Strategy-driven methodology for reducing identity theft

• US 20070219928A1
• Filed: 03/16/2006
• Published: 09/20/2007
• Est. Priority Date: 03/16/2006
• Status: Active Grant

• Current Assignee: Sushil Madhogarhia
• Original Assignee: Sushil Madhogarhia
• Inventors: Madhogarhia, Sushil
• Granted Patent: US 7,761,384 B2
• Time in Patent Office: Days
• US Class Current: 705/75
• CPC Class Codes: G06F 21/32 using biometric data, e.g. fingerprints, iris scans or voiceprints
• CPC Class Codes: G06F 21/34 involving the use of external additional devices, e.g. dongles or smart cards
• CPC Class Codes: G06F 2221/2119 Authenticating web pages, e.g. with suspicious links
• CPC Class Codes: G06Q 20/341 Active cards, i.e. cards including their own processing means, e.g. including an IC or chip
• CPC Class Codes: G06Q 20/401 Transaction verification
• CPC Class Codes: G06Q 20/4014 Identity check for transactions
• CPC Class Codes: G07C 9/33 by means of a password
• CPC Class Codes: G07F 7/1008 Active credit-cards provided with means to personalise their use, e.g. with PIN-introduction/comparison system

Abstract

A strategy-driven methodology for reducing identity theft comprises the steps of attempting to gain system access, and presenting at least one list of user choices instead of granting system access, as practiced conventionally. The presented list contains at least one choice that is preset by a registered user. Other steps include selecting at least one choice from the presented list, and granting system access if the selected choice matches the preset choice.

Claims

1. A strategy-driven methodology for reducing identity theft, comprising the steps of:

attempting to gain system access;

presenting at least one list of user choices instead of granting system access, said at least one list containing at least one choice that is preset by a registered user;

selecting at least one choice from said at least one list; and

granting system access if said at least one selected choice matches said at least one preset choice.

2. The strategy-driven methodology of claim 1, wherein said at least one preset choice is in the form of a dynamic statement.

3. The strategy-driven methodology of claim 1, wherein said at least one preset choice is in the form of a static statement.

4. The strategy-driven methodology of claim 1, wherein said at least one presented list contains dynamic and static user choices.

127. The strategy-driven methodology of claim 1, further comprising the step of declining system access if said at least one choice is being selected in a random fashion.

128. The strategy-driven methodology of claim 1, further comprising the step of declining system access if said at least one choice is being selected in an organized fashion.

5. A strategy-driven methodology for reducing identity theft, comprising the steps of:

inputting a password in an attempt to gain system access;

checking the input password for accuracy;

inputting a response to at least one system query preset by a registered user if the input password is accurate;

checking the input response for accuracy; and

granting system access if the input response to said at least one preset system query is accurate.

6. The strategy-driven methodology of claim 5, further comprising the step of notifying the registered user of system access.

7. The strategy-driven methodology of claim 5, further comprising the step of inputting a new password if the input password is not accurate.

8. The methodology of claim 5, further comprising the step of denying system access if the input response to said at least one preset system query is inaccurate.

9. A strategy-driven methodology for reducing identity theft, comprising the steps of:

operatively coupling a computer to a secure system website over a network;

inputting a system password via said computer;

checking the input system password for accuracy;

inputting a response to at least one system query preset by a registered user if the input system password is accurate;

checking the input response for accuracy; and

granting access to the secure system website if the input response to said at least one preset system query is accurate.

10. The strategy-driven methodology of claim 9, wherein the network is public.

11. The strategy-driven methodology of claim 9, wherein the network is private.

12. A strategy-driven methodology for reducing identity theft, comprising the steps of:

inputting a user name as part of a system login sequence;

checking the input user name for accuracy;

inputting a system password if the input user name is accurate;

checking whether the input system password is correct;

selecting at least one choice from an option list preset by a registered user if the input system password is correct;

checking said at least one selected choice for accuracy; and

granting system access if said at least one selected choice from said preset option list is accurate.

13. The strategy-driven methodology of claim 12, further comprising the step of notifying the registered user of system access.

14. The strategy-driven methodology of claim 12, further comprising the step of denying system access if said at least one selected choice from said preset option list is inaccurate.

