Universal secure registry

• US 8,856,539 B2
• Filed: 06/26/2007
• Issued: 10/07/2014
• Est. Priority Date: 03/16/2001
• Status: Expired due to Fees

• Current Assignee: Universal Secure Registry LLC
• Original Assignee: Universal Secure Registry LLC
• Inventors: Weiss, Kenneth P.
• Primary Examiner(s): Schwartz, Darren B
• Assistant Examiner(s): GYORFI, THOMAS A
• Application Number:
  US11/768,729
• Publication Number:
  US 20080005576A1
• Time in Patent Office: 2,660 Days
• Field of Search: 713/169, 713/182, 713/184, 707/9, 707/999.001
• US Class Current: 713/182
• CPC Class Codes: G06F 21/6245 Protecting personal data, e.g. for financial or medical purposes
• CPC Class Codes: G06Q 20/204 comprising interface for record bearing medium or carrier for electronic funds transfer or payment credit
• CPC Class Codes: G06Q 20/34 using cards, e.g. integrated circuit [IC] cards or magnetic cards
• CPC Class Codes: G06Q 20/382 insuring higher security of transaction
• CPC Class Codes: G06Q 20/3829 involving key management
• CPC Class Codes: G06Q 20/383 Anonymous user system
• CPC Class Codes: G06Q 20/40145 Biometric identity checks
• CPC Class Codes: G06Q 20/409 Device specific authentication in transaction processing
• CPC Class Codes: G06Q 2220/00 Business processing using cryptography postage metering system using cryptography G06Q2250/05
• CPC Class Codes: H04L 2463/102 applying security measure for e-commerce data processing systems or methods, specially adapted for e-commerce G06Q30/00
• CPC Class Codes: H04L 63/102 Entity profiles
• CPC Class Codes: H04L 63/105 Multiple levels of security
• CPC Class Codes: Y10S 707/99931 Database or file accessing
• CPC Class Codes: Y10S 707/99933 Query processing, i.e. searching
• CPC Class Codes: Y10S 707/99939 Privileged access

Abstract

A secure registry system and method for the use thereof are provided which permits secure access to a database containing selected data on a plurality of entities, at least portions of which database has restricted access. Mechanisms are provided for controlling access to restricted access portions of the database are provided, such access being determined by at least one of the identity of the requesting entity and the entity'"'"'s status. A multicharacter public code may be provided which the system can map to provide permit delivery of items, complete telephone calls and perform other functions for entities. The system may also be utilized to locate an individual based on limited biological data. Organizations utilizing the system may have custom software facilitating their access and use of the system.

Claims

1. A secure registry system for providing information to a provider to enable transactions between the provider and entities with secure data stored in the secure registry system, the secure registry system comprising:

a database including secure data for each entity, wherein each entity is associated with a time-varying multicharacter code for each entity having secure data in the secure registry system, respectively, each time-varying multicharacter code representing an identity of one of the respective entities; and

a processor configured to receive a transaction request including at least the time-varying multicharacter code for the entity on whose behalf a transaction is to be performed and an indication of the provider requesting the transaction, to map the time-varying multicharacter code to the identity of the entity using the time-varying multicharacter code, to execute a restriction mechanism to determine compliance with any access restrictions for the provider to secure data of the entity for completing the transaction based at least in part on the indication of the provider and the time-varying multicharacter code of the transaction request, and to allow or not allow access to the secure data associated with the entity including information required to enable the transaction based on the determined compliance with any access restrictions for the provider, the information including account identifying information, wherein the account identifying information is not provided to the provider and the account identifying information is provided to a third party to enable or deny the transaction with the provider without providing the account identifying information to the provider.

2. The system of claim 1, wherein the time-varying multicharacter code is provided to the system via a secure electronic transmission device.

3. The system of claim 1, wherein the time-varying multicharacter code is encrypted and transmitted to the system, and

wherein the system is configured to decrypt the time-varying multicharacter code with a public key of the entity.

4. The system as claimed in claim 1, wherein the transaction includes a service provided by the provider,

wherein said provider'"'"'s service includes delivery,

wherein the information is an address to which an item is to be delivered to the entity,

wherein the system receives the time-varying multicharacter code, and

wherein the system uses the time-varying multicharacter code to obtain the appropriate address for delivery of the item by the third party.

5. The system as claimed in claim 1, wherein the account identifying information includes credit card account information regarding the entity, and wherein the processor is configured to provide the credit card account information based upon the multicharacter code of the entity to enable the transaction.

6. The system as claimed in claim 5, wherein the system is configured to receive an approval of the credit card transaction.

7. The system as claimed in claim 1, wherein the account identifying information includes bank card account information regarding the entity, and wherein the processor is configured to provide the bank card account information to enable the transaction based upon the multicharacter code of the entity.

8. The system as claimed in claim 7, wherein the system is configured to provide an approval of the bank card transaction.

9. The system as claimed in claim 1, wherein the information includes personal identification information regarding the entity.

10. The system as claimed in claim 9, wherein the personal identification information comprises a photograph of the entity, and wherein the photograph is provided to the provider.

11. The system as claimed in claim 1, wherein the account identifying information identifies email address information regarding the entity.

12. The system of claim 1, wherein the database is further configured to associate biometric information with each entity having secure data in the secure registry, respectively.

13. The system of claim 12, wherein the processor is further configured to map the time-varying multicharacter code to biometric information associated with the entity on whose behalf the transaction is to be performed and to provide the biometric information to the provider.

14. The system of claim 13, wherein the biometric information includes an image of the entity on whose behalf the transaction is to be performed.

