System and method to support identity theft protection as part of a distributed service oriented ecosystem

• US 9,357,384 B2
• Filed: 02/09/2009
• Issued: 05/31/2016
• Est. Priority Date: 02/09/2009
• Status: Active Grant

• Current Assignee: Workday Incorporated
• Original Assignee: International Business Machines Corporation
• Inventors: Ibrahim, Mamdouh, Ramanathan, Sri, Som, Tapas K., Trevathan, Matthew B.
• Primary Examiner(s): CHEUNG, CALVIN K
• Application Number:
  US12/367,619
• Publication Number:
  US 20100205662A1
• Time in Patent Office: 2,668 Days
• US Class Current: 1/1
• CPC Class Codes: G06Q 20/4014 Identity check for transactions
• CPC Class Codes: G06Q 30/00 Commerce
• CPC Class Codes: G06Q 50/265 Personal security, identity or safety
• CPC Class Codes: H04L 63/1433 Vulnerability analysis
• CPC Class Codes: H04L 65/1016 IP multimedia subsystem [IMS]
• CPC Class Codes: H04L 65/1104 Session initiation protocol [SIP]
• CPC Class Codes: H04W 12/06 Authentication
• CPC Class Codes: H04W 4/12 Messaging; Mailboxes; Announcements

Abstract

A system and method to support identity theft protection and, in particular, to a system and method for supporting identity theft protection as part of a distributed service oriented ecosystem in Internet protocol (IP) multimedia subsystem (IMS) and non-IMS networks. The system includes an identity session initiation protocol (SIP) application server configured to act as a security assertion markup language (SAML) bridge, which allows an SIP enabled device or a non-SIP enabled device to attach to a telecommunications service provider network. A user may accept or reject an authorization request using the SIP enabled device or non-SIP enabled device.

Claims

1. A computer readable hardware storage device storing computer instructions when executed perform a computer implemented method for supporting identity theft protection, the method comprising:

receiving one or more credentials via a login attempt by a first device;

processing the one or more credentials to identify a subscriber having the one or more credentials;

providing a plurality of services to the subscriber including receiving a text message and requiring an authorization code prior to processing the login attempt;

sending the text message to the subscriber via a second device to notify the subscriber of the login attempt by the first device; and

generating a risk rating associated with the login attempt,

wherein the risk rating is based on a subscriber location and a login attempt location.

2. The method of claim 1, further comprising receiving from a subscriber confirmation that the login attempt is of the subscriber.

3. The method of claim 1, wherein steps of claim 1 are offered by a service provider based on one of a fee and subscription basis.

4. The method of claim 1, wherein at least one of the receiving, the processing, and the sending are implemented based on authentication requests when a trusted card without two factor authentication is used.

5. The method of claim 1, wherein at least one of the receiving, the processing, and the sending are implemented in association with credit card authorization.

6. The method of claim 1, wherein the authorization code is a master pin which allows the subscriber to validate the login attempt.

7. A method for deploying an application for supporting identity theft protection, comprising:

providing a computer infrastructure being operable to;

receive one or more credentials via a login attempt by a first device;

process the one or more credentials to identify a subscriber having the one or more credentials;

provide a plurality of services to the subscriber including receiving a text message and requiring an authorization code prior to processing the login attempt;

send the text message to the subscriber via a second device to notify the subscriber of the login attempt by the first device; and

generate a risk rating associated with the login attempt,

wherein the risk rating is based on a subscriber location and a login attempt location.

8. The method of claim 7, wherein the text message is from an IMS control plane and is a SIP notify.

9. The method of claim 7, further comprising receiving confirmation from the subscriber that the login attempt is by the subscriber.

10. The method of claim 7, wherein the computer infrastructure is operable to deny the login attempt and deny permission of a login.

11. The method of claim 7, wherein the computer infrastructure is at least one of supported, deployed, maintained, and created by a service provider.

12. The method of claim 7, wherein steps of claim 7 are offered by a service provider based on one of a fee and subscription basis.

13. The method of claim 7, wherein at least one of the receiving, the processing, and the sending are implemented for authentication requests when a trusted card without two factor authentication is used.

14. The method of claim 7, wherein at least one of the receiving, the processing, and the sending are implemented for credit card authorization.