15. The strategy-driven methodology of claim 12, wherein said option list contains dynamic user choices.

16. The strategy-driven methodology of claim 12, wherein said option list contains static user choices.

17. The strategy-driven methodology of claim 12, wherein said option list contains dynamic and static user choices.

18. A strategy-driven methodology for reducing identity theft, comprising the steps of:

inputting a user name as part of a system login sequence;

checking the input user name for accuracy;

inputting a system password if the input user name is accurate;

checking whether the input system password is correct;

selecting at least one choice from a first option list preset by a registered user if the input system password is correct;

checking said at least one selected choice from said first preset option list for accuracy;

selecting at least one choice from a second option list if said at least one selected choice from said first preset option list is not accurate, said second option list containing randomly generated system choices and choices preset by a registered user;

checking said at least one selected choice from said second option list for accuracy; and

granting system access if said at least one selected choice from said second option list is accurate.

19. The strategy-driven methodology of claim 18, wherein at least one of said first and second option lists contains dynamic and static user choices.

20. The strategy-driven methodology of claim 18, wherein at least one of said first and second option lists contains dynamic user choices.

21. The strategy-driven methodology of claim 18, wherein at least one of said first and second option lists contains static user choices.

22. The strategy-driven methodology of claim 18, further comprising the step of granting system access if said at least one selected choice from said first preset option list is accurate.

23. The strategy-driven methodology of claim 22, further comprising the step of notifying the registered user of the granted system access.

24. The strategy-driven methodology of claim 18, further comprising the step of requesting proof of user identity if said at least one selected choice from said second option list is not accurate.

25. A method for reducing credit card transaction fraud, said method comprising the steps of:

providing credit card information to an online merchant or bank;

utilizing the online merchant or bank to verify the credit card CVV (Card Verification Value);

selecting at least one choice from a first option list presented by the online merchant or bank if the credit card CVV is verified, said first option list containing randomly generated system choices and choices preset by the credit card owner;

utilizing the online merchant or bank to check said at least one selected choice from said first option list for accuracy;

selecting at least one choice from a second option list if said at least one selected choice from said first option list is not accurate, said second option list containing randomly generated system choices and choices preset by the credit card owner;

utilizing the online merchant or bank to check said at least one selected choice from said second option list for accuracy; and

processing the credit card transaction if said at least one selected choice from said second option list is accurate.

26. The method of claim 25, wherein at least one of said first and second option lists contains dynamic and static user choices.

27. The method of claim 25, wherein at least one of said first and second option lists contains dynamic user choices.

28. The method of claim 25, wherein at least one of said first and second option lists contains static user choices.

29. The method of claim 25, further comprising the step of processing the credit card transaction if said at least one selected choice from said first option list is accurate.

30. The method of claim 29, further comprising the step of notifying the credit card owner of the processed credit card transaction.

31. The method of claim 25, further comprising the step of declining to process the credit card transaction if said at least one selected choice from said second option list is not accurate.

32. A method for reducing credit card transaction fraud, said method comprising the steps of:

swiping a credit card or manually entering credit card information via an interface device employed by a merchant credit card processing system;

inputting at least one credit card identifier requested by the merchant credit card processing system;

utilizing the merchant credit card processing system to verify said at least one input credit card identifier;

selecting at least one choice from an option list presented by the merchant credit card processing system if said at least one input credit card identifier is verified, said option list containing choices preset by the credit card owner;

utilizing the merchant credit card processing system to check said at least one selected choice for accuracy; and

processing the credit card transaction if said at least one selected choice is accurate.

33. The method of claim 32, wherein said option list contains dynamic and static user choices.

34. The method of claim 32, wherein said option list contains dynamic user choices.

35. The method of claim 32, wherein said option list contains static user choices.

36. The method of claim 32, further comprising the step of utilizing the merchant credit card processing system to notify the credit card owner of the processed credit card transaction.

37. The method of claim 32, further comprising the step of utilizing the merchant credit card processing system to verify the credit card user if said at least one selected choice from said option list is not accurate.

38. A method for reducing checking transaction fraud, said method comprising the steps of:

swiping a check via a check processing system interface device employed by a business entity, said check containing at least one cryptographically stored password;

utilizing said business entity check processing system to decrypt said at least one stored password;

using said business entity check processing system to verify said at least one decrypted password;

clearing said check if password verification succeeds; and

returning said check if password verification fails.

39. The method of claim 38, wherein said at least password is cryptographically stored in the form of a bar code.

40. The method of claim 38, wherein said at least password is cryptographically stored in the form of an alphanumeric sequence.

41. The method of claim 38, wherein said at least password is cryptographically stored in the form of at least one image.

42. The method of claim 38, wherein said at least password is cryptographically stored in the form of at least one pattern.

43. The method of claim 38, wherein said at least password is cryptographically stored by way of an IC (integrated Circuit) chip.

