Official vetting using composite trust value of multiple confidence levels based on linked mobile identification credentials

Patent metadata

Field	Value
Publication number	US-11580559-B2
Application number	US-202117383151-A
Country	US
Kind code	B2
Filing date	Jul 22, 2021
Priority date	Jul 10, 2020
Publication date	Feb 14, 2023
Grant date	Feb 14, 2023

Abstract

In an example, a subject using a user mobile-identification-credential device (UMD) requests vetting by a vetting system, which receives verified subject information associated with a level-n mobile identification credential (MIC-n) that UMD received from a level-n authorizing party system (APS-n). MIC-n is linked to lower level MIC-0 to MIC-(n−1). The vetting system, as level-n relying party system (RPS-n), uses the verified subject information associated with the linked MIC-0 to MIC-n to verify or not verify the identity of the subject, develops an identity profile of the subject, and determines a vetting result of the subject by calculating a composite trust score based on MIC trust values for the multiple levels of MIC. MIC-i (i=1 to n) is linked to MIC-(i−1) which UMD received from APS-(i−1), and APS-i is RPS-(i−1) which verified the identity of the subject using verified subject information associated with MIC-(i−1), such that MIC-0 to MIC-n are linked.

First claim

What is claimed is:

1. A method for vetting an individual as a subject to be vetted, the method comprising:
receiving, by a vetting system of a vetting service, a vetting request from a subject device of the subject;
sending, by the vetting system to the subject device, a request for identification information of the subject;
receiving, by the vetting system, part or all of subject information associated with a level-n mobile identification credential (MIC-n) which the subject device received from a level-n authorizing party system (APS-n), the subject having consented to release the part or all of subject information to the vetting system, the part or all of subject information having been verified, the MIC-n being linked to lower level mobile identification credentials from MIC-0 to MIC-(n−1);
using, by the vetting system as a level-n relying party system (RPS-n), the verified part or all of subject information associated with the linked MIC-0 to MIC-n to verify or not verify the identity of the subject;
developing an identity profile of the subject, by the vetting system, based on verifying or not verifying the identity of the subject using the verified part or all of subject information associated with the linked MIC-0 to MIC-n; and
determining a vetting result of the subject, by the vetting system, based on the identity profile, the determining including calculating a composite trust score based on MIC trust values for the multiple levels of MIC from MIC-0 to MIC-n, deciding that the subject passes the vetting when the calculated composite trust score is at or above a preset threshold, and deciding that the subject does not pass the vetting when the calculated composite trust score is below the preset threshold;
MIC-i (i=1 to n) being linked to MIC-(i−1) which the subject device received from APS-(i−1), and the APS-i being RPS-(i−1) which verified the identity of the subject using verified part or all of subject information associated with the MIC-(i−1), with MIC-0 to MIC-n from level-0 to level-n being linked; and
the subject information associated with the MIC-n including the subject information associated with MIC-0 to MIC-(n−1) by virtue of a linked status of MIC-0 to MIC-n;
wherein receiving the verified part or all of subject information comprises:
receiving, by the vetting system from the subject device, a token specifying the part or all of subject information which the subject has consented to release to the vetting system;
sending, by the vetting system to the APS-n, the received token, which is to be verified by the APS-n with another token sent from the subject device to the APS-n;
when the tokens are received by the APS-n within a preset timeframe and are verified by the APS-n, receiving, by the vetting system from the APS-n, the verified part or all of subject information; and
when the tokens are not received by the APS-n within the preset timeframe or are not verified by the APS-n, receiving, by the vetting system from the APS-n, a notification to resubmit the request for identification information of the subject.

2. The method of claim 1 , further comprising:
sending, by the vetting system to the subject device, a request for a liveness check;
receiving, (i) by the vetting system, from the subject, liveness check information and evaluating the liveness check information to determine whether the liveness check is valid or invalid, or (ii) by the vetting system, from the APS-n which has evaluated liveness check information received from the subject, a determination by the APS-n as to whether the liveness check is valid or invalid;
developing the identity profile of the subject, by the vetting system, based on verifying or not verifying the identity of the subject using the verified part or all of subject information associated with the linked MIC-0 to MIC-n, when the liveness check is valid; and
denying the vetting request from the subject when the liveness check is invalid.

