System and methods for validating and managing user identities

• US 9,852,276 B2
• Filed: 07/03/2015
• Issued: 12/26/2017
• Est. Priority Date: 07/03/2014
• Status: Active Grant

• Current Assignee: EdgeLink, LLC (Talent Group, Inc.)
• Original Assignee: Scayl, Inc.
• Inventors: McEvoy, Michael, Hoffman, Donald L., Bradford, Donald
• Primary Examiner(s): Rahim, Monjour
• Application Number:
  US14/791,339
• Publication Number:
  US 20160004852A1
• Time in Patent Office: 907 Days
• Field of Search: 726 7
• CPC Class Codes: G06F 21/31 User authentication
• CPC Class Codes: G06F 21/62 Protecting access to data via a platform, e.g. using keys or access control rules
• CPC Class Codes: G06F 2221/2111 Location-sensitive, e.g. geographical location, GPS
• CPC Class Codes: H04L 51/00 User-to-user messaging in packet-switching networks, transmitted according to store-and-forward or real-time protocols, e.g. e-mail
• CPC Class Codes: H04L 51/48 Message addressing, e.g. address format or anonymous messages, aliases
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/0876 based on the identity of the terminal or configuration, e.g. MAC address, hardware or software configuration or device fingerprint
• CPC Class Codes: H04L 63/126 the source of the received data

Abstract

A system and associated methods for validating and managing user identities are disclosed. In at least one embodiment, a central computing system is configured for receiving and processing data related to an at least one user and associated identity. A user account is established and associated with each user, the account containing at least one of a unique account identifier, an identity score representing a quality rating of the user based on the at least one identity, and an identity table containing details related to the at least one identity. In at least one embodiment, the computing system is capable of selectively validating the at least one identity, dynamically calculating the identity score associated with the at least one user, and even leveraging select unique identifying data to create a persistent multi-factor authentication process in conjunction with a mobile device associated with the at least one user.

Claims

1. A method for validating and managing an at least one identity of an at least one user, the method comprising the steps of:

implementing a central computing system configured for receiving and processing data related to the at least one user and associated identity;

using a computing device in communication with the computing system to set up a user account associated with a one of the at least one user, the user account containing at least one of a unique account identifier, an identity score representing a quality rating of the user based on the at least one identity associated therewith, and an identity table containing at least one of an identity type, an identity source, an identity status, a validation status, an initial validation date, and a latest validation date;

selectively validating the at least one identity through interacting with the associated identity source so as to determine whether the identity actually originates from the identity source;

dynamically calculating the identity score associated with the at least one user, said identity score based on at least one of the number identities associated with the user, the identity type associated with each identity, the amount of time that has passed since the initial validation date associated with each identity, and the amount of time that has passed since the latest validation date associated with each identity;

whereby, the higher the identity score is for a given user, the more the at least one identity associated with that user can be trusted by other users.

2. The method of claim 1, further comprising the step of implementing a database server in communication with the computing system and configured for selectively storing said data related to the at least one user and associated identity.

3. The method of claim 1, further comprising the step of storing the data related to each of the at least one identity as a one-way hash token.

4. The method of claim 1, further comprising the step of establishing communication between the computing system and at least one of a social network server, an email server, and a telecommunication network.

5. The method of claim 1, wherein the step of dynamically calculating the identity score further comprises the steps of:

accessing the user account associated with the user; and

for each identity contained in the identity table of the user account;

upon determining that said identity has been previously validated, adding a pre-determined amount of points to the identity score;

upon determining that the initial validation date associated with said identity is sufficiently old, multiplying said points by a first pre-determined bonus multiplier; and

upon determining that the latest validation date associated with said identity is sufficiently recent, multiplying said points by a second pre-determined bonus multiplier.

6. The method of claim 5, further comprising the step of dynamically re-calculating the identity score associated with a given identity upon the data contained in the associated identity table being modified.

7. The method of claim 1, further comprising the steps of, upon a first user desiring to send an email to an identity associated with a further user:

providing the first user access to an email interface as displayed on the computing device;

allowing the first user to input the identity associated with the further user into a recipient field of the email interface;

upon determining that the identity associated with the further user currently resides in an identity table of a user account;

upon determining that the identity is an email address, sending the email to said identity;

upon determining that the identity is not an email address;

checking the identity table associated with the further user for any alternate identities that are email addresses;

upon locating at least one alternate identity that is an email address, sending the email to said at least one alternate identity; and

upon locating no alternate identities that are email addresses, sending a message to said identity to notify the associated further user about the email from the first user and inviting the further user to add an email address identity to the associated user account; and

upon determining that the identity associated with the further user does not currently reside in an identity table of a user account, sending a message to said identity to notify the associated further user about the email from the first user and inviting the further user to set up a user account.

8. The method of claim 7, further comprising the step of providing the first user with at least one of the identity status and identity score associated with the further user.