44. The method of claim 38, further comprising the step of verifying the user of said check.

45. A method for reducing checking transaction fraud, said method comprising the steps of:

swiping a check via a check processing system interface device employed by a business entity, said check containing at least one cryptographically stored password;

utilizing said business entity check processing system to decrypt said at least one stored password;

using said business entity check processing system to verify said at least one decrypted password;

inputting a security identifier associated with said swiped check if password verification succeeds;

using said business entity check processing system to verify said input security identifier; and

clearing said check if security identifier verification succeeds.

46. The method of claim 45, further comprising the step of returning said check if password verification fails.

47. The method of claim 46, further comprising the step of returning said check if security identifier verification fails.

48. The method of claim 47, further comprising the step of verifying the user of said check.

49. A method for reducing checking transaction fraud, said method comprising the steps of:

swiping a check via a check processing system interface device employed by a business entity;

utilizing said business entity check processing system to verify said swiped check;

inputting at least one check password preset by the checking account owner if said swiped check verification succeeds;

using said business entity check processing system to verify said at least one input check password; and

clearing said check if said preset check password verification succeeds.

50. The method of claim 49, further comprising the step of returning said check if said preset check password verification fails.

51. The method of claim 49, further comprising the step of verifying the user of said check if said preset check password verification fails.

52. The method of claim 49, further comprising the step of returning said check if said swiped check verification fails.

53. The method of claim 49, further comprising the step of verifying the user of said check if said swiped check verification fails.

54. A method for reducing checking transaction fraud, said method comprising the steps of:

swiping a check via a check processing system interface device employed by a business entity;

utilizing said business entity check processing system to verify said swiped check;

selecting at least one user choice from an option list preset by the checking account owner if said swiped check verification succeeds;

using said business entity check processing system to check said at least one selected choice for accuracy; and

clearing said check if said at least one selected choice is accurate.

55. The method of claim 54, wherein said option list contains dynamic and static user choices.

56. The method of claim 54, wherein said option list contains dynamic user choices.

57. The method of claim 54, wherein said option list contains static user choices.

58. The method of claim 54, wherein said option list contains at least one user choice being pre-designated by the checking account owner as “

correct”

choice.

59. The method of claim 54, further comprising the step of returning said check if said at least one selected choice is not accurate.

60. The method of claim 54, further comprising the step of verifying the user of said check if said at least one selected choice is not accurate.

61. The method of claim 54, further comprising the step of returning said check if said swiped check verification fails.

62. The method of claim 54, further comprising the step of verifying the user of said check if said swiped check verification fails.

63. A method for reducing checking transaction fraud, said method comprising the steps of:

swiping a check via a check processing system interface device employed by a business entity, said check containing at least one cryptographically stored password;

utilizing said business entity check processing system to decrypt said at least one stored password;

using said business entity check processing system to verify said at least one decrypted password;

selecting at least one user choice from an option list if said decrypted password verification succeeds, said option list containing at least one user choice being preset by the checking account owner;

using said business entity check processing system to check said at least one selected choice for accuracy;

inputting a security identifier associated with said swiped check if said at least one selected choice is accurate;

using said business entity check processing system to verify said input security identifier; and

clearing said check if security identifier verification succeeds.

64. The method of claim 63, further comprising the step of returning said check if said at least one selected choice is not accurate.

65. The method of claim 63, further comprising the step of verifying the user of said check if said at least one selected choice is not accurate.

66. The method of claim 63, further comprising the step of returning said check if said decrypted password verification fails.

67. The method of claim 63, further comprising the step of verifying the user of said check if said decrypted password verification fails.

68. The method of claim 63, further comprising the step of returning said check if said security identifier verification fails.

69. The method of claim 63, further comprising the step of verifying the user of said check if said security identifier verification fails.

70. The method of claim 63, wherein said security identifier is the postal code of the checking account owner.

71. The method of claim 63, wherein said security identifier is in the form of a statement.

72. The method of claim 63, wherein said security identifier is in the form of a password.

73. A method for reducing checking transaction fraud, said method comprising the steps of:

swiping a check via an interface device employed by a check cashing terminal, said check containing at least one cryptographically stored password;

utilizing said check cashing terminal to decrypt said at least one stored password;

inputting at least one password stored on said check;

using said check cashing terminal to check said at least one input password against said at least one decrypted password;

utilizing said check cashing terminal to measure the intensity of light reflected from said swiped check and compare the measured intensity against an associated database of preset light reflection intensities for checks issued by banking institutions if said password check succeeds;

using said check cashing terminal to verify the measured intensity; and

clearing said check if said measured intensity verification succeeds.

