Method and system for verifying identity

• US 8,060,918 B2
• Filed: 10/30/2002
• Issued: 11/15/2011
• Est. Priority Date: 04/26/2002
• Status: Expired due to Fees

• Current Assignee: Safety Angle Inc.
• Original Assignee: Safety Angle Inc.
• Inventors: Takagawa, Tomokazu, Itoi, Masayuki
• Primary Examiner(s): Shiferaw; Eleni
• Assistant Examiner(s): Teslovich; Tamara
• Application Number:
  US10/284,799
• Publication Number:
  US 20030204725A1
• Time in Patent Office: 3,303 Days
• Field of Search: 713/171, 713/182, 726 4- 9, 726/12, 380/286
• US Class Current: 726/6
• CPC Class Codes: G06Q 20/04 Payment circuits
• CPC Class Codes: G06Q 20/322 Aspects of commerce using mobile devices [M-devices]
• CPC Class Codes: G06Q 20/382 insuring higher security of transaction
• CPC Class Codes: G06Q 20/385 using an alias or single-use codes
• CPC Class Codes: G06Q 20/425 using two different networks, one for transaction and one for security confirmation
• CPC Class Codes: G07C 9/21 having a variable access code

Abstract

Verification facilitating company or companies X and verifying company or companies (e.g., credit service company or companies) Y may respectively manage member ID(s) and password(s) of user(s) 1 in mutually separate and mutually secret fashion. User(s) 1 may send member ID(s) to verification facilitating company or companies X from mobile telephone(s) 2, and verification facilitating company or companies X may use originating telephone number(s) and/or member ID(s) to carry out first-stage identity check(s). In the event of positive verification of identity as a result of such identity check(s), verification facilitating company or companies X may issue one-time ID(s) to user(s) 1 and may communicate such one-time ID(s) to verifying company or companies (e.g., credit service company or companies) Y. User(s) 1 may send one-time ID(s) and password(s) to verifying company or companies (e.g., credit service company or companies) Y from company or companies (e.g., store or stores) Z. Verifying company or companies (e.g., credit service company or companies) Y may use one-time ID(s) and password(s) to carry out second-stage identity check(s), and in the event of positive verification of identity as a result of such identity check(s), may provide credit transaction processing or other such service(s).

Claims

1. A method for verifying an identity of a purported user, comprising:

providing a first key and a second key to a user;

providing a first system and a second system different from the first system with a management master ID of the user;

saving the first key and the management master ID but not the second key at the first system;

saving the second key and the management master ID but not the first key at the second system; and

after the first key and second key providing and savings steps;

transmitting to the first system from a purported user a purported first key but not a purported second key;

receiving at the first system the purported first key from the purported user;

comparing at the first system the purported first key to the first key;

confirming at the first system that the purported first key matches the first key;

if matching of the purported first key with the first key is confirmed, issuing at the first system a one-time ID associated with the purported user to the purported user;

associating the one-time ID with the management master ID of the user at the first system;

transmitting the one-time ID associated with the management master ID of the user from the first system to the second system;

saving the one-time ID associated with the management master ID of the user at the second system;

transmitting to the second system from the purported user a purported second key and a purported one-time ID but not the purported first key;

receiving at the second system the purported second key and the purported one-time ID from the purported user;

comparing at the second system the purported second key to the second key;

comparing at the second system the purported one-time ID to the one-time ID;

confirming at the second system that purported second key matches the second key;

confirming at the second system that the purported one-time ID matches the one-time ID; and

if matching of both the purported second key with the second key and the purported one-time ID with the one-time ID is confirmed, confirming that the purported user is the user.

2. The method of claim 1, wherein the purported first key is transmitted to the first system from a mobile telephone of the purported user.

3. The method of claim 2, wherein the purported first key is transmitted with an originating telephone number of the mobile telephone of the purported user.

4. The method of claim 2, wherein the purported first key is selected on the numeric keypad of the mobile telephone of the purported user.

5. The method of claim 1, wherein the purported second key and the purported onetime ID are transmitted to the second system from a point-of-sale terminal.

6. The method of claim 1, wherein the purported second key and purported one-time ID are transmitted to the second system from a personal computer.

8. The method of claim 1, wherein the first and second systems comprise databases owned by a single company.

9. The method of claim 1, wherein the first and second systems comprise databases owned by different companies.

10. The method of claim 1, further comprising:

after the purported second key and purported one-time ID receiving step and prior to confirming that the purported user is the user;

confirming that the purported one-time ID does not appear in a collection of previously used one-time IDs.

