Universal secure registry

• US 10,636,022 B2
• Filed: 07/27/2017
• Issued: 04/28/2020
• Est. Priority Date: 03/16/2001
• Status: Expired due to Term

• Current Assignee: Universal Secure Registry LLC
• Original Assignee: Universal Secure Registry LLC
• Inventors: Weiss, Kenneth P.
• Primary Examiner(s): Crawley, Talia F
• Application Number:
  US15/661,449
• Publication Number:
  US 20170337537A1
• Time in Patent Office: 1,006 Days
• CPC Class Codes: G06F 21/6245 Protecting personal data, e.g. for financial or medical purposes
• CPC Class Codes: G06Q 20/204 comprising interface for record bearing medium or carrier for electronic funds transfer or payment credit
• CPC Class Codes: G06Q 20/34 using cards, e.g. integrated circuit [IC] cards or magnetic cards
• CPC Class Codes: G06Q 20/382 insuring higher security of transaction
• CPC Class Codes: G06Q 20/3829 involving key management
• CPC Class Codes: G06Q 20/383 Anonymous user system
• CPC Class Codes: G06Q 20/40145 Biometric identity checks
• CPC Class Codes: G06Q 20/409 Device specific authentication in transaction processing
• CPC Class Codes: G06Q 2220/00 Business processing using cryptography postage metering system using cryptography G06Q2250/05
• CPC Class Codes: H04L 2463/102 applying security measure for e-commerce data processing systems or methods, specially adapted for e-commerce G06Q30/00
• CPC Class Codes: H04L 63/102 Entity profiles
• CPC Class Codes: H04L 63/105 Multiple levels of security
• CPC Class Codes: Y10S 707/99931 Database or file accessing
• CPC Class Codes: Y10S 707/99933 Query processing, i.e. searching
• CPC Class Codes: Y10S 707/99939 Privileged access

Abstract

An authentication system and method of use are provided to enable a transaction involving a first party and a user, the system comprising an electronic device comprising a communications interface and one or more processors. The one or more processors are configured to receive biometric information of the user and generate a one-time code in response to authenticating the user, wherein at least a portion of the one-time code is used to access account identifying information or user identifying information, wherein the communications interface is configured to communicate a signal comprising the one-time code to the first party in order to enable a transaction on behalf of the user, and wherein the received biometric information is verified at a point of use.

Claims

1. An authentication system to enable a transaction involving a first party and a user, the system comprising:

an electronic device comprising a communications interface and one or more processors;

wherein the one or more processors are configured to;

receive authentication information of the user, wherein the authentication information comprises one or more of (a) biometric information and (b) a personal identification number (PIN) or code;

authenticate an identity of the user based on the received authentication information; and

generate a time-varying value in response to authenticating the user, wherein at least a portion of the time-varying value is used to access account identifying information or user identifying information, and wherein the time-varying value includes a time value representative of when the time-varying value is generated;

wherein the communications interface is configured to communicate a signal comprising the time-varying value to the first party, the time-varying value configured to be provided by the first party to a secure registry to enable the secure registry to extract the time value from the time-varying value and map the time-varying value to the identity of the user using the time value and the time-varying value in order to enable a transaction on behalf of the user.

2. The system of claim 1 wherein the signal is encrypted before it is communicated the first party.

3. The system of claim 1, wherein the electronic device further comprises a biometric sensor configured to receive at least one of fingerprint information, voice print information, signature information, iris information, facial scan information, and/or DNA information to generate the biometric information.

13. The system of claim 1, wherein the one or more processors are configured to receive the authentication information during a transaction process executed subsequent to a training process of the secure registry, wherein during the training process access restriction information indicating one or more entities that are allowed to access account information of the user is specified by the user, and wherein during the transaction process, compliance with the access restriction information is determined to allow or disallow access to the account information.

14. The system of claim 1, wherein the communications interface is configured to provide the signal to the first party to enable the transaction on behalf of the user without the secure registry system communicating with the electronic device.

15. The system of claim 1, wherein the one or more processors are further configured to:

receive, from the secure registry, a validation code identifying the secure registry; and

authenticate an identity of the secure registry based on the validation code.

16. The system of claim 1, wherein the electronic device further comprises a display, and wherein the electronic device is further configured to:

receive, by the one or more processors from the secure registry, a validation code identifying the secure registry; and

display, via the display, the validation code to the user to authenticate an identity of the secure registry based on the validation code.

4. A method for enabling a transaction involving a first party and a user, the method comprising:

receiving authentication information of the user, wherein the authentication information comprises one or more of (a) biometric information and (b) a personal identification number (PIN);

authenticating an identity of the user based on the received authentication information;

generating a one-time code in response to authenticating the user, wherein at least a portion of the one-time code is used to access at least one of account identifying information and/or user identifying information; and

communicating a signal comprising the one-time code to the first party, wherein the one-time code is configured to be provided, with an identification of the first party, from the first party to a secure registry to enable the secure registry to map the one-time code to the identity of the user using the one-time code, and execute a restriction mechanism to determine compliance with any access restrictions for the first party to secure data of the user for completing the transaction based on the identification of the first party and the one-time code, in order to enable a transaction on behalf of the user.

5. The method of claim 4 wherein generating the one-time code comprises generating a one-time code selected from the group consisting of a one-time nonpredictable code, a time variant code, and a transaction-specific code, and the method further comprises encrypting the one-time code before communicating the signal to the first party.

