System and method for authentication of network users

• US 7,234,156 B2
• Filed: 11/26/2001
• Issued: 06/19/2007
• Est. Priority Date: 05/21/1998
• Status: Expired due to Term

• Current Assignee: Equifax, Inc.
• Original Assignee: Equifax, Inc.
• Inventors: Wilder, Jone, French, Jennifer
• Primary Examiner(s): Song; Hosuk
• Application Number:
  US09/994,586
• Publication Number:
  US 20020157029A1
• Time in Patent Office: 2,031 Days
• Field of Search: 713200-202, 713/168, 713175-176, 713/186, 713/170, 705/50, 705/67, 705/70, 705/75, 705/77, 707/1, 707/3, 707/4, 707/6, 707/9, 707/10, 726 2- 4, 726 27- 30
• US Class Current: 726/2
• CPC Class Codes: G06F 21/31 User authentication
• CPC Class Codes: G06F 21/33 using certificates
• CPC Class Codes: G06F 21/40 by quorum, i.e. whereby two or more security principals are required
• CPC Class Codes: G06F 2221/2113 Multi-level security, e.g. mandatory access control
• CPC Class Codes: G06Q 20/341 Active cards, i.e. cards including their own processing means, e.g. including an IC or chip
• CPC Class Codes: G06Q 20/4014 Identity check for transactions
• CPC Class Codes: G06Q 20/4097 using mutual authentication between devices and transaction partners
• CPC Class Codes: G06Q 30/0609 Buyer or seller confidence or verification
• CPC Class Codes: G07F 7/1008 Active credit-cards provided with means to personalise their use, e.g. with PIN-introduction/comparison system
• CPC Class Codes: H04L 63/0823 using certificates cryptographic mechanisms or cryptographic arrangements for entity authentication involving certificates H04L9/3263
• CPC Class Codes: H04L 63/105 Multiple levels of security

Abstract

A network authentication system provides verification of the identity or other attributes of a network user to conduct a transaction, access data or avail themselves of other resources. The user is presented with a hierarchy of queries based on wallet-type (basic identification) and non-wallet type (more private) information designed to ensure the identity of the user and prevent fraud, false negatives and other undesirable results. A preprocessing stage may be employed to ensure correct formatting of the input information and clean up routine mistakes (such as missing digits, typos, etc.) that might otherwise halt the transaction. Queries can be presented in interactive, batch processed or other format. The authenticator can be configured to require differing levels of input or award differing levels of authentication according to security criteria.

Claims

1. A method for authenticating a user'"'"'s identity interactively in real time, wherein the method checks a user'"'"'s information against a credit file, the method comprising:

(a) receiving a first type of information from the user, wherein the first type of information is wallet type information;

(b) formulating and presenting to the user, in real time, a query based on the first type of information received and upon information located in a credit file, the credit file containing credit-related information from a plurality of the user'"'"'s creditors;

(c) receiving a response to the query from the user in real time;

(d) comparing the response to information in the user'"'"'s credit file, in real time, to authenticate the user'"'"'s identity; and

(e) allowing the user to access a predetermined transaction, in real time, only if the user'"'"'s identity is authenticated.

2. The method of claim 1, wherein step (e) comprises indicating to the user acceptance of the first type of information and the response provided by the user.

3. The method of claim 1, wherein steps (b) and (c) are repeated multiple times.

4. The method of claim 3, wherein a plurality of queries are presented in a single display to the user.

5. The method of claim 3, wherein a plurality of queries are presented in a plurality of displays to the user.

6. The method of claim 1, wherein step (b)'"'"'s query is in a multiple-choice format.

7. The method of claim 6, wherein step (b) is repeated a plurality of times.

8. The method of claim 1, wherein the user provides the first type of information and the response from a platform located remotely from the credit file.

9. The method of claim 1, wherein the predetermined transaction is provided by a platform other than the creditor of the user or the credit file.

10. The method of claim 1, wherein the predetermined transaction is provided by a party other than the credit file'"'"'s owner.

