SHARED IDENTITY PROFILE MANAGEMENT

• US 20100131589A1
• Filed: 03/24/2009
• Published: 05/27/2010
• Est. Priority Date: 11/22/2008
• Status: Active Grant

• Current Assignee: Google LLC (Alphabet Inc.)
• Original Assignee: Google Inc. (Alphabet Inc.)
• Inventors: Guo, Peiran, Lawyer, Justin, Barta, Scott
• Granted Patent: US 9,100,438 B2
• Time in Patent Office: Days
• US Class Current: 709/203
• CPC Class Codes: G06F 16/24575 using context
• CPC Class Codes: G06F 21/313 using a call-back technique via a telephone network
• CPC Class Codes: G06F 2221/2103 Challenge-response
• CPC Class Codes: G06Q 20/40 Authorisation, e.g. identification of payer or payee, verification of customer or shop credentials; Review and approval of payers, e.g. check credit lines or negative lists
• CPC Class Codes: G06Q 20/425 using two different networks, one for transaction and one for security confirmation
• CPC Class Codes: G06Q 40/00 Finance; Insurance; Tax strategies; Processing of corporate or income taxes
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/18 using different networks or channels, e.g. using out of band channels cryptographic mechanisms or cryptographic arrangements for key distribution involving distinctive intermediate devices or communication paths H04L9/0827; cryptographic mechanisms or cryptographic arrangements for authentication using a plurality of channels H04L9/3215

Abstract

Example methods and apparatus are disclosed for maintaining a shared identity profile. An example method includes receiving, at a first online service provider, a plurality of profile information items from a user and storing, by the first online service provider, the profile information items in an identity profile associated with the user. In the example method, at least one of the profile information items includes user identifying information that is capable of verification. The example method also includes verifying, by the first online service provider, the user identifying information and storing, by the first online service provider, as part of the identity profile, a verification status corresponding with the verifying. The example method further includes receiving, at the first online service provider, a request, from a second online service provider, for one or more of the profile information items including the user identifying information and providing, from the first online service provider to the second online service provider, the requested profile information items and the verification status.

Claims

1. A computer-implemented method comprising:

receiving, at a first online service provider, a plurality of profile information items from a user, wherein at least one of the profile information items comprises user identifying information that is capable of verification;

storing, by the first online service provider, the profile information items in an identity profile associated with the user;

verifying, by the first online service provider, the user identifying information;

storing, by the first online service provider, as part of the identity profile, a verification status, the verification status including respective verification information for one or more profile information items;

receiving, at the first online service provider, a request, from a second online service provider, for one or more of the profile information items including the user identifying information; and

providing, from the first online service provider to the second online service provider, the requested profile information items and the verification status.

2. The computer-implemented method of claim 1, wherein verifying the user identifying information is done in response to a verification request received, from the second online service provider, at the first online service provider.

3. The computer-implemented method of claim 2, wherein:

the verification request includes a budget for performing the requested verification; and

verifying the user identifying information is performed in accordance with the budget.

4. The computer-implemented method of claim 2, wherein the verification status indicates that the user identifying information has not been previously verified.

5. The computer-implemented method of claim 1, wherein the verification status includes, for one or more profile information items comprising user identifying information that is subject to verification:

respective indications whether or not each of the one or more profile information items has been verified.

6. The computer-implemented method of claim 5, wherein, in the event a respective profile information item has been verified, a corresponding date when the verification was done.

7. The computer-implemented method of claim 5, wherein the verification status further indicates, for each of the one or more profile information items, in the event the respective profile information item has been verified, an indication of:

a verifying entity; and

a verification method.

8. The computer-implemented method of claim 1, further comprising:

periodically re-verifying, by the first online service provider, one or more profile information items comprising user identifying information that is capable of verification; and

updating, by the first online service provider, the verification status based on the periodic re-verification.

9. The computer-implemented method of claim 1, wherein:

receiving a plurality of profile information items from a user comprises;

receiving a name of the user; and

receiving user identifying information associated with the user'"'"'s name; and

verifying the user identifying information comprises;

querying, by the first online service provider, a trusted database based on the user'"'"'s name and the user identifying information;

determining, based on a result of the query, if a match exists in the database between the user'"'"'s name and the user identifying information;

in the event a match exists, challenging the user, by the first online service provider, based on the user identifying information; and

determining, by the first online service provider, whether to verify the user'"'"'s identity based on a result of the challenge.

10. The computer-implemented method of claim 1, wherein verifying the user identifying information comprises querying, by the first online service provider, one or more trusted databases.

