System and method of providing identity verification services

• US 9,948,630 B2
• Filed: 06/28/2016
• Issued: 04/17/2018
• Est. Priority Date: 06/30/2015
• Status: Active Grant

• Current Assignee: United States Postal Service (Government of the United States of America)
• Original Assignee: United States Postal Service (Government of the United States of America)
• Inventors: Moran, Timothy M., Quenk, Jane E., Glair, Douglas Paul, McLellan, Charles P.
• Primary Examiner(s): Armouche, Hadi S
• Assistant Examiner(s): Steinle, Andrew J
• Application Number:
  US15/195,885
• Publication Number:
  US 20170006008A1
• Time in Patent Office: 658 Days
• Field of Search: None
• CPC Class Codes: G06F 21/31 User authentication
• CPC Class Codes: G06Q 10/0833 Tracking
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/083 using passwords cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226
• CPC Class Codes: H04L 63/126 the source of the received data

Abstract

A system and method of validating an upgrade of authentication credentials includes authenticating a first user being associated with a first entity, receiving input identifying a customer name for the online account, receiving input indicating a type of identification to be presented at the validation event, receiving input indicating a transaction code associated with the validation event, and receiving input indicating a location of the validation event, and further includes authenticating a second user being associated with a second entity, providing to the second user a list of validation events for a location, receiving input selecting a validation event in the list of validation events, presenting one or more of the customer name, transaction code, and type of identification associated with the selected validation event, and receiving input indicating a result of the validation event, where a credential or token is created and assigned based on the validation event.

Claims

1. A computer assisted method of validating an upgrade of authentication credentials comprising:

authenticating a first user, via a computing system including a network, the first user associated with a first entity;

receiving, from the first user, input identifying a customer name for an online account;

receiving, from the first user, input indicating a type of identification to be presented at a validation event for the online account;

receiving, from the first user, input indicating a transaction code associated with the validation event;

receiving, from the first user, a selection indicating a first location of the validation event;

authenticating a mobile second user, via a computing system including a network, the mobile second user being a person employed by or an agent of a second entity;

receiving real-time geographic coordinates of a second user computing system while the mobile second user is to be traversing a preassigned route;

comparing the received real-time geographic coordinates to the first location of the validation event;

providing a notification to the mobile second user when the second user computing system is within a predetermined distance from the first location of the validation event;

receiving, from the mobile second user, input selecting the validation event;

presenting, to the mobile second user, one or more of the customer name, the transaction code, and the type of identification associated with the selected validation event;

receiving, from the mobile second user, input indicating a result of the validation event; and

creating a credential or token for the first user based on the received input for the validation event,

wherein the selection for the first location of the validation event includes selecting between a second entity facility and a customer address, and further comprises receiving, from the first user, input indicating the first location of the validation event is one of

     1) the second entity facility and

     2) the customer address.

2. The method of claim 1, further comprising determining whether the second user is physically located at the first location corresponding with the selected validation event.

3. The method of claim 1, further comprising digitally signing the result and transmitting the digitally signed result to the first entity.

4. The method of claim 1, further comprising presenting a barcode associated with the selected validation event.

5. The method of claim 4, wherein the input indicating a result comprises the barcode.

6. The method of claim 1, further comprising:

presenting, to the first user, one or more attributes of the online account;

receiving, from the first user, input indicating at least a partial address;

presenting, to the first user, one or more entity locations within a proximity of the partial address; and

receiving, from the first user, input selecting one of the one or more entity locations.

7. The method of claim 1, further comprising changing a government defined level of assurance to level two when the credential or token for the first user is created.

8. The method of claim 1, wherein the first entity comprises a household, an organization or a business.

9. The method of claim 1, wherein the second entity comprises a service organization, a service business, or a government agency.

10. The method of claim 1, additionally comprising receiving geographic coordinates of the second user computing system during an assigned route of the mobile second user as data used to confirm the validity of the upgrade of authentication credentials corresponding to the list of validation events.

11. The method of claim 1, additionally comprising:

presenting to the mobile second user one or more additional validation events for a set of locations corresponding to users in addition to the first user;

comparing the received real-time geographic coordinates of the second user computing system on the preassigned route to each location of the set of locations for the additional validation events;

providing a notification to the mobile second user when the second user computing system on the preassigned route is within a predetermined distance from one of the locations of the set of locations;

receiving, from the mobile second user, input selecting one of the one or more additional validation events corresponding to the notification;

presenting, to the mobile second user, one or more of the customer name, the transaction code, and the type of identification associated with the selected validation event;

receiving, from the mobile second user, input indicating a result of the selected validation event;

creating a credential or token for one of the additional users based on the selected validation event; and

repeating the comparing through creating for any further validation events remaining for the mobile second user.

12. The method of claim 1, wherein the validation event is provided to the mobile second user before beginning the preassigned route.

