Methods and apparatus for transacting with multiple domains based on a credential

• US 9,590,968 B2
• Filed: 09/16/2013
• Issued: 03/07/2017
• Est. Priority Date: 11/10/2008
• Status: Active Grant

• Current Assignee: Jeff Stollman
• Original Assignee: Jeff Stollman
• Inventors: Stollman, Jeff
• Primary Examiner(s): Rashid, Harunur
• Assistant Examiner(s): Le, Thanh
• Application Number:
  US14/027,744
• Publication Number:
  US 20140189813A1
• Time in Patent Office: 1,268 Days
• US Class Current: 1/1
• CPC Class Codes: G06Q 20/10 specially adapted for electronic funds transfer [EFT] systems; specially adapted for home banking systems
• CPC Class Codes: G06Q 20/4014 Identity check for transactions
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/0853 using an additional device, e.g. smartcard, SIM or a different communication terminal cryptographic mechanisms or cryptographic arrangements for entity authentication involving additional secure or trusted devices H04L9/3234

Abstract

In one embodiment, a method includes receiving from a credential a credential-owner authentication information associated with an identity of an individual. A issuer validation information associated with an issuer of the credential is also received. The method also includes providing a plurality of options, including a first option associated with a first domain and a second option associated with a second domain mutually exclusive from the first domain. The method also includes sending to a portion of the first domain the credential-owner authentication information and the issuer validation information in response to the first option being selected.

Claims

1. A method, comprising:

receiving, based on a credential and at a terminal device outside a first domain and a second domain mutually exclusive from the first domain, a credential-owner authentication information associated with (1) an identity of a subject entity, and (2) a request for entity-specific information associated with the subject entity from a relying entity within the first domain, the first domain being at least one of a physical domain or a virtual domain;

authenticating the identity of the subject entity based on the credential-owner authentication information; and

sending, based on the request for entity-specific information and in response to the authenticating, an indication of the identity to an information source of the second domain to instruct the information source of the second domain to send to the relying entity of the first domain the entity-specific information associated with the subject entity based on the indication of the identity.

2. The method of claim 1, further comprising:

receiving an issuer validation information associated with an issuer of the credential, the authenticating includes authenticating the identity of the subject entity based on the credential-owner authentication information and the issuer validation information.

3. The method of claim 1, wherein the sending includes sending the indication of the identity to the information source to cause the information source to retrieve, from a portion of a distributed privilege database within the second domain, an indication of a set of privileges associated with the second domain based on the authenticating.

4. The method of claim 1, wherein the credential is a token.

5. The method of claim 1, wherein the credential is one of a smart-card or a mobile telephone.

6. The method of claim 1, wherein the credential is included in an electronic processing device.

7. The method of claim 1, wherein the request is defined based on a standard query.

8. The method of claim 1, wherein the request is defined based on a transaction type associated with the relying entity.

9. The method of claim 1, wherein the request for entity-specific information is a targeted request for data associated with confidential information of the subject entity,

the sending includes sending the indication of the identity to the information source of the second domain to instruct the information source of the second domain to send the entity-specific information based on the targeted request.

10. A non-transitory processor-readable medium storing code representing instructions to be executed by a processor, the code comprising code to cause the processor to:

authenticate, at a computing device outside a first domain, an identity of a subject entity based on a credential-owner authentication information associated with a credential and the identity;

define a request for entity-specific information associated with the subject entity in response to the authenticating;

send the request and an indication of the identity to the first domain to cause the first domain to retrieve a privilege value associated with the first domain and based on the authenticating; and

receive an indicator, from the first domain and in response to the request, that sending of the entity-specific information to a relying entity of a second domain has been approved based on the privilege value.

11. The non-transitory processor-readable medium of claim 10, wherein the code to cause the processor to authenticate the identity of the subject entity includes code to cause the processor to authenticate the identity of the subject entity based on the credential-owner authentication information and a credential-issuer validation information associated with the credential.

12. The non-transitory processor-readable medium of claim 10, wherein the request is defined based on a transaction type associated with the relying entity.

13. The non-transitory processor-readable medium of claim 10, wherein the credential is a card.

14. The non-transitory processor-readable medium of claim 10, wherein the credential is included in an electronic processing device.

15. The non-transitory processor-readable medium of claim 10, wherein the first domain is at least one of a physical domain or a virtual domain.

16. The non-transitory processor-readable medium of claim 10, wherein the request is defined based on a standard query.

17. The non-transitory processor-readable medium of claim 10, wherein the indicator is triggered by the subject entity.

18. An apparatus, comprising:

an information provider implemented in at least one of a memory or a processing device, the information provider configured to receive, based on a credential and via a terminal device different from a relying entity within at least one of a physical domain or a virtual domain and an information source, at least one of a credential-owner authentication information or a credential-owner-provided unique information, the at least one of the credential-owner authentication information or the credential-owner-provided unique information being associated with (1) an identity of a subject entity, and (2) a request from the relying entity for entity-specific information associated with the subject entity,

the information provider configured to authenticate the identity of the subject entity based on at least one of the credential-owner authentication information or the credential-owner-provided unique information,

the information provider configured to send, based on the request for entity-specific information and in response to authenticating the identity, at least one of an indication of the identity or the credential-owner-provided unique information to the information source to instruct the information source to send to the relying entity the entity-specific information associated with the subject entity based on at least one of the indication of the identity or the credential-owner-provided unique information.

19. The apparatus of claim 18, wherein the information provider is configured to send the indication of the identity to the information source to cause the information source to retrieve, from a portion of a distributed privilege database associated with the information source, a set of privileges associated with the entity-specific information based on the indication of the identity.

20. The apparatus of claim 18, wherein the information provider is configured to receive an issuer validation information associated with an issuer of the credential, the information provider configured to authenticate the identity of the subject entity based on the credential-owner authentication information and the issuer validation information.

21. The apparatus of claim 18, wherein the request is defined based on a transaction type associated with the relying entity.

22. The apparatus of claim 18, wherein the request for entity-specific information is a targeted request for data associated with confidential information of the subject entity,

the information provider configured to send at least one of the credential-owner authentication information or the credential-owner-provided unique information to the information source to instruct the information source to send the entity-specific information based on the targeted request.