Identity information systems and methods

• US 10,129,266 B2
• Filed: 11/22/2013
• Issued: 11/13/2018
• Est. Priority Date: 11/22/2012
• Status: Active Grant

• Current Assignee: Barclays Execution Services Ltd. (Barclays PLC)
• Original Assignee: Barclays Bank PLC (Barclays PLC)
• Inventors: Cheng, Lawrence Lok-Lun, Goldstone, Jeremy
• Primary Examiner(s): Vu, Phy Anh
• Application Number:
  US14/646,719
• Publication Number:
  US 20150304342A1
• Time in Patent Office: 1,817 Days
• CPC Class Codes: G06F 21/6245 Protecting personal data, e.g. for financial or medical purposes
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/12 Applying verification of the received information cryptographic mechanisms or cryptographic arrangements for data integrity or data verification H04L9/32

Abstract

A computer implemented method of providing candidate information comprises: obtaining a challenge code from a verification service at a first device associated with an ID candidate; capturing the challenge code from the first device at a second device associated with an ID checker; verifying the challenge code between the second device and the verification service and, if the challenge code is verified, providing the candidate information from the verification service, such that the candidate information is accessible to the ID checker.

Claims

1. A computer implemented method of providing candidate information associated with an identity (ID) candidate from a verification service to an ID checker, the ID candidate having a first communication device communicating over a computer network with the verification service and the ID checker having a second communication device different from the first communication device and communicating over the computer network with the verification service, the method comprising:

a) obtaining a challenge code from the verification service at one of the first and second communication devices, wherein the verification service stores the challenge code with an identifier (ID) of the one of the first and second communication devices and validity information about the challenge code;

b) passing the challenge code as a two-dimensional code from the one of the first and second communication devices that obtained the challenge code to the other of the first and second communication devices;

c) verifying the passed challenge code with the verification service and, if the challenge code is verified, receiving a validation code from the verification service at both the first and second communication devices, the validation code comprises one of a graphical image, one-time code and a predefined set of codes;

d) providing information about the ID candidate from the verification service to the second communication device, such that the information about the ID candidate is accessible to the ID checker under the control of the ID candidate;

wherein the step of providing information about the ID candidate comprises;

i) the verification service sending an approval request to the first communication device, wherein the approval request indicates a plurality of requested items regarding the information about the ID candidate;

ii) presenting the plurality of requested items regarding the information about the ID candidate on the first communication device to the ID candidate;

iii) receiving a selection of a subset of the plurality of requested items regarding the information about the ID candidate from the ID candidate on the first communication device;

iv) sending by the verification service, only the selected subset of the plurality of requested items regarding the information about the ID candidate to the second communication device;

e) displaying the validation code at both the first and second devices to compare the validation code provided by the first communication device to the validation code at the second communication device, and to validate the selected subset of the plurality of requested items regarding the information about the ID candidate sent by the verification service; and

f) transmitting, by the verification service, an acknowledgement message indicating the selected subset of the plurality of requested items regarding the information about the ID candidate has been accepted by the second communication device.

2. The method of claim 1, wherein the challenge code does not contain identity information pertaining to the ID candidate.

3. The method of claim 1, further including specifying, on the second communication device, information about the ID candidate required.

4. The method of claim 3, wherein the plurality of requested items regarding the information about the ID candidate includes a confirmation that a specified criterion is met.

5. The method of claim 1, wherein the acknowledgement message includes the information about the ID candidate provided.

6. The method of claim 1, wherein the validation code is provided in response to a first validation code request from one or both of the first and second communication devices.

7. The method of claim 6, wherein a further validation code is provided in response to a second validation code request from one or both of the first and second communication devices.