6. The method of claim 4 further comprising receiving fingerprint information, voice print information, signature information, iris information, facial scan information, or DNA information from a biometric sensor and authenticating the identity of the user based on the received information from the biometric sensor and the PIN or code.

17. The method of claim 4, wherein communicating the signal comprising the one-time code to the first party to enable the one-time code to be provided to the secure registry to execute the restriction mechanism further enables the secure registry to allow the transaction based on the determined compliance with any access restrictions.

18. The method of claim 4, wherein communicating the signal comprising the one-time code to the first party is performed during a transaction process executed subsequent to a training process during which the access restrictions are specified.

19. The method of claim 4, further comprising communicating the signal to the first party to enable the transaction on behalf of the user without the secure registry communicating with the user.

20. The method of claim 4, further comprising:

receiving, from the secure registry, a validation code identifying the secure registry; and

authenticating an identity of the secure registry based on the validation code.

21. The method of claim 4, further comprising:

receiving a validation code identifying the secure registry; and

displaying the validation code to the user to authenticate an identity of the secure registry based on the validation code.

22. The method of claim 4, wherein the one-time code includes a time value representative of when the one-time code is generated.

23. The method of claim 22, wherein the one-time code is configured to be provided from the first party to the secure registry to enable the secure registry to:

extract the time value from the one-time code; and

map the one-time code to the identity of the user using the time value and the one-time code.

24. The method of claim 4, wherein communicating the signal comprising the one-time code to the first party is performed during a transaction process executed subsequent to a training process during which the user specifies the at least one of the account identifying information and/or the user identifying information, and wherein the at least one of the account identifying information and/or the user identifying information is accessed during the transaction process to enable the transaction on behalf of the user.

7. A computer readable medium or media containing instructions for authenticating a user involved in a transaction, wherein execution of the instructions by one or more processors causes the one or more processors to carry out the steps of:

receiving authentication information of the user, wherein the authentication information comprises one or more of (a) biometric information and (b) a PIN or code;

authenticating an identity of the user based on the received authentication information;

generating a time-varying code in response to authenticating the user, wherein at least a portion of the time-varying code is used to access account identifying information or user identifying information, and wherein the time-varying code includes a time value representative of when the time-varying code is generated; and

communicating a signal comprising the time-varying code to the first party, the time-varying code configured to be provided, with an identification of the first party, from the first party to a secure registry to enable the secure registry to extract the time value from the time-varying code, map the time-varying code to the identity of the user using the time value and the time-varying code, and execute a restriction mechanism to determine compliance with any access restrictions for the first party to secure data of the user for completing the transaction based on the identification of the first party and the time-varying code, in order to enable a transaction on behalf of the user without the user receiving communications from the secure registry.

8. The computer readable medium or media of claim 7 wherein generating the time-varying code comprises generating a one-time code selected from the group consisting of a one-time nonpredictable code, a time variant code, and a transaction-specific code, and the method further comprising encrypting the time-varying code before communicating the signal to the first party.

9. The computer readable medium or media of claim 7 wherein execution of the instructions by one or more processors further causes the one or more processors to carry out the steps of receiving fingerprint information, voice print information, signature information, iris information, facial scan information, or DNA information from a biometric sensor and authenticating the identity of the user based on the received information from the biometric sensor and the PIN or code.

25. The computer readable medium of claim 7, wherein communicating the signal comprising the one-time code to the first party to enable the one-time code to be provided to the secure registry to execute the restriction mechanism further enables the secure registry to allow the transaction based on the determined compliance with any access restrictions.

26. The computer readable medium of claim 7, wherein communicating the signal comprising the time-varying code to the first party is performed during a transaction process executed subsequent to a training process during which the access restrictions are specified.

10. An authentication system to enable a transaction involving a first party and a user, the system comprising:

an electronic device comprising a communications interface and one or more processors;

wherein the one or more processors are configured to;

receive biometric information of the user;

authenticate an identity of the user based on the received biometric information; and

generate a one-time code in response to authenticating the user, wherein at least a portion of the one-time code is used to access at least one of account identifying information and/or user identifying information, and wherein the one-time code includes a time value representative of when the one-time code is generated; and

a computer system, the computer system comprising;

a communications interface configured to receive the one-time code and an identification of the first party; and

one or more processors configured to;

extract the time value from the one-time code;

determine the identity of the user using the time value and the one-time code;

execute a restriction mechanism to determine compliance with any access restrictions for the first party to secure data of the user based on the identification of the first party; and

retrieve account information associated with the electronic device, and to use the retrieved account information to access the at least one of the account identifying information and/or the user identifying information.

11. The system of claim 10 wherein the signal is encrypted before it is communicated to the first party.

12. The system of claim 10 wherein the electronic device further comprises a biometric sensor configured to receive at least one of fingerprint information, voice print information, signature information, iris information, facial scan information, and/or DNA information to generate the biometric information.

27. The system of claim 10, wherein the computer system is configured to:

execute a transaction process during which the computer system is configured to receive the one-time code; and

execute, prior to executing the transaction process, a training process during which the access restrictions for the first party are received from the user.

28. The system of claim 10, wherein the computer system is configured to enable the transaction without communicating with the electronic device.

29. The system of claim 10, wherein the one or more processors of the computer system are further configured to provide, to the one or more processors of the electronic device, a validation code identifying the computer system, and wherein the one or more processors of the electronic device are further configured to authenticate an identity of the computer system based on the validation code.