Identity theft protection and notification system

• US 20060080263A1
• Filed: 08/23/2005
• Published: 04/13/2006
• Est. Priority Date: 10/13/2004
• Status: Abandoned Application

• Current Assignee: ID Alarm Incorporated
• Original Assignee: ID Alarm Incorporated
• Inventors: Foster, David W., Divjak, Igor D., Willis, John A.
• Application Number:
  US11/208,642
• Publication Number:
  US 20060080263A1
• Time in Patent Office: Days
• US Class Current: 705/76
• CPC Class Codes: G06F 21/33 using certificates
• CPC Class Codes: G06F 21/42 using separate channels for security data
• CPC Class Codes: G06Q 10/00 Administration; Management
• CPC Class Codes: G06Q 20/3821 Electronic credentials
• CPC Class Codes: G06Q 20/401 Transaction verification
• CPC Class Codes: H04L 63/10 for controlling access to devices or network resources

Abstract

An information monitoring and alert system is provided which registers subscribers and verifiers with a central alert system. The alert system provides an interface for the verifiers to submit queries relating to identification information. Information in this query is compared to the stored data submitted by the subscriber during registration and if a match occurs the subscriber is notified that the identification has been used for a certain purpose. The alert system only stores an encrypted value of the identification with only contact information which is preferably anonymous. Any other information is deleted after registration. The subscriber upon being alerted of the use of the identification is instructed to authorize or reject the transaction pertaining to the query.

Claims

1. A method of identity monitoring comprising the steps of

a notification system storing identification information and contact information for each of at least one subscriber, said identification being stored in a secure manner;

said notification system receiving a query from a verifier indicative of the use of queried identification information;

said notification system using said query to retrieve contact information corresponding to said queried identification information if said queried identification information corresponds to one of said at least one subscriber; and

if retrieved, said notification system using said contact information to notify said one of said at least one subscriber of the use of said queried identification information.

2. The method of claim 1 wherein said notification system stores an encrypted version of said identification information.

3. The method of claim 2 wherein said encrypted version is computed using a one-way hash function and said hash function comprises a plurality of fields, each of which corresponds to a portion of said identification information.

4. The method of claim 3 comprising three fields corresponding to an identification issuer, an identification type and an identification number respectively.

5. The method of claim 1 wherein said query is received through an interface accessible by said verifier, and upon receiving said query said interface altering said identification information to match a representation thereof as securely stored by said notification system.

6. The method of claim 1 wherein prior to said notification system securely storing said identification information, the identity of said at least one subscriber is verified through a verification entity in order to register said at least one subscriber with said notification system.

7. The method of claim 6 wherein said verification entity is a notary, said notary being registered with said notification system, and said identification information and said contact information being stored by said notification system in a notarized database.

8. The method of claim 1 further comprising the step of said notification system generating a record of said query and storing said record in a repository, said repository containing an account corresponding to said second correspondent.

9. The method of claim 8 wherein if said contact information is not retrieved, a record of said query is stored in an account in said repository that corresponds to a non-subscriber.

10. The method of claim 9 wherein said non-subscriber gains access to its respective account upon becoming one of said at least one subscriber.

11. The method of claim 1 wherein said identification information corresponds to a credit card, and prior to said notification system securely storing said identification information, the identity of each of said at least one subscriber being verified by said notification system applying a random charge to said credit card, having each of said at least one subscriber uncover said random charge by accessing personal records corresponding to said credit card, and prompting each of said at least one subscriber to enter a value indicative of said random charge.

12. The method of claim 1 wherein said identification information corresponds to a financial account, and prior to said notification system securely storing said identification information, the identity of each of said at least one subscriber being verified by said notification system applying a random deposit to said financial account, having said at least one subscriber uncover said random deposit by accessing personal records corresponding to said financial account, and prompting each of said at least one subscriber to enter a value indicative of said random deposit.

13. The method of claim 1 wherein said identification information corresponds to an access card, said notification system notifying said one of said at least one subscriber of the use of said access card for obtaining access to a building.

14. The method of claim 1 wherein said verifier is another of said at least one subscriber and upon said step of notifying said one of said at least one subscriber comprises sending a message indicative of the desire of said another of said at least one subscriber to securely exchange correspondence with said one of said at least one subscriber.

