Secure identity and personal information storage and transfer

• US 8,856,507 B2
• Filed: 12/10/2007
• Issued: 10/07/2014
• Est. Priority Date: 12/12/2006
• Status: Active Grant

• Current Assignee: IQVIA, Inc. (IQVIA Holdings, Inc.)
• Original Assignee: IMS Health Incorporated (IQVIA Holdings, Inc.)
• Inventors: Mahgoub, Hussam, Machani, Salah E, Couse, John M
• Primary Examiner(s): SHEHNI, GHAZAL B
• Application Number:
  US11/953,696
• Publication Number:
  US 20080148040A1
• Time in Patent Office: 2,493 Days
• Field of Search: 713/150, 713/193
• US Class Current: 713/150
• CPC Class Codes: G06F 21/6245 Protecting personal data, e.g. for financial or medical purposes
• CPC Class Codes: G06F 2221/2115 Third party
• CPC Class Codes: H04L 2209/56 Financial cryptography, e.g. electronic payment or e-cash
• CPC Class Codes: H04L 2209/805 Lightweight hardware, e.g. radio-frequency identification [RFID] or sensor
• CPC Class Codes: H04L 2209/88 Medical equipments
• CPC Class Codes: H04L 9/3226 using a predetermined code, e.g. password, passphrase or PIN network architectures or network communication protocols for supporting authentication of entities using passwords in a packet data network H04L63/083
• CPC Class Codes: H04L 9/3263 involving certificates, e.g. public key certificate [PKC] or attribute certificate [AC]; Public key infrastructure [PKI] arrangements network architectures or network communication protocols for supporting authentication of entities using certificates in a packet data network H04L63/0823

Abstract

The invention presented herein consists of systems and methods of secure storage for sensitive and confidential data, such as personal identity data, along with methods of securely accessing that data, and transferring information from that data, as necessary.

Claims

1. A system for securely storing and transferring sensitive and confidential data, comprising:

a secure server for storing;

personal and identity information of a user; and

data files corresponding to said personal and identity information of said user;

a secure communications system to provide said user remote access to said sensitive and confidential data; and

a secure transmission system to transmit to said user data files corresponding to said personal and identity information of said user, upon request by said user.

2. The system of claim 1, wherein said secure transmission system transmits via one or more of:

facsimile, SMS, email, broadband wireless, and short-range wireless.

3. The system of claim 1, wherein said secure communications system is based on one or more of:

one-time password (OTP) tokens, Public Key Infrastructure (PKI), digital certificates, event-based dual OTP encryption and biometrics.

4. The system of claim 1, wherein said secure communications system enables said user remote access via a mobile device.

5. The system of claim 4, wherein said secure communications system enables said user to authorize access to a device controlled by a third party from said mobile device.

6. The system of claim 1, wherein said secure communications system enables offline user remote access via a user-controlled device.

7. A method for securely transferring and storing sensitive and confidential data on a mobile device, comprising:

storing on a server, in a first secure store, personal and identity information of a mobile device user, and, in a second secure store, sensitive and confidential data files corresponding to said personal and identity information of said mobile device user;

interfacing with said mobile device via a secure interface to provide access to said sensitive and confidential data files;

receiving a request from said mobile device user for said sensitive and confidential data files from said second secure store;

authenticating said mobile device user requesting said sensitive and confidential data files; and

presenting said sensitive and confidential data files to said mobile device user thereof.

8. The method of claim 7, wherein said mobile device further comprises a contextual interface for accessing said sensitive and confidential data files in said second store of said server.

9. The method of claim 7, further comprising synchronizing said sensitive and confidential data between said first secure store and said second secure store.

10. The method of claim 9, wherein said mobile device synchronizes a subset of said sensitive and confidential data stored in said first secure store with said sensitive and confidential data files stored in said second secure store of said server.

11. The method of claim 10, wherein said mobile device synchronizes said subset of said sensitive and confidential data stored in said first secure store with said sensitive and confidential data file stored in said second secure store of said server in response to a triggering event.

12. The method of claim 11 wherein said triggering event is a search performed by a user of said mobile device and said subset relates to said search.

13. The method of claim 7, wherein said sensitive and confidential data in said first secure store includes a driver'"'"'s license and said sensitive and confidential data file in said second secure store includes a vehicle insurance certificate.

14. The method of claim 7, wherein said sensitive and confidential data in said first secure store includes a health card and said sensitive and confidential data file in said second secure store includes user medical records.

15. The method of claim 7, wherein said sensitive and confidential data in said first secure store includes a bank card and said sensitive and confidential data file in said second secure store includes investment records.

16. The method of claim 7, wherein said sensitive and confidential data includes at least one of personal memberships, rewards programs and loyalty programs.

17. The method of claim 7, wherein said sensitive and confidential data includes access information for secure buildings, including one or more of:

photo ID, RFID, and biometric ID.

18. The method of claim 7, wherein said sensitive and confidential data include tickets for access to events and venues.

19. The method of claim 7, wherein said sensitive and confidential data includes digitally signed permissions for access to secure environments.

20. The method of claim 7, wherein said mobile device authenticates with said server using a one-time password.