AUTHENTICATION QUERY STRATEGIZER AND RESULTS COMPILER

• US 20080127305A1
• Filed: 02/08/2008
• Published: 05/29/2008
• Est. Priority Date: 05/29/2002
• Status: Active Grant

• Current Assignee: RAF Software Technology Incorporated
• Original Assignee: RAF Technology, Incorporated (Constellation Software Incorporated)
• Inventors: Ross, David Justin
• Granted Patent: US 7,748,029 B2
• Time in Patent Office: Days
• US Class Current: 726/2
• CPC Class Codes: G06F 21/31 User authentication
• CPC Class Codes: G06F 21/40 by quorum, i.e. whereby two or more security principals are required
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32

Abstract

Embodiments of the present invention encompass systems and methods for use in identity authentication. One illustrative application is in the context of authenticating the identity of a subject by verifying items of identifying information stored by, or accessible through, a plurality of data sources. In particular, a multi-item query can be presented to multiple data sources and the results of the query can be combined into an overall composite result that can be used to authenticate the subject'"'"'s identity.

Claims

1. A computer program product comprising machine-executable instructions stored in machine-readable media for use in automating verification of a purported identity of an individual authentication subject, the system comprising:

(a) a user interface for receiving a plurality of identifying items representing the purported identity of the subject;

(b) a linking component that, for each received identification item, identifies a pair-wise link to each other identification item;

(c) a data source interface component for querying a plurality of separate, independent data sources to obtain a response from each of them, wherein the query to each data source presents a corresponding linked pair of the identifying items for verification;

(d) the data source interface component further arranged to receive in response from each data source a respective confidence level corresponding to each pair-wise association among the identifying items; and

(e) a results compiler for combining the received confidence levels into an overall authentication result regarding the purported identity of the individual authentication subject.

2. The computer program product of claim 1 wherein the data source interface component has access to characterization information for each data source, and the data source interface component selectively presents the queries to one or more of the data sources depending on the characterization information for each data source and the item type for each of the identifying items.

3. The computer program product of claim 2 wherein the identifying items include Name, Social Security Number (SSN), Address, and Date of Birth (DOB).

4. The computer program product of claim 3 wherein the characterization information for each data source includes at least one of content, indexing, accuracy, and coverage.

5. The computer program product of claim 3 wherein the characterization information for each data source includes at least one of content, importance, and restriction ratings.