from the consumer;

storing the scanning result as a verification data item that is associated with the merchant identifier and the identity of the consumer in the request;

generating a random value uniquely identifying the verification data item; and

transmitting the random value to the merchant as a verification of the consumer.

2. The method of claim 1, further comprising:

confirming with the merchant associated with the merchant identifier that the request to enroll the consumer is initiated by the merchant.

3. The method of claim 1, wherein storing the scanning result comprises replacing a previously stored verification data item associated with the merchant identifier and the identity of the consumer with the scanning result.

4. The method of claim 1, wherein the verification data item associated with the merchant identifier and the identity of the consumer is stored in a database storing a plurality of verification data items for a plurality of consumers, a verification data item being associated with a merchant identifier of a merchant and an identity of a consumer enrolled at the merchant.

5. The method of claim 4, wherein each verification data item of the plurality of verification data items stored in the database is uniquely identified by a random value generated from a random seed.

6. The method of claim 1, further comprising:

retrieving a random seed included in the request;

generating a random value based on the retrieved random seed for the verification data item associated with the merchant identifier and the identity of the consumer.

7. The method of claim 1, wherein determining that the identity of the consumer in the request is for a new account comprising:

retrieving a new account indicator from the request, the value of the indicator being set by the merchant identified in the request.

8. The method of claim 1, further comprising:

responsive to the determination that the identity of the consumer in the request is not for a new account;

instructing the consumer to select a scanning device from a list of scanning devices;

transmitting device-specific instructions to the consumer to activate the selected scanning device;

receiving a scanning result from the consumer using the selected scanning device based on the device-specific instructions; and

determining whether the scanning result matches verification data item associated with the merchant identifier and the consumer username.

9. The method of claim 8, further comprising:

in response to the scanning result not matching the verification data item, directing the consumer to an error web page at the merchant indicating that the scanning result does not match a stored verification data item.

10. The method of claim 1, wherein generating the random value uniquely identifying the verification data item comprises:

receiving a string of a plurality of random alphanumeric characters selected by the merchant; and

generating the random value using the string the random seed.

11. The computer readable storage medium of claim 10, wherein the program code for generating a random value uniquely identifying the verification data item comprises code for:

receiving a string of a plurality of random alphanumeric characters selected by the merchant;

generating the random value using the string the random seed.

12. A non-transitory computer readable storage medium storing program code executed by a computer processor, comprising code for:

receiving a request to enroll a consumer, the request including a merchant identifier uniquely identifying a merchant of a plurality of merchants and an identity of the consumer;

determining that the identity of the consumer in the request is for a new account;

responsive to the determination that the identity of the consumer in the request is for a new account;

instructing the consumer associated with the username to perform a scan from a scanning device for verification at the merchant;

receiving a scanning result from the consumer;

storing the scanning result as a verification data item that is associated with the merchant identifier and the identity of the consumer in the request;

generating a random value uniquely identifying the verification data item; and

transmitting the random value to the merchant as a verification of the consumer.

13. The computer readable storage medium of claim 12, further comprising program code for:

confirming with the merchant associated with the merchant identifier that the request to enroll the consumer is initiated by the merchant.

14. The computer readable storage medium of claim 12, wherein the program code for storing the scanning result comprises code for replacing a previously stored verification data item associated with the merchant identifier and the identity of the consumer with the scanning result.

15. The computer readable storage medium of claim 12, wherein the verification data item associated with the merchant identifier and the identity of the consumer is stored in a database storing a plurality of verification data items for a plurality of consumers, a verification data item being associated with a merchant identifier of a merchant and an identity of a consumer enrolled at the merchant and a verification data item being uniquely identified by a random value generated from a random seed.

16. The computer readable storage medium of claim 12, further comprising program code for:

retrieving a random seed included in the request;

generating a random value based on the retrieved random seed for the verification data item associated with the merchant identifier and the identity of the consumer.

17. The computer readable storage medium of claim 12, wherein the program code for determining that the identity of the consumer in the request is for a new account comprises code for:

retrieving a new account indicator from the request, the value of the indicator being set by the merchant identified in the request.

18. The computer readable storage medium of claim 17, further comprising program code for:

determining that the new account is for an existing consumer identified by the identity of the consumer in the request; and

replacing a previously stored verification data item associated with the existing account of the consumer with the verification data item identified by the random value.

19. The computer readable storage medium of claim 12, further comprising program code for:

responsive to the determination that the identity of the consumer in the request is not for a new account;

instructing the consumer to select a scanning device from a list of scanning devices;

transmitting device-specific instructions to the consumer to activate the selected scanning device;

receiving a scanning result from the consumer using the selected scanning device based on the device-specific instructions; and

determining whether the scanning result matches verification data item associated with the merchant identifier and the identity of the consumer.

20. The computer readable storage medium of claim 19, further comprising program code for:

in response to the scanning result not matching the verification data item, directing the consumer to an error web page at the merchant indicating that the scanning result does not match a stored verification data item.