Remote identity verification and dynamic storage of identity data

Patent metadata

Field	Value
Publication number	US-12593203-B2
Application number	US-202318296547-A
Country	US
Kind code	B2
Filing date	Apr 6, 2023
Priority date	Apr 6, 2023
Publication date	Mar 31, 2026
Grant date	Mar 31, 2026

Abstract

Systems and methods are provided to offer security or trust services to entities over a network. A method, according to one implementation, includes the step of receiving, from a representative of an enterprise, a selection of a group of users to be assigned one or more authorities within the enterprise. The method also includes the step of remotely accessing one or more identity information repositories associated with the enterprise to obtain records pertaining to each user of the group. Also, the method includes the step of using the records to onboard the group of users, whereby onboarding the group includes assigning the one or more authorities to each user of the group.

First claim

What is claimed is:

1 . A Trust Service Provider (TSP) comprising:
a processing device; and a memory device configured to store a computer program having logic that enables the processing device to execute the steps of
receiving, from a representative of an enterprise, a selection of a group of users to be assigned one or more authorities within the enterprise,
remotely accessing one or more identity information repositories associated with the enterprise to obtain records pertaining to each user of the group, wherein the records are obtained by searching through the one or more identity information repositories to gather a name and other identifying information associated with each user, whereby the name and identifying information are used for performing a Remote Identity Verification (RIV) process to allow the user to perform an action that falls within the one or more authorities assigned to the user, and
using the records to onboard the group of users, whereby onboarding the group includes assigning the one or more authorities to each user of the group, and wherein the selection of the group of users includes configuring a policy engine by the representative, the policy engine being adapted to obtain the records pertaining to each user of the group and to automatically capture changes in the records over time,
wherein the enterprise includes multiple identity information repositories located in different locations, and wherein onboarding each user further includes:
extracting data from a government-issued ID provided by the user;
determining, based on the extracted data, an issuer of the government-issued ID and a location of the issuer;
searching location information regarding the multiple identity information repositories;
selecting one of the multiple identity information repositories that is either in a same territory as the issuer or is closest to the issuer; and
storing the name and other identifying information of the user in the selected identity information repository.

2 . The TSP of claim 1 , wherein the logic further enables the processing device to perform an identity verification process, wherein, for each user, the identity verification process includes the steps of:
a) receiving input from the respective user to verify the identity of the user, and b) when the identity of the user is verified, enabling the user to perform an action that falls within the one or more authorities assigned to the user.

3 . The TSP of claim 2 , wherein receiving input from the user includes receiving one or more scans of the government-issued ID and one or more visual images of the user captured by a processing device.

4 . The TSP of claim 3 , wherein the one or more visual images include a video of the user when both the processing device and the user's head are in motion.

5 . The TSP of claim 3 , wherein the government-issued ID is a driver's license, a passport, or a national identity card.

6 . The TSP of claim 2 , wherein performing the action includes electronically signing a document.

7 . The TSP of claim 1 , wherein the selection of the group of the users includes:
a) allowing the representative to configure or choose a policy engine adapted to obtain the records pertaining to each user of the group; and b) scheduling the policy engine to automatically capture changes in the records.

8 . A non-transitory computer-readable medium configured to store computer logic having instructions that, when executed, enable a processing device to:
receive, from a representative of an enterprise, a selection of a group of users to be assigned one or more authorities within the enterprise, remotely access one or more identity information repositories associated with the enterprise to obtain records pertaining to each user of the group, wherein the records are obtained by searching through