11. The method of claim 1, wherein steps (a), (b), (c), (d), and (e) are executed sequentially.

12. The method of claim 1 further comprising:

(f) verifying the first type of information received.

13. The method of claim 12, wherein step (f) is executed after step (a) and, if step (f) is successful, step (b) is executed.

14. The method of claim 12, wherein verifying the first type of information further comprises

preprocessing at least some information from the first type of information for reliability, including performing at least one task selected from the group of tasks consisting of (1) checking format of the at least some information;

(2) comparing the at least some of the information against a record of known data; and

(3) ensuring that the at least some information is present in the record of known data.

15. The method of claim 1, wherein the predetermined transaction is issuance of a digital certificate.

16. The method of claim 12, wherein step (f) comprises:

(i) retrieving the user'"'"'s identification information from a data source;

(ii) comparing the first type of information received with the user identification information retrieved from the data source; and

(iii) determining a level of correspondence between the first type of information received and the user identification information retrieved from the data source.

17. The method of claim 16, wherein the data source comprises a credit file.

18. The method of claim 1, wherein step (d) further comprises:

(i) retrieving the user'"'"'s information from the credit file; and

(ii) determining a level of correspondence between the response received and the user'"'"'s information retrieved from the credit file.

19. The method of claim 18, wherein the identity of the user is authenticated based on at least one of the following:

a level of correspondence determined between the first type of information received and user identification information retrieved from a data source, and an evaluation made in step (d)(ii).

20. The method of claim 19, further comprising:

(f) comprising;

(i) retrieving the user'"'"'s identification information from a data source;

(ii) comparing the first type of information received with the user identification information retrieved from the data source; and

(iii) determining a level of correspondence between the first type of information received and the user identification information retrieved from the data source; and

(g) obtaining a first result from step (f)(iii) and a second result from step (d)(ii).

21. The method of claim 20, further comprising:

(k) issuing an authentication score, wherein the authentication score depends on at least the first result or the second result.

22. The method of claim 20, further comprising assigning a first weight to the first result and a second weight to the second result.

23. The method of claim 12, wherein step (f) further comprises:

(iv) executing a pattern recognition process to detect potential irregularities in the first type of information obtained from the user.

24. The method of claim 1 further comprising:

performing a fraud check to detect a fraudulent attempt to authenticate by the user.

25. A method for interactively authenticating in real time an end user'"'"'s identity after the end user'"'"'s identity has been verified through use of a first type of information, wherein the first type of information is wallet type information and the method uses credit related information, the method comprising:

(a) receiving the first type of information;

(b) formulating and presenting, in real time, a query based on the first type of information and the end user'"'"'s information retrieved from a credit file, the credit file containing credit-related information originating from a plurality of the end-user'"'"'s creditors;

(c) receiving a response in real time;

(d) comparing the response, in real time, to information in the credit file; and

(e) providing an indication about the end user'"'"'s identity, in real time.

26. The method of claim 25, wherein the query is in a multiple-choice format.

27. The method of claim 25, wherein steps (b), (c), and (d) may repeat a plurality of times.

28. A system for interactively authenticating in real time a user on a network, the system comprising:

an input interface for receiving interactive input from the user;

a credit database containing at least one credit file about the user, the credit file containing information originating from a plurality of the user'"'"'s creditors; and

a processor connected to the input interface and configured to;

receive a first type of information from the user, wherein the first type of information is wallet type information;

formulate and present to the user, in real time, a query based on the first type of information received;

receive a response from the user in real time;

compare the response with information in the credit database; and

provide an indication about the user'"'"'s identity.

29. The system of claim 28, wherein the query is in a multiple-choice format.

30. The system of claim 28, wherein the processor is further configured to:

retrieve the user'"'"'s information from the credit database;

compare the first type of information with the user'"'"'s information retrieved from the credit database; and

determine a level of correspondence between the first type of information and the user'"'"'s information retrieved from the credit database.

31. The system of claim 28, further comprising a biometric data input device connected to the processor, wherein the biometric data input device is capable of receiving biometric data from the user.