Method and system for verifying user identity

Patent metadata

Field	Value
Publication number	US-11601430-B2
Application number	US-202117446184-A
Country	US
Kind code	B2
Filing date	Aug 27, 2021
Priority date	May 14, 2018
Publication date	Mar 7, 2023
Grant date	Mar 7, 2023

Abstract

Embodiments disclosed herein generally relate to a system and method of verifying an identity of user. A computing system receives a HTTP request. The HTTP request includes at least a user name and an IP address associated with a router accessed by the remote client device. The computing system parses the HTTP request to extract the user name and the IP address contained therein. The computing system identifies a user account associated with the extracted user name. The computing system identifies an internet service provider associated with the IP address. The computing system transmits a verification message to the third party service provider. The computing system receives a confirmation message from the third party service provider. The computing system increases a level of confidence in an identification verification process based on the confirmation.

First claim

What is claimed:

1. A method of increasing confidence in verifying an identity of a user without user interaction, comprising:
receiving, by a computing system, a request to further authenticate a user from a remote server, the request responsive to the user initiating a multi-factor authentication process with the remote server;
identifying, by the computing system, at least a first item of identification information and an internet protocol (IP) address associated with a client device of the user;
identifying, by the computing system, a third party internet service provider associated with the IP address;
transmitting, by the computing system, a verification message to the third party internet service provider, the verification message comprising at least the first item of identification information associated with the user;
receiving, by the computing system, a confirmation message from the third party internet service provider indicative of a verification of an identity of the user; and
based on the confirmation message, authenticating, by the computing system, the user with the remote server.

2. The method of claim 1 , wherein transmitting, by the computing system, the verification message to the third party internet service provider comprises:
transmitting a current location of the client device.

3. The method of claim 1 , wherein the first item of identification information comprises at least a name, address, social security number, telephone number, email address, date of birth, and credit card information.

4. The method of claim 1 , wherein the first item of identification information includes a name of an authorized user to a primary user of an account with the third party internet service provider.

5. The method of claim 1 , further comprising:
receiving, by the computing system, a second request to further authenticate the user from a second remote server;
identifying, by the computing system, at least the first item of identification information and the IP address associated with the client device of the user; and
based on the identifying, authenticating, by the computing system, the user with the second remote server.

6. The method of claim 1 , further comprising:
receiving, by the computing system, a second request to further authenticate the user from a second remote server;
identifying, by the computing system, at least the first item of identification information and a second IP address associated with the client device of the user, wherein the second IP address is different from the IP address;
identifying, by the computing system, a second third party internet service provider associated with the second IP address;
transmitting, by the computing system, a second verification message to the third party internet service provider, the verification message comprising at least the first item of identification information associated with the user;
receiving, by the computing system, a second confirmation message from the second third party internet service provider indicative of a second verification of the identity of the user; and
based on the confirmation message, authenticating, by the computing system, the user with the second remote server.

7. The method of claim 1 , further comprising:
receiving, by the computing system, a second request to further authenticate the user from the remote server;
identifying, by the computing system, at least the first item of identification information and a second IP address associated with the client device of the user, wherein the second IP address is different from the IP address;
identifying, by the computing system, a second third party internet service provider associated with the second IP address;
transmitting, by the computing system, a second verification message to the third party internet service provider, the verification message comprising at least the first item of identification information associated with the user;
receiving, by the computing system, a second confirmation message from the second third party internet service provider indicative of a second verification of the identity of the user; and
based on the confirmation message, authenticating, by the computing system, the user with the remote server.

8. A system, comprising:
a processor; and
a memory having programming instructions stored thereon, which, when executed by the processor, causes the system to perform operations:
receiving a request to further authenticate a user from a remote server, the request responsive to the user initiating a multi-factor authentication process with the remote server;
identifying at least a first item of identification information and an internet protocol (IP) address associated with a client device of the user;
identifying a third party internet service provider associated with the IP address;
transmitting a verification message to the third party internet service provider, the verification message comprising at least the first item of identification information associated with the user;
receiving a confirmation message from the third party internet service provider indicative of a verification of an identity of the user; and
based on the confirmation message, authenticating the user with the remote server.

9. The system of claim 8 , wherein transmitting the verification message to the third party internet service provider comprises:
transmitting a current location of the client device.

10. The system of claim 8 , wherein the first item of identification information comprises at least a name, address, social security number, telephone number, email address, date of birth, and credit card information.

11. The system of claim 8 , wherein the first item of identification information includes a name of an authorized user to a primary user of an account with the third party internet service provider.

12. The system of claim 8 , wherein the operations further comprise:
receiving a second request to further authenticate the user from a second remote server;
identifying at least the first item of identification information and the IP address associated with the client device of the user; and
based on the identifying, authenticating the user with the second remote server.

13. The system of claim 8 , wherein the operations further comprise:
receiving a second request to further authenticate the user from a second remote server;
identifying at least the first item of identification information and a second IP address associated with the client device of the user, wherein the second IP address is different from the IP address;
identifying a second third party internet service provider associated with the second IP address;
transmitting a second verification message to the third party internet service provider, the verification message comprising at least the first item of identification information associated with the user;
receiving a second confirmation message from the second third party internet service provider indicative of a second verification of the identity of the user; and
based on the confirmation message, authenticating the user with the second remote server.

14. The system of claim 8 , wherein the operations further comprise:
receiving a second request to further authenticate the user from the remote server;
identifying at least the first item of identification information and a second IP address associated with the client device of the user, wherein the second IP address is different from the IP address;
identifying a second third party internet service provider associated with the second IP address;
transmi

Assignees

• Capital One Services Llc

Inventors

• Fox Ryan
• Thompson Matthew

Classifications

• H04L63/0876

  based on the identity of the terminal or configuration, e.g. MAC address, hardware or software configuration or device fingerprint · CPC title

• H04L69/22

  Parsing or analysis of headers · CPC title

• H04L63/0884 Primary

  by delegation of authentication, e.g. a proxy authenticates an entity to be authenticated on behalf of this entity vis-à-vis an authentication entity · CPC title

• H04L63/12

  Applying verification of the received information (cryptographic mechanisms or cryptographic arrangements for data integrity or data verification H04L9/32) · CPC title

• H04L67/02 Primary

  based on web technology, e.g. hypertext transfer protocol [HTTP] · CPC title