8. The method of claim 1, wherein the validation code is output by both the first and second communication devices.

9. The method of claim 1, wherein the ID candidate is authenticated with the first communication device.

10. The method of claim 1, wherein the ID checker is authenticated with the second communication device.

11. The method of claim 1, wherein the first communication device is a mobile communication device.

12. The method of claim 1, wherein the second communication device is a mobile communication device.

13. The method of claim 1, wherein the challenge code is displayed as a code and is passed by scanning.

14. The method of claim 13, wherein the challenge code is displayed as a machine readable code.

15. A system for providing information about an identity (ID) candidate, the system comprising:

a first communication device associated with the ID candidate;

a second communication device, different from the first communication device, associated with an ID checker;

a verification service communicating over a computer network with the first communication device and the second communication device; and

a database accessible to the verification service;

wherein the system is further arranged to;

a) obtain a challenge code from the verification service at one of the first and second communication devices, wherein the verification service stores the challenge code with an identifier (ID) of the one of the first and second communication devices and validity information about the challenge code;

b) pass the challenge code as a two-dimensional code from the one of the first and second communication devices that obtained the challenge code to the other of the first and second communication devices;

c) verify the passed challenge code with the verification service and, if the challenge code is verified, receive a validation code from the verification service at both the first and second communication devices, the validation code comprises one of a graphical image, one-time code and a predefined set of codes;

d) provide information about the ID candidate from the verification service to the second communication device, such that the information about the ID candidate is accessible to the ID checker under the control of the ID candidate, wherein the provide information about the ID candidate cause the system to;

i) send an approval request by the verification service to the first communication device, wherein the approval request indicates a plurality of requested items regarding the information about the ID candidate;

ii) present the plurality of requested items regarding the information about the ID candidate on the first communication device to the ID candidate;

iii) receive a selection of a subset of the plurality of requested items regarding the information about the ID candidate from the ID candidate on the first communication device;

iv) send by the verification service, only the selected subset of the plurality of requested items regarding the information about the ID candidate to the second communication device;

e) display the validation code at both the first and second devices to compare the validation code provided by the first communication device to the validation code at the second communication device, and to validate the selected subset of the plurality of requested items regarding the information about the ID candidate sent by the verification service; and

f) transmit, by the verification service, an acknowledgement message indicating the selected subset of the plurality of requested items regarding the information about the ID candidate has been accepted by the second communication device.

16. A non-transitory computer readable medium having computer-executable instructions stored thereupon which when executed by one or more processors, cause the one or more processors to provide candidate information associated with an identity (ID) candidate from a verification service to an ID checker, the ID candidate having a first communication device communicating over a computer network with the verification service and the ID checker having a second communication device different from the first communication device and communicating over the computer network with the verification service, the computer-executable instructions further comprise instructions to:

a) obtain a challenge code from the verification service at one of the first and second communication devices, wherein the verification service stores the challenge code with an identifier (ID) of the one of the first and second communication devices and validity information about the challenge code;

b) pass the challenge code as a two-dimensional code from the one of the first and second communication devices that obtained the challenge code to the other of the first and second communication devices;

c) verify the passed challenge code with the verification service and, if the challenge code is verified, receive a validation code from the verification service at both the first and second communication devices, the validation code comprises one of a graphical image, one-time code and a predefined set of codes;

d) provide information about the ID candidate from the verification service to the second communication device, such that the information about the ID candidate is accessible to the ID checker under the control of the ID candidate, wherein the provide information about the ID candidate cause the system to;

i) send an approval request by the verification service to the first communication device, wherein the approval request indicates a plurality of requested items regarding the information about the ID candidate;

ii) present the plurality of requested items regarding the information about the ID candidate on the first communication device to the ID candidate;

iii) receive a selection of a subset of the plurality of requested items regarding the information about the ID candidate from the ID candidate on the first communication device;

iv) send by the verification service, only the selected subset of the plurality of requested items regarding the information about the ID candidate to the second communication device;

e) display the validation code at both the first and second devices to compare the validation code provided by the first communication device to the validation code at the second communication device, and to validate the selected subset of the plurality of requested items regarding the information about the ID candidate sent by the verification service; and

f) transmit, by the verification service, an acknowledgement message indicating the selected subset of the plurality of requested items regarding the information about the ID candidate has been accepted by the second communication device.