15. The method of claim 1 wherein said query includes a message having identification information corresponding to each of a plurality of subscribers, said notification system using said query to retrieve contact information corresponding to said identification information if said identification information corresponds to at least one of said plurality of subscribers, and said notification system sending said message to each retrieved contact information.

16. A notification system for identity monitoring comprising:

a storage device for storing identification information and contact information for each of at least one subscriber, said identification information being stored in a secure manner;

an interface adapted to enable a verifier to submit a query indicative of the use of queried identification information; and

a server connected to said interface and said storage device, said server capable of receiving said query from said interface and transmitting a notification message to each of said at least one subscriber over a communication channel, said server using said query to retrieve contact information corresponding to said queried identification information if said queried identification information corresponds to one of said at least one subscriber; and

if retrieved, said server using said contact information to notify said one of said one of said at least one subscriber of the use of said queried identification information.

17. The system of claim 16 wherein said notification system stores an encrypted version of said identification information.

18. The system of claim 17 wherein said encrypted version is computed using a one-way hash function and said hash function comprises a plurality of fields, each of which corresponds to a portion of said identification information.

19. The system of claim 18 comprising three fields corresponding to an identification issuer, an identification type and an identification number respectively.

20. The system of claim 16 wherein said interface is adapted to alter said identification information to match a representation thereof as securely stored by said notification system.

21. The system of claim 16 further comprising a registration interface, said registration interface being used by a verification entity for verifying the identity of said at least one subscriber in order to register said at least one subscriber with said notification system.

22. The system of claim 16 further comprising a mailbox and wherein said server generates a record of said query and stores said record in said mailbox, said mailbox containing an account corresponding to each of said at least one subscriber.

23. The system of claim 22 wherein if said contact information is not retrieved, a record of said query is stored in an account in said mailbox that corresponds to a non-subscriber.

24. The system of claim 23 wherein said non-subscriber may gain access to its respective account upon becoming one of said at least one subscriber.

25. The system of claim 16 wherein said identification information corresponds to a credit card, and said server verifies said credit card by said server applying a random charge to said credit card, having each of said at least one subscriber uncover said random charge by accessing personal records corresponding to said credit card, and prompting each of said at least one subscriber to enter a value indicative of said random charge.

26. The system of claim 16 wherein said identification information corresponds to a financial account, and said server verifies said financial account by applying a random deposit to said financial account, having said at least one subscriber uncover said random deposit by accessing personal records corresponding to said financial account, and prompting each of said at least one subscriber to enter a value indicative of said random deposit.

27. The system of claim 16 wherein said identification information corresponds to an access card, said server notifying said one of said at least one subscriber of the use of said access card for obtaining access to a restricted zone.

28. The system of claim 16 wherein said verifier is another of said at least one subscriber and upon notifying said one of said at least one subscriber, said server sends a message indicative of the desire of said another of said at least one subscriber to securely exchange correspondence with said one of said at least one subscriber.

29. The system of claim 16 wherein said query includes a message having identification information corresponding to each of a plurality of subscribers, said notification system using said query to retrieve contact information corresponding to said identification information if said identification information corresponds to at least one of said plurality of subscribers, and said notification system sending said message to each retrieved contact information.

30. A method of monitoring information belonging to a first correspondent by a second correspondent, said second correspondent having permission to act on behalf of said first correspondent, said method comprising the steps of:

a notification system storing said information belonging to said first correspondent and contact information belonging to said second correspondent;

said notification system receiving a query from a third correspondent indicative of the use of queried information;

said notification system using said query to retrieve said contact information if said queried information equals said information belonging to said first correspondent; and

if retrieved, said notification system using said contact information to notify said second correspondent of the use of said information.

31. A system for monitoring information belonging to a first correspondent by a second correspondent, said second correspondent having permission to act on behalf of said first correspondent, said system comprising:

a storage device for storing said information belonging to said first correspondent and contact information belonging to said second correspondent;

an interface adapted to enable a third correspondent to submit a query indicative of the use of queried information; and

a server connected to said interface and said storage device, said server capable of receiving said query from said interface and transmitting a notification message to said second correspondent over a communication channel, said server using said query to retrieve said contact information if said queried information equals said information belonging to said first correspondent; and

if retrieved, said server using said contact information to notify said second correspondent of the use of said queried information.