9. The method of claim 8, wherein the step of providing the user with at least one of the identity status and identity score further comprises the steps of:

displaying on the email interface an appropriate notification regarding the identity status associated with said identity; and

displaying on the email interface an appropriate notification regarding the identity score associated with said identity.

10. The method of claim 9, wherein the step of displaying on the email interface an appropriate notification regarding the identity status associated with said identity further comprises the step of displaying a status icon positioned adjacent the identity in the recipient field.

11. The method of claim 9, wherein the step of displaying on the email interface an appropriate notification regarding the identity score associated with said identity further comprises the step of displaying a score icon positioned adjacent the identity in the recipient field.

12. The method of claim 8, further comprising the step of, upon locating more than one alternate identity that is an email address, sending the email to the alternate identity having the highest identity score.

13. The method of claim 8, further comprising the step of, upon locating more than one alternate identity that is an email address, sending the email each of the alternate identities.

14. The method of claim 7, further comprising the steps of:

allowing the first user to selectively designate the email as private; and

upon the further user receiving and attempting to access the private email;

upon determining that the further user does not have a mobile phone associated with the user account of the further user, requiring the further user to associate a mobile phone with the user account of the further user prior to allowing access to the email;

upon determining that the further user is attempting to access the email using a mobile phone associated with the user account of the further user, providing access to the further user via the mobile phone; and

upon determining that the further user is attempting to access the email using a computing device other than a mobile phone associated with the user account of the further user;

upon determining that the computing device is within sufficient proximity to the mobile phone associated with the user account of the further user, providing access to the further user via the computing device.

15. The method of claim 14, wherein the step of requiring the further user to associate a mobile phone with the user account of the further user further comprises the steps of:

allowing the further user to add a phone number associated with the mobile phone as a new identity in connection with the user account associated with the further user; and

validating said new identity.

16. The method of claim 14, wherein the step of determining that the computing device is within sufficient proximity to the mobile phone associated with the user account of the further user further comprises the steps of:

transmitting unique identifying data associated with at least one of the further user and mobile phone, stored in memory on the mobile phone, to the computing device; and

the computing device automatically detecting the presence of the mobile phone by matching the mobile phone with expected parameters based on said identifying data.

17. The method of claim 7, further comprising the steps of:

allowing the first user to selectively designate the email as read-only; and

upon the further user receiving and attempting to access the read-only email;

verifying that the further user is authorized to access the read-only email;

decrypting the read-only email; and

displaying the contents of the read-only email using a message display application residing in memory on a computing device in the possession of the further user.

18. The method of claim 17, further comprising the step of preventing the further user from forwarding or otherwise sending the read-only email to any other users.

19. A method for validating and managing an at least one identity of an at least one user, the method comprising the steps of:

implementing a central computing system configured for receiving and processing data related to the at least one user and associated identity;

using a computing device in communication with the computing system to set up a user account associated with a one of the at least one user, the user account containing at least one of a unique account identifier, an identity score representing a quality rating of the user based on the at least one identity associated therewith, and an identity table containing at least one of an identity type, an identity source, an identity status, a validation status, an initial validation date, and a latest validation date;

selectively validating the at least one identity;

dynamically calculating the identity score associated with the at least one user,

wherein for each identity contained in the identity table of the user account associated with the user;

upon determining that said identity has been previously validated, adding a pre-determined amount of points to the identity score;

upon determining that the initial validation date associated with said identity is sufficiently old, multiplying said points by a first pre-determined bonus multiplier; and

upon determining that the latest validation date associated with said identity is sufficiently recent, multiplying said points by a second pre-determined bonus multiplier;

whereby, the higher the identity score is for a given user, the more the at least one identity associated with that user can be trusted by other users.

20. A method for validating and managing an at least one identity of an at least one user, the method comprising the steps of:

implementing a central computing system configured for receiving and processing data related to the at least one user and associated identity;

using a computing device in communication with the computing system to set up a user account associated with a one of the at least one user, the user account containing an identity table containing the at least one identity; and

upon a first user desiring to send an email to an identity associated with a further user;

allowing the first user to specify the identity associated with the further user to which the email is to be sent;

upon determining that the identity associated with the further user currently resides in an identity table of a user account;

upon determining that the identity is an email address, sending the email to said identity;

upon determining that the identity is not an email address;

checking the identity table associated with the further user for any alternate identities that are email addresses;

upon locating at least one alternate identity that is an email address, sending the email to said at least one alternate identity; and

upon locating no alternate identities that are email addresses, sending a message to said identity to notify the associated further user about the email from the first user and inviting the further user to add an email address identity to the associated user account; and

upon determining that the identity associated with the further user does not currently reside in an identity table of a user account;

sending a message to said identity to notify the associated further user about the email from the first user and inviting the further user to set up a user account.