Data authentication and provisioning method and system

Patent metadata

Field	Value
Publication number	US-10679453-B2
Application number	US-201113198395-A
Country	US
Kind code	B2
Filing date	Aug 4, 2011
Priority date	Sep 10, 2002
Publication date	Jun 9, 2020
Grant date	Jun 9, 2020

Abstract

Techniques for authenticating the identity and validating the profile of an individual (“a presenter”) who presents him or herself to another party (“an acceptor”) as having a certain identity and having certain corresponding profile data are described. The invention can be advantageously used in Internet transactions where such authentication and validation is difficult to perform. The techniques of the present invention allow the trusted party to give a definitive answer regarding the authentication of identity and validity of profile data. Other services such as profile data provisioning and profile data updating can also be performed.

First claim

We claim:

1. A method comprising:
receiving, by a directory server, a service enrollment request message from an acceptor server plug-in that received form data supplied by a presenter including an address of the presenter, the service enrollment request message requesting verification that the presenter is enrolled in a profile data authentication program, wherein the service enrollment request message comprises a program identity number;
sending, by the directory server, the service enrollment request message to an access control server storing profile data of the presenter including the address of the presenter;
receiving, by the directory server, a service enrollment response message indicating that the presenter is enrolled in the profile data authentication program;
sending, by the directory server, the service enrollment response message to the acceptor server plug-in, to cause the acceptor server plug-in to send a data authentication request message to the access control server via a device of the presenter, the data authentication request message including the form data supplied by the presenter including the address of the presenter; and
determining, by the directory server, that the program identity number is within a range of numbers associated with the access control server, wherein the sending of the service enrollment request message to the access control server is performed in response to the determining that the program identity number is within the range of numbers associated with the access control server.

2. The method of claim 1 wherein the access control server comprises a presenter file database.

3. The method of claim 1 wherein if the presenter is enrolled in the profile data authentication program, then the method further comprises:
receiving a data authentication request from the acceptor server plug-in.

4. The method of claim 1 wherein if the presenter is enrolled in the profile data authentication program, then the method further comprises:
receiving a data authentication request from the acceptor server plug-in; and
sending the data authentication request to the access control server.

5. The method of claim 1 wherein if the presenter is enrolled in the profile data authentication program, then the method further comprises:
receiving a data authentication request from the acceptor server plug-in;
sending the data authentication request to the access control server;
receiving a data authentication response from the access control server; and
sending the data authentication response to the acceptor server plug-in.

6. The method of claim 5 wherein the presenter is a consumer, the access control server is operated by a bank, and the acceptor server plug-in is operated by a merchant.

7. The method of claim 5 wherein the data authentication request and response messages pass through the device operated by the presenter.

8. The method of claim 7 , further comprising initiating a payment transaction of the presenter, after sending the data authentication response to the acceptor server plug-in by the directory server.

9. A system comprising:
a directory server that performs operations including:
receiving a service enrollment request message from an acceptor server plug-in that received form data supplied by a presenter including an address of the presenter, the service enrollment request message requesting verification that the presenter is enrolled in a profile data authentication program, wherein the service enrollment request message comprises a program identity number,
sending the service enrollment request message to an access control server storing profile data of the presenter including the address of the presenter,
receiving a service enrollment response message indicating that the presenter is enrolled in the profile data authentication program,
sending the service enrollment response message to the acceptor server plug-in,
determining that the program identity number is within a range of numbers associated with the access control server, wherein the sending of the service enrollment request message to the access control server is performed in response to the determining that the program identity number is within the range of numbers associated with the access control server; and

an acceptor server comprising an acceptor server plug-in configured to:
in response to receiving the service enrollment response message, send a data authentication request message to the access control server via a device of the presenter, the data authentication request message including the form data supplied by the presenter including the address of the presenter, and
receive a response to the data authentication request message from the device operated by the presenter.

10. The system of claim 9 further comprising the access control server, wherein the access control server comprises a presenter file database.

11. The system of claim 9 , further comprising:
the device operated by the presenter, wherein the device is configured to:
receive a data authentication request from the acceptor server plug-in.

12. The system of claim 9 , further comprising:
the device operated by the presenter, wherein the device is configured to:
receive a data authentication request from the acceptor server plug-in; and
send the data authentication request to the access control server.

13. The system of claim 9 , further comprising:
the device operated by the presenter, wherein the device is configured to:
receive a data authentication request from the acceptor server plug-in;
send the data authentication request to the access control server;
receive a data authentication response from the access control server; and
send the data authentication response to the acceptor server plug-in.

14. The system of claim 13 wherein the presenter is a consumer, the access control server is operated by a bank, and the acceptor server plug-in is operated by a merchant.

Assignees

• Dominguez Benedicto H
• Manessis Thomas J
• Rutherford Melody L
• Salvatori Sandra
• Roth Janet T
• Visa Int Service Ass

Inventors

• Dominguez Benedicto H
• Manessis Thomas J
• Rutherford Melody L
• Salvatori Sandra
• Roth Janet T

Classifications

• G06Q20/40

  Authorisation, e.g. identification of payer or payee, verification of customer or shop credentials; Review and approval of payers, e.g. check credit lines or negative lists · CPC title

• G06Q20/40975

  using encryption therefor · CPC title

• G06Q20/02

  involving a neutral party, e.g. certification authority, notary or trusted third party [TTP] · CPC title

• G06F21/33

  using certificates · CPC title

• G06Q20/4014

  Identity check for transactions · CPC title