3. The method of claim 1 , wherein determining the vetting result comprises:
obtaining, by the vetting system, a MIC trust value for each level of MIC from MIC-0 to MIC-n, wherein a higher MIC trust value indicates a higher trust in a category of content of the MIC having the higher MIC trust value;
calculating, by the vetting system, the composite trust score based on the MIC trust value for each level of MIC; and
comparing, by the vetting system, the calculated composite trust score with the preset threshold;
wherein the subject passes the vetting when the calculated composite trust score is at or above the preset threshold and the subject fails the vetting when the calculated composite trust score is below the preset threshold.

4. The method of claim 1 , wherein determining the vetting result comprises:
obtaining, by the vetting system, a MIC trust value for each level of MIC from MIC-0 to MIC-n, wherein a higher MIC trust value indicates a higher trust in a category of content of the MIC having the higher MIC trust value;
obtaining, by the vetting system, an APS confidence coefficient for each level of APS from APS-0 to APS-n, wherein a higher APS confidence coefficient indicates a higher confidence in the authorizing party associated with the higher APS confidence coefficient;
calculating, by the vetting system, the composite trust score based on the MIC trust value for each level of MIC, weighted by a corresponding APS confidence coefficient at a corresponding level of APS, for the part of all subject information associated with the linked MIC-0 to MIC-n; and
comparing, by the vetting system, the calculated composite trust score with the preset threshold;
wherein the subject passes the vetting when the calculated composite trust score is at or above the preset threshold and the subject fails the vetting when the calculated composite trust score is below the preset threshold.

5. The method of claim 1 , wherein determining the vetting result comprises:
obtaining, by the vetting system, a MIC trust value for each level of MIC from MIC-0 to MIC-n, wherein a higher MIC trust value indicates a higher trust in a category of content of the MIC having the higher MIC trust value;
obtaining, by the vetting system, a collection method confidence coefficient for each method of collecting a corresponding part of the subject information, wherein a higher collection method confidence coefficient indicates a higher confidence in the collection method associated with the higher collection method confidence coefficient;
calculating, by the vetting system, the composite trust score based on the MIC trust value for each level of MIC, weighted by a corresponding collection method confidence coefficient for the corresponding part, for the part of all subject information associated with the linked MIC-0 to MIC-n; and
comparing, by the vetting system, the calculated composite trust score with the preset threshold;
wherein the subject passes the vetting when the calculated composite trust score is at or above the preset threshold and the subject fails the vetting when the calculated composite trust score is below the preset threshold.

6. The method of claim 1 , wherein determining the vetting result comprises:
obtaining, by the vetting system, a MIC trust value for each level of MIC from MIC-0 to MIC-n, wherein a higher MIC trust value indicates a higher trust in a content of the MIC having the higher MIC trust value;
obtaining, by the vetting system, an APS confidence coefficient for each level of APS from APS-0 to APS-n, wherein a higher APS confidence coefficient indicates a higher confidence in the authorizing party associated with the higher APS confidence coefficient;
obtaining, by the vetting system, a collection method confidence coefficient for each method of collecting a correspond

Assignees

• The Government Of The Us Secretary Of Homeland Security

Inventors

• Ellison Chang
• Biegger Kelli L
• Boyd Daniel A
• Gutierrez Brandon P
• Lim Jason

Classifications

• H04L9/3213

  using tickets or tokens, e.g. Kerberos (network architectures or network communication protocols for entities authentication using tickets in a packet data network H04L63/0807) · CPC title

• G06Q30/018 Primary

  Certifying business or products · CPC title

• H04W12/06

  Authentication · CPC title

• H04L9/3242

  involving keyed hash functions, e.g. message authentication codes [MACs], CBC-MAC or HMAC · CPC title