74. The method of claim 73, further comprising the step of returning said check if said measured intensity verification fails.

75. The method of claim 73, further comprising the step of verifying the user of said check if said measured intensity verification fails.

76. The method of claim 73, further comprising the step of returning said check if said password verification fails.

77. The method of claim 73, further comprising the step of verifying the user of said check if said password verification fails.

78. A secure system access method, said method comprising the steps of:

selecting at least one question from a system list of questions, each question from said system list being presented with an associated list of responses, each of said responses and questions being respectively preset by an authorized user;

selecting at least one response to said at least one selected question from said associated list of responses;

checking said at least one selected response for accuracy; and

granting system access if said at least one selected response is accurate.

79. The secure system access method of claim 78, further comprising the step of notifying the authorized user of the granted system access.

80. The secure system access method of claim 78, further comprising the step of denying system access if said at least one selected response is inaccurate.

81. The secure system access method of claim 80, further comprising the step of verifying the system user.

82. The secure system access method of claim 80, further comprising the step of notifying the authorized user of the attempted system access.

83. The secure system access method of claim 78, wherein said system list of questions contains dynamic entries.

84. The secure system access method of claim 78, wherein said system list of questions contains static entries.

85. The secure system access method of claim 78, wherein said system list of questions contains dynamic and static entries.

86. The secure system access method of claim 78, wherein each of said associated lists of responses contains dynamic entries.

87. The secure system access method of claim 78, wherein each of said associated lists of responses contains static entries.

88. The secure system access method of claim 78, wherein each of said associated lists of responses contains dynamic and static entries.

89. A method for securely providing personal identification information, said method comprising the steps of:

establishing a communication link by a commercial entity with a consumer;

requesting personal identification information from the consumer over the communication link;

requesting a “

for call”

password from the commercial entity over the communication link;

checking the provided “

for call”

password for accuracy, said password checking being performed by the consumer; and

providing the requested personal identification information by the consumer over the communication link if the provided “

for call”

password is accurate.

90. The method of claim 89, further comprising the step of communicating with the commercial entity to verify the personal identification information request if the provided “

for call”

password is not accurate.

91. A method for securely providing personal identification information, said method comprising the steps of:

establishing a communication link by a commercial entity with a consumer;

requesting consumer to provide personal identification information over the communication link;

requesting commercial entity to provide a “

for call”

password over the communication link, said “

for call”

password being set up in advance by an authorized user with the commercial entity;

checking the provided “

for call”

password for accuracy, said password checking being performed by the consumer;

requesting consumer to attempt a system login if the provided “

for call”

password is accurate, said system being maintained by the commercial entity;

utilizing said commercial entity system to check whether the attempted login is successful;

requesting consumer to input at least one instant password provided by said commercial entity system if said system login is successful;

using said commercial entity system to check whether said at least one input instant password is correct; and

providing the requested personal identification information over the communication link if said at least one input instant password is accurate.

92. The method of claim 91, further comprising the step of declining to provide the requested personal identification information over the communication link if said at least one input instant password is not accurate.

93. The method of claim 91, wherein the system login attempt by the consumer is repeated if said system login is not successful.

94. A method for securely providing personal identification information, said method comprising the steps of:

establishing a communication link by a consumer with a commercial entity;

requesting personal identification information from the consumer over the communication link;

checking the provided consumer personal identification information for accuracy, said information checking being performed by a personal identification processing system maintained by the commercial entity;

requesting consumer to attempt a system login using at least one instant password provided by the commercial entity if the provided personal identification information is accurate;

utilizing said commercial entity system to check whether said at least one instant password input is correct; and

using said commercial entity system to complete consumer identity verification if said at least one input instant password is correct.

95. The method of claim 94, wherein the system login attempt by the consumer is repeated if said at least one input instant password is incorrect.

96. The method of claim 94, wherein the personal identification information request is repeated by the commercial entity if the provided personal identification information is incorrect.

97. A secure port access method, said method comprising the steps of:

inputting a first password by a person desiring to gain local port access, a “

correct”

first password having been set in advance of travel to at least one destination by a verified user;

checking said first input password for accuracy;

inputting a second password by the person desiring to gain local port access if said first input password is accurate, a “

correct”

second password having been set in advance of travel to said at least one destination by the verified user;

checking said second input password for accuracy; and

granting local port access if said second input password is accurate.

98. The secure port access method of claim 97, further comprising the step of verifying the person attempting to gain port access if said input second password is inaccurate.

99. The secure port access method of claim 97, further comprising the step of alerting law enforcement if said input second password is inaccurate.