11. The method of claim 1, further comprising:

saving at the first system a mobile communication terminal ID of the user; and

after the first key and second key providing and savings steps, and after the mobile communication terminal ID saving step;

transmitting from a mobile communication terminal of the purported user to the first system the purported first key, the mobile communication terminal being associated with a purported mobile communication terminal ID;

comparing at the first system the purported mobile communication terminal ID to the mobile communication terminal ID; and

confirming at the first system that the purported mobile communication terminal ID matches the mobile communication terminal ID.

12. The method of claim 11, wherein the mobile communication terminal is a mobile telephone.

13. The method of claim 12, where the mobile communication terminal ID and the purported mobile communication terminal ID are telephone numbers.

14. The method of claim 11, further comprising:

saving at the first system a facial image of the user; and

after the first key and second key providing and saving steps, and after the facial image saving step;

transmitting the facial image to the mobile communication terminal of the purported user;

wherein the transmitting of the facial image is coincident with the issuing of the one-time ID.

15. The method of claim 1, further comprising:

after the first key and second key providing and saving steps and prior to confirming that the purported user is the user;

issuing at the second system a second one-time ID different from the one-time ID, the second one-time ID being associated with the purported user;

saving the second one-time ID at the second system;

receiving at the second system a purported second one-time ID from the purported user;

comparing at the second system the purported second one-time ID to the second one-time ID; and

confirming at the second system that the purported second one-time ID matches the second one-time ID.

7. The method of claimed 1,

wherein the first key in the purported first key are member IDs;

and

wherein the second key and purported second key are passwords.

16. An apparatus for verifying an identity of a purported user, comprising:

a first system; and

a second system different from the first system,

the first and second systems being configured for;

providing a first key and a second key to a user;

providing the first system and the second system with a management master ID of the user;

saving the first key and the management master ID but not the second key at the first system;

saving the second key and the management master ID but not the first key at the second system; and

after the first key and second key providing and saving steps;

transmitting to the first system from a purported user a purported first key but not a purported second key;

receiving at the first system the purported first key from the purported user;

comparing at the first system the purported first key to the first key;

confirming at the first system that the purported first key matches the first key;

if matching of the purported first key with the first key is confirmed, issuing at the first system a one-time ID associated with the purported user to the purported user;

associating the one-time ID with the management master ID of the user at the first system;

transmitting the one-time ID associated with the management master ID of the user from the first system to the second system;

saving the one-time ID associated with the management master ID of the user at the second system;

transmitting to the second system from the purported user a purported second key and a purported one-time ID but not the purported first key;

receiving at the second system the purported second key and the purported one-time ID from the purported user;

comparing at the second system the purported second key to the second key;

comparing at the second system the purported one-time ID to the one-time ID;

confirming at the second system that purported second key matches the second key;

confirming at the second system that the purported one-time ID matches the one-time ID; and

if matching of both the purported second key with the second key and the purported one-time ID with the one-time ID is confirmed, confirming that the purported user is the user.

17. The apparatus of claim 16, wherein the first and second systems are further configured for:

saving at the first system a mobile communication terminal ID of the user; and

after the first key and second key providing and saving steps, and after the mobile communication terminal ID saving step;

transmitting from a mobile communication terminal of the purported user to the first system the purported first key, the mobile communication terminal being associated with a purported mobile communication terminal ID;

comparing at the first system the purported mobile communication terminal ID to the mobile communication terminal ID; and

confirming at the first system that the purported mobile communication terminal ID matches the mobile communication terminal ID.

18. The method of claim 17, wherein the first and second systems are further configured for:

saving at the first system a facial image of the user; and

after the first key and second key providing and saving steps, and after the facial image saving step;

transmitting the facial image to the mobile communication terminal of the purported user;

wherein the transmitting of the facial image is coincident with the issuing of the one-time ID.

19. The apparatus of claim 16, wherein the first and second systems are further configured for:

after the first key and second key providing and saving steps and prior to confirming that the purported user is the user;

issuing at the second system a second one-time ID different from the one-time ID, the second one-time ID being associated with the purported user;

saving the second one-time ID at the second system;

receiving at the second system a purported second one-time ID from the purported user;

comparing at the second system the purported second one-time ID to the second one-time ID; and

confirming at the second system that the purported second one-time ID matches the second one-time ID.