System and method to support identity theft protection as part of a distributed service oriented ecosystem

• US 9,984,370 B2
• Filed: 05/25/2012
• Issued: 05/29/2018
• Est. Priority Date: 02/09/2009
• Status: Active Grant

• Current Assignee: International Business Machines Corporation
• Original Assignee: International Business Machines Corporation
• Inventors: Ibrahim, Mamdouh, Ramanathan, Sri, Som, Tapas K., Trevathan, Matthew B.
• Primary Examiner(s): Nigh, James D
• Assistant Examiner(s): MCINTYRE, CHARLES AARON
• Application Number:
  US13/481,082
• Publication Number:
  US 20120233673A1
• Time in Patent Office: 2,195 Days
• Field of Search: 705 50, 709227-229
• CPC Class Codes: G06Q 20/4014 Identity check for transactions
• CPC Class Codes: G06Q 30/00 Commerce
• CPC Class Codes: G06Q 50/265 Personal security, identity or safety
• CPC Class Codes: H04L 63/1433 Vulnerability analysis
• CPC Class Codes: H04L 65/1016 IP multimedia subsystem [IMS]
• CPC Class Codes: H04L 65/1104 Session initiation protocol [SIP]
• CPC Class Codes: H04W 12/06 Authentication
• CPC Class Codes: H04W 4/12 Messaging; Mailboxes; Announcements

Abstract

A system and method to support identity theft protection and, in particular, to a system and method for supporting identity theft protection as part of a distributed service oriented ecosystem in Internet protocol (IP) multimedia subsystem (IMS) and non-IMS networks. The system includes an identity session initiation protocol (SIP) application server configured to act as a security assertion markup language (SAML) bridge, which allows an SIP enabled device or a non-SIP enabled device to attach to a telecommunications service provider network. A user may accept or reject an authorization request using the SIP enabled device or non-SIP enabled device.

Claims

1. A computer program product comprising a non-transitory computer usable storage medium having readable program code embodied in a storage device, the computer program product includes at least one component that when executed by a processor causes the processor to perform the steps of:

process an authentication request comprising one or more credentials in order to access an account of a subscriber;

convert the authentication request to a SIP and publish the converted authentication request;

process the one or more credentials to identify the subscriber;

determine that the subscriber has an Internet protocol (IP) multimedia subsystem (IMS) device; and

send a notification message to the subscriber notifying the subscriber that the authentication request to access the subscribers account has been made.

2. The computer program product of claim 1, further comprising a component to look up a profile of the subscribers, process an identity of the subscriber, and check a XML document management system.

3. The computer program product of claim 1, wherein the at least one component further performs receiving a verification of an authentication from the subscriber using the SIP request.

4. The computer program product of claim 1, wherein the computer program product is at least one of supported, deployed, maintained, and created by a service provider.

5. The computer program product of claim 1, wherein the at least one component further performs the steps offered by a service provider based on one of a fee and subscription basis.

6. The computer program product of claim 1, wherein at least one of the processing an authentication request, the processing the one or more credentials, the determining, and the sending are implemented for credit card authorization.

7. The computer program product of claim 1, wherein at least one of the processing an authentication request, the processing the one or more credentials, the determining, and the sending are implemented by the computer program product based on authentication requests when a trusted card without two factor authentication is used.

8. The computer program product of claim 1, wherein the at least one component further performs an authentication request using a first device and the message is sent to a second device.

9. The computer program product of claim 1, further comprising a component to determine that the user is at a same location of a device used to make the authentication request.

10. The computer program product of claim 1, wherein the authentication request is a login attempt.

11. The computer program product of claim 1, wherein the at least one component further performs accepting, storing, and distributing presence information.

12. The computer program product of claim 1, wherein the at least one component further performs allowing the subscriber to reject an unauthorized login attempt based on the notification message, and allowing changing of credentials as a result of the unauthorized login attempt.

13. The computer program product of claim 1, wherein the at least one component further performs allowing the subscriber to opt into one or more authentication request services offered by a service provider.

14. The computer program product of claim 13, wherein the at least one component further performs allowing the subscriber to select a timeout service.

15. The computer program product of claim 14, wherein the at least one component further performs allowing the subscriber to select a service to authenticate a login attempt using a master pin.

16. The computer program product of claim 15, wherein the at least one component further performs allowing the subscriber to select a subscription confirmation service.

17. The computer program product of claim 13, wherein the at least one component further performs allowing the subscriber to select a service that supports roaming.

18. The computer program product of claim 10, further comprising a component to generate a risk rating associated with the login attempt.

19. The computer program product of claim 18, wherein the risk rating is based on a subscriber location and a login attempt location.

20. A computer program product comprising a non-transitory computer usable storage medium having readable program code embodied in a storage device, the computer program product includes at least one component that when executed by a processor causes the processor to perform the steps of:

process an authentication request comprising one or more credentials in order to access an account of a subscriber;

determine that the authentication request is in a blackout time and charge the subscriber for the message;

process the one or more credentials to identify the subscriber;

determine that the subscriber has an Internet protocol (IP) multimedia subsystem (IMS) device; and

send a notification message to the subscriber notifying the subscriber that the authentication request to access the subscribers account has been made.