11. The computer-implemented method of claim 1, wherein the first online service provider and the second online service provider are separate entities.

12. A computer-implemented method comprising:

generating, by a second online service provider, an identity profile request;

providing, by the second online service provider, the identity profile request to a first online service provider;

receiving, at the second online service provider, an identity profile corresponding with the profile request;

generating, by the second online service provider, a verification request for verification of one or more profile information items comprising user identifying information that is capable of verification included in the identity profile;

providing, by the second online service provider, the verification request to the first online service provider; and

receiving, at the second online service provider, in response to the verification request, a verification status for the one or more profile information items.

13. The computer-implemented method of claim 12, wherein the verification request is generated and provided in response to an initial verification status received with the identity profile.

14. The computer-implemented method of claim 12, wherein the verification request is generated and provided in response to a verification date received with the identity profile exceeding a verification freshness threshold of the second online service provider.

15. The computer implemented method of claim 12, wherein the first online service provider and the second online service provider are separate entities.

16. A computer program product tangibly embodied on a computer-readable medium and including executable instructions that, when executed, are configured to cause one or more data processing apparatuses to:

receive a plurality of profile information items from a user, wherein at least one of the profile information items comprises user identifying information that is capable of verification;

store the profile information items in an identity profile associated with the user;

verify the user identifying information;

store a verification status, the verification status including respective verification information for one or more profile information items;

receive a request for one or more of the profile information items including the user identifying information; and

provide the requested profile information items and the verification status.

17. The computer program product of claim 16, wherein verifying the user identifying information is done in response to a received verification request.

18. The computer program product of claim 16, wherein the executable instructions, when executed, are further configured to cause one or more data processing apparatuses to:

periodically re-verify one or more profile information items comprising respective user identifying information that is capable of verification included in the identity profile; and

update the verification status based on the periodic re-verification.

19. A computer program product tangibly embodied on a computer-readable medium and including executable instructions that, when executed, are configured to cause one or more data processing apparatuses to:

generate an identity profile request;

provide, from a second online service provider, the profile request to a first online service provider;

receive an identity profile corresponding with the profile request;

generate a verification request for verification of one or more profile information items included in the identity profile, wherein the one or more profile information items each comprise user identifying information that is capable of verification;

provide, from the second online service provider, the verification request to the first online service provider; and

receive, in response to the verification request, a verification status for the one or more profile information items.

20. The computer program product of claim 19, wherein the executable instructions, when executed, are further configured to cause one or more data processing apparatuses to:

compare respective verification dates for the one or more profile information items with corresponding freshness thresholds; and

in the event one or more of the respective verification dates exceeds its corresponding freshness threshold;

generate a re-verification request for re-verification of the one or more profile information items with verification dates exceeding their corresponding freshness thresholds;

provide the re-verification request to the first online service provider; and

receive, in response to the re-verification request, an updated verification status.

21. A system comprising:

a server configured to provide online services to one or more users;

one or more computer-readable media including machine-executable instructions;

one or more instruction processors configured to execute at least a portion of the machine-executable instructions stored in the computer-readable media, wherein execution of the instructions, in response to a request from a user for access to the online services, results in;

receiving, at a first online service provider, a plurality of profile information items from the user, wherein at least one of the profile information items comprises user identifying information that is capable of verification;

storing, by the first online service provider, the profile information items in an identity profile associated with the user;

verifying, by the first online service provider, the user identifying information;

storing, by the first online service provider, as part of the identity profile, a verification status, the verification status including respective verification information for one or more profile information items;

receiving, at the first online service provider, a request, from a second online service provider, for one or more of the profile information items including the user identifying information; and

providing, from the first online service provider to the second online service provider, the requested profile information items and the verification status.

22. A system comprising:

a server configured to provide online services to one or more users;

one or more computer-readable media including machine-executable instructions;

one or more instruction processors configured to execute at least a portion of the machine-executable instructions stored in the computer-readable media, wherein execution of the instructions, in response to a request from a user for access to the online services, results in;

generating, by a second online service, an identity profile request;

providing, by the second online service provider, the identity profile request to a first online service provider;

receiving, at the second online service provider, an identity profile corresponding with the profile request.

generating, by the second online service provider, a verification request for verification of one or more profile information items included in the identity profile, wherein at least one of the requested profile information items comprises user identifying information that is capable of verification;

providing, by the second online service provider, the verification request to the first online service provider; and

receiving, at the second online service provider, in response to the verification request, a verification status for the one or more profile information items.