15. The system of claim 13, wherein the time-varying multicharacter code is generated by a device associated with the entity on whose behalf the transaction is to be performed.

16. The system of claim 1, wherein the account identifying information includes an account number.

17. The system of claim 16, wherein the account identifying information includes credit card account information and the account number includes a credit card number.

18. The system of claim 16, wherein the third party includes a financial service provider and the account number includes at least one of a debit card number and a credit card number.

19. The system of claim 18, wherein the provider includes a merchant, and the service includes a sale of at least one of goods and services.

20. The system of claim 19, wherein the processor is further configured to receive, from the provider, a merchant ID, and a purchase amount.

21. The system of claim 1, wherein the identity of the entity is unknown until the time-varying code is mapped to the identity by the processor.

22. A method for providing information to a provider to enable transactions between the provider and entities who have secure data stored in a secure registry in which each entity is identified by a time-varying multicharacter code, the method comprising:

receiving a transaction request including at least the time-varying multicharacter code for an entity on whose behalf a transaction is to take place and an indication of the provider requesting the transaction;

mapping the time-varying multicharacter code to an identity of the entity using the time-varying multicharacter code;

determining compliance with any access restrictions for the provider to secure data of the entity for completing the transaction based at least in part on the indication of the provider and the time-varying multicharacter code of the transaction request;

accessing information of the entity required to perform the transaction based on the determined compliance with any access restrictions for the provider, the information including account identifying information;

providing the account identifying information to a third party without providing the account identifying information to the provider to enable or deny the transaction; and

enabling or denying the provider to perform the transaction without the provider'"'"'s knowledge of the account identifying information.

23. The method of claim 22, wherein the act of receiving the time-varying multicharacter code comprises receiving the time-varying multicharacter code transmitted via a secure electronic transmission device.

24. The method of claim 22, wherein the act of receiving the time-varying multicharacter code comprises receiving an encrypted multicharacter code, and

wherein the method further comprises decrypting the encrypted multicharacter code.

25. The method as claimed in claim 22, wherein the transaction includes a service provided by the provider,

wherein the service includes delivery,

wherein the account identifying information is associated with an address to which an item is to be delivered for the entity, and

wherein the third party receives the address for delivery of an item provided by the provider.

26. The method as claimed in claim 22, wherein the account identifying information includes a credit card number, and wherein the act of using the account identifying information comprises using the credit card number to enable the transaction.

27. The method as claimed in claim 26, wherein the act of using the account identifying information comprises receiving a validation or denial of the transaction without providing the credit card number of the entity to the provider.

28. The method as claimed in claim 26, further comprising an act of transmitting to the provider one of an approval or a denial of the credit card transaction.

29. The method as claimed in claim 22, wherein the act of using the account identifying information comprises using bank card information about the entity to enable a transaction.

30. The method as claimed in claim 29, wherein the act of using the information comprises receiving a validation or denial of the bank card transaction without providing a bank card number of the entity to the provider.

31. The method as claimed in claim 22, wherein the act of mapping the time-varying multicharacter code to information required by the provider comprises mapping the time-varying multicharacter code to personal identification information about the entity.

32. The method as claimed in claim 31, wherein the personal identification information comprises a photograph of the entity, and

wherein the method further comprises an act of providing the photograph to the provider.

33. The method as claimed in claim 22, wherein the account identifying information identifies email address information about the entity.

34. The method as claimed in claim 22, further comprising an act of associating biometric information with each entity having secure data in the secure registry, respectively.

35. The method of claim 34, further comprising acts of:

mapping the time-varying multicharacter code to biometric information associated with the entity on whose behalf the transaction is to be performed; and

providing the biometric information to the provider.

36. The method of claim 35, wherein the biometric information includes an image of the entity on whose behalf the transaction is to be performed.

37. A secure registry system for providing information to a provider to enable transactions between the provider and entities with secure data stored in the secure registry system, the secure registry system comprising:

a database including secure data for each entity, wherein each entity is associated with a time-varying multicharacter code for each entity having secure data in the secure registry system, respectively, each time-varying multicharacter code representing an identity of one of the respective entities, wherein the database is configured to permit or deny access to information on the respective entity using the time-varying multicharacter code; and

a processor configured to receive the time-varying multicharacter code for the entity on whose behalf a transaction is to be performed, configured to map the time-varying multicharacter code to the identity of the entity to identify the entity, configured to execute a restriction mechanism to determine compliance with any access restrictions for the provider to at least one portion of secure data for completing the transaction and to store an appropriate code with each such portion of secure data, configured to obtain from the database the secure data associated with the entity including information required to enable the transaction, the information including account identifying information, and configured to provide the account identifying information to a third party to enable or deny the transaction without providing the account identifying information to the provider.

38. A secure registry system for providing information to a provider to enable transactions between the provider and entities with secure data stored in the secure registry system, the secure registry system comprising:

a database including secure data for each entity, wherein each entity is associated with a time-varying multicharacter code for each entity having secure data in the secure registry system, respectively, each time-varying multicharacter code representing an identity of one of the respective entities; and

a processor configured to receive the time-varying multicharacter code for the entity on whose behalf a transaction is to be performed, configured to map the time-varying multicharacter code to the identity of the entity without requiring further information to identify the entity, configured to access from the database secure data associated with the entity including information required to enable the transaction, the information including account identifying information, and configured to provide the account identifying information to a third party to enable or deny the transaction without providing the account identifying information to the provider, and wherein enabling or denying the transaction without providing account identifying information to the provider includes limiting transaction information provided by the secure registry system to the provider to transaction approval information.