13. A method of validating an upgrade of authentication credentials comprising:

authenticating a first user, the first user associated with a first entity;

receiving, from a first user computing system, input identifying a customer name for an online account;

receiving, from the first user computing system, input indicating a transaction code associated with a validation event;

receiving, from the first user computing system, input indicating a first location of the validation event;

authenticating a mobile second user, the mobile second user being a person employed by or an agent of a second entity;

receiving real-time geographic coordinates of a second user specialized computing system while the mobile second user is to be traversing a preassigned route;

receiving a current time of day and day of week along with the real-time geographic coordinates;

determining whether the mobile second user is at a location of the second user'"'"'s preassigned route at a time of day corresponding to the day of the week within a predetermined window of time;

comparing the received real-time geographic coordinates to the first location of the validation event;

providing a notification to the mobile second user when the second user computing system is within a predetermined distance from the first location;

receiving, from the mobile second user, input selecting the validation event;

presenting, to the mobile second user, one or more of a name and the transaction code;

receiving, from the second user computing system, input indicating a result of the validation event; and

creating a credential or token for the first user based on the received input for the validation event.

14. The method of claim 13, wherein the second user computing device comprises a scanner, a global positioning system circuit, and custom input keys.

15. The method of claim 13, further comprising determining whether the second user is physically located at the first location corresponding to the selected validation event.

16. The method of claim 13, further comprising digitally signing the result and transmitting the digitally signed result to the first entity.

17. The method of claim 16, further comprising digitally signing the customer name and transaction code with the result.

18. The method of claim 13, further comprising presenting a barcode associated with the selected validation event.

19. The method of claim 18, wherein the input indicating a result comprises the barcode.

20. The method of claim 13, further comprising:

presenting, to the first user computing system, one or more attributes of the online account; and

receiving, from the first user computing system, input indicating at least a partial address.

21. The method of claim 13, further comprising receiving, from the first user computing system, input indicating a type of identification to be presented at the validation event for the online account.

22. The method of claim 13, further comprising changing a government defined level of assurance from level one to level two when the credential or token for the first user is created.

23. The method of claim 13, wherein one or more additional validation events for locations corresponding to one or more users in addition to the first user are provided to the mobile second user before beginning the preassigned route.

24. A system for validating an upgrade of authentication credentials comprising:

a networked computing device including one or more processors operably configured to access one or more storages,

wherein the one or more processors are operably configured to;

authenticate a first user, the first user associated with a first entity;

receive, from a first user computing device, input identifying a customer name for an online account;

receive, from the first user computing device, input indicating a transaction code associated with a validation event;

receive, from the first user computing device, input indicating a first location of the validation event;

authenticate a mobile second user, the mobile second user being a person employed by or an agent of a second entity; and

a mobile second user mobile specialized computing device including a global positioning system circuit, a display and one or more processors operably configured to;

receive a validation event including the first location for the first user;

receive real-time geographic coordinates of the location of the mobile second user while the mobile second user is to be traversing a preassigned route;

receive a current time of day and day of week along with the real-time geographic coordinates;

determine whether the mobile second user is at a location of the second user'"'"'s preassigned route at a time of day corresponding to the day of the week within a predetermined window of time;

compare the received real-time geographic coordinates to the first location of the validation event;

provide a notification to the mobile second user when the second user computing device is within a predetermined distance from the first location;

receive, from the mobile second user, input selecting the validation event;

present, to the mobile second user, one or more of a name and the transaction code;

indicate a result of the validation event; and

create a credential or token for the first user based on the result of the validation event.

25. The system of claim 24, wherein a successful verification event is bound to a credential or token for a government defined level of assurance two.

26. The system of claim 24, wherein the result comprises a confirmation code displayable on the second user'"'"'s display to the first user and/or sendable with a confirmation message to the first user'"'"'s computing device.

27. The system of claim 24, wherein the credential or token is tied to a mobile computing device of the first user.

28. A system for validating an upgrade of authentication credentials comprising:

a set of networked computing devices, each computing device including one or more processors operably configured to access one or more storages,

wherein selected computing devices are operable configured to;

authenticate a first user via access to a first storage, the first user associated with a first entity;

receive, from a first user, input identifying a customer name for an online account;

receive, from the first user, input indicating a transaction code associated with a validation event;

receive, from the first user, input indicating a first location of the validation event;

authenticate a mobile second user, having a mobile computing device including a global positioning system circuit, via access to a second storage, the mobile second user being a person employed by or an agent of a second entity;

receive real-time geographic coordinates of the location of the mobile second user while the mobile second user is to be traversing a preassigned route;

receive a current time of day and day of week along with the real-time geographic coordinates;

determine whether the mobile second user is at a location of the second user'"'"'s preassigned route at a time of day corresponding to the day of the week within a predetermined window of time;

compare the received real-time geographic coordinates to the first location of the validation event;

provide a notification to the mobile second user when the mobile second user is within a predetermined distance from the first location;

receive, from the mobile second user, input selecting the validation event;

present, to the mobile second user, one or more of a name and the transaction code;

indicate a result of the validation event; and

create a credential or token for the first user based on the validation event.