100. The secure port access method of claim 97, wherein at least one of said first and second preset passwords is alphanumeric.

101. The secure port access method of claim 97, wherein at least one of said first and second preset passwords is implemented in the form of a verified user fingerprint scan.

102. The secure port access method of claim 97, wherein at least one of said first and second preset passwords is implemented in the form of a verified user iris scan.

103. The secure port access method of claim 97, wherein at least one of said first and second preset passwords is implemented in the form of a verified user DNA (Deoxyribonucleic acid) profile scan.

104. The secure port access method of claim 97, wherein at least one of said first and second preset passwords is implemented in the form of a verified RFID (Radio Frequency Identification) tag scan.

105. A secure port access method, said method comprising the steps of:

setting up first and second port entry passwords before travel to a foreign port;

inputting two passwords upon arrival in the foreign port;

checking whether said two input passwords match the preset first and second port entry passwords; and

granting foreign port entry if said two input passwords match the preset first and second port entry passwords.

106. The secure port access method of claim 105, further comprising the step of notifying law enforcement of the port arrival.

107. The secure port access method of claim 105, further comprising the step of verifying the port arrival'"'"'s identity if said two input passwords do not match the preset first and second port entry passwords.

108. The secure port access method of claim 105, further comprising the step of notifying law enforcement of the port arrival if said two input passwords do not match the preset first and second port entry passwords.

109. The secure port access method of claim 105, wherein at least one of said preset first and second passwords is alphanumeric.

110. The secure port access method of claim 105, wherein at least one of said preset first and second passwords is implemented in the form of a verified user fingerprint scan.

111. The secure port access method of claim 105, wherein at least one of said preset first and second passwords is implemented in the form of a verified user iris scan.

112. The secure port access method of claim 105, wherein at least one of said preset first and second passwords is implemented in the form of a verified user DNA (Deoxyribonucleic acid) profile scan.

113. The secure port access method of claim 105, wherein at least one of said preset first and second passwords is implemented in the form of a verified RFID (Radio Frequency Identification) tag scan.

114. A secure account solicitation method, said method comprising the steps of:

setting up a password for new account solicitation with an independent third party;

filling out a new account application;

listing a password on said new account application;

checking for a match between said listed password and said preset new account solicitation password; and

establishing a new account if said listed password matches said preset new account solicitation password.

115. The secure port access method of claim 114, further comprising the step of resetting said new account solicitation password.

116. A method for reducing credit card transaction fraud, said method comprising the steps of:

waving a contactless credit card in proximity to an interface device employed by a contactless credit card processing system to input credit card information;

selecting at least one choice from an option list presented by the contactless credit card processing system if the input credit card information is correct, said option list containing choices preset by the contactless credit card owner;

utilizing the contactless credit card processing system to check said at least one selected choice for accuracy; and

processing the credit card transaction if said at least one selected choice is accurate.

117. The method of claim 116, wherein said option list contains dynamic and static user choices.

118. The method of claim 116, wherein said option list contains dynamic user choices.

119. The method of claim 116, wherein said option list contains static user choices.

120. The method of claim 116, further comprising the step of utilizing the contactless credit card processing system to notify the contactless credit card owner of the processed credit card transaction.

121. The method of claim 116, further comprising the step of utilizing the contactless credit card processing system to verify the contactless credit card user if said at least one selected choice from said option list is not accurate.

122. A secure e-mail access method, said method comprising the steps of:

selecting at least one choice from an option list presented by an e-mail processing system in an attempt to access at least one portion of a received e-mail, said option list containing one or more choices preset by an authorized system user;

checking said at least one selected choice for accuracy; and

granting access to said at least one portion of said received e-mail if said at least one selected choice is accurate.

123. A secure ATM access method, comprising the steps of:

inputting a user PIN (Personal Identification Number) as part of an ATM (Automated Teller Machine) system login sequence;

checking the input user PIN for accuracy;

selecting at least one choice from an option list preset by a bank account owner if the input user PIN is correct;

checking said at least one selected choice for accuracy; and

granting ATM system access if said at least one selected choice from said preset option list is accurate.

124. The method of claim 123, wherein said at least one choice is selected using touch screen technology.

125. The method of claim 123, wherein said at least one choice is selected using voice recognition technology.

126. A method for securely issuing an online boarding pass, said method comprising the steps of:

selecting at least one choice from an option list presented by an online boarding pass issuing system, said option list containing one or more choices preset by an authorized system user;

checking said at least one selected choice for accuracy; and

issuing an online boarding pass if said at least one selected choice is accurate.