Systems and methods for peer-to-peer identity verification

Patent metadata

Field	Value
Publication number	US-12020253-B2
Application number	US-202117372287-A
Country	US
Kind code	B2
Filing date	Jul 9, 2021
Priority date	Apr 30, 2020
Publication date	Jun 25, 2024
Grant date	Jun 25, 2024

Abstract

An identity verification system may include a contactless card comprising a processor and a memory, and one or more applications comprising instructions for execution on one or more devices. The contactless card may be associated with a first user. A first application may be configured to transmit, after entry of the contactless card into a communication field, identity data. A second application may be configured to receive a notification based on an identity verification process. The notification may comprise an option indicative of requested access to specified information about the first user, the option further including a choice to accept or decline access to the specified information about the first user. The first application may be configured to receive the requested access to specified information about the first user based on selection of the option.

First claim

The invention claimed is:

1. An identity verification server, comprising:
a memory; and
a processor, wherein the processor is configured to:
receive, from a first application comprising instructions for execution on a first client device after entry of a contactless card into a communication field generated by the first client device, a request to perform an identity verification process on identity data,
perform the identity verification process,
determine one or more outcomes based on the identity verification process,
generate one or more notifications based on the one or more outcomes, and
transmit, to a second application comprising instructions for execution on a second client device, the one or more notifications, wherein:
the one or more notifications including an option indicative of requested access to shareable information about a first user,
the option includes a choice to accept or decline access to the shareable information,
the requested access to the shareable information is revocable based on one or more permissions, and
the one or more permissions comprise a personally identifiable information restriction, wherein the requested access to the shareable information is revocable if the request includes personally identifiable information, and
wherein the personally identifiable information restriction does not revoke the requested access to the shareable information if the personally identifiable information is at least partially redacted.

2. The identity verification server of claim 1 , wherein the processor is further configured to perform one or more iterations of the identity verification process.

3. The identity verification server of claim 1 , wherein at least one outcome of the one or more outcomes comprises a successful or unsuccessful match between one or more subsets of the identity data and one or more subsets of reference data.

4. The identity verification server of claim 1 , wherein at least one outcome of the one or more outcomes comprises an unsuccessful match between the identity data and reference data.

5. The identity verification server of claim 4 , wherein the at least one outcome triggers a different comparison between the identity data and the reference data.

6. The identity verification server of claim 1 , wherein a pre-verification process is performed prior to display of the one or more notifications.

7. The identity verification server of claim 1 , wherein the one or more notifications enable a response in which additional information is selected for sharing.

8. The identity verification server of claim 1 , wherein selection of the option is associated with a predetermined time duration prior to a timeout of the requested access.

9. The identity verification server of claim 1 , wherein the requested access is revoked based on exceeding a predetermined threshold over a predetermined time.

10. A method of identity verification performed by a server comprising a processor and a memory, the method comprising:
receiving, by the processor from a first application comprising instructions for execution on a first client device after entry of a contactless card into a communication field generated by the first client device, a request to perform an identity verification process on identity data;
performing, by the processor, the identity verification process;
determining, by the processor, one or more outcomes based on the identity verification process;
generating, by the processor, one or more notifications based on the one or more outcomes; and
transmitting, by the processor to a second application comprising instructions for execution on a second client device, the one or more notifications, wherein:
the one or more notifications including an option indicative of requested access to shareable information about a first user,
the option including a choice to accept or decline access to the shareable information,
the requested access to the shareable information is revocable based on one or more permissions, and
a personally identifiable information restriction, wherein the requested access to the shareable information is revocable if the request includes personally identifiable information, and
wherein the personally identifiable information restriction does not revoke the requested access to the shareable information if the personally identifiable information is at least partially redacted.

11. The method of claim 10 , wherein at least one outcome of the one or more outcomes comprises a successful or unsuccessful match between one or more subsets of the identity data and one or more subsets of reference data.

12. The method of claim 10 , wherein at least one outcome of the one or more outcomes comprises an unsuccessful match between the identity data and reference data.

13. The method of claim 12 , wherein the at least one outcome triggers a different comparison between the identity data and the reference data.

14. The method of claim 10 , wherein a pre-verification process is performed prior to display of the one or more notifications.

15. The method of claim 10 , wherein the one or more notifications enable a response in which additional information is selected for sharing.

16. The method of claim 10 , wherein selection of the option is associated with a predetermined time duration prior to a timeout of the requested access.

17. A computer readable non-transitory medium comprising instructions that, when executed by server comprising a processor and a memory, cause the processor to perform procedures comprising:
receiving, from a first application comprising instructions for execution on a first client device after entry of a contactless card into a communication field generated by the first client device, a request to perform an identity verification process on identity data;
performing the identity verification process;
determining one or more outcomes based on the identity verification process;
generating one or more notifications based on the one or more outcomes; and
transmitting, to a second application comprising instructions for execution on a second client device, the one or more notifications, wherein:
the one or more notifications including an option indicative of requested access to shareable information about a first user,
the option including a choice to accept or decline access to the shareable information,
the requested access to shareable information is revocable based on one or more permissions, and
a personally identifiable information restriction, wherein the requested access to the shareable information is revocable if the request includes personally identifiable information, and
wherein the personally identifiable information restriction does not revoke the requested access to the shareable information if the personally identifiable information is at least partially redacted.

18. The computer readable non-transitory medium of claim 17 , wherein:
the one or more permissions further comprise a geographic restriction, and
the geographic restriction comprises a requirement for proximity between the first application and the second application.

19. The computer readable non-transitory medium of claim 17 , wherein the one or more permissions further comprise a requirement for a pre-authorization verification to permit the identity data to include personally identifiable information.

20. The computer readable non-transitory medium of claim 17 , wherein at least one outcome of the one or more outcomes comprises a successf

Assignees

• Capital One Services Llc

Inventors

• Tesser Daniel
• Wieker Jeffrey Carlyle
• De La Rosa Luis

Classifications

• H04L67/104

  Peer-to-peer [P2P] networks · CPC title

• G06Q20/352

  Contactless payments by cards · CPC title

• H04W4/80

  Services using short range communication, e.g. near-field communication [NFC], radio-frequency identification [RFID] or low energy communication · CPC title

• H04L63/0861

  using biometrical features, e.g. fingerprint, retina-scan (cryptographic mechanisms or cryptographic arrangements for entity authentication using biological data H04L9/3231) · CPC title

• H04L63/0838

  using one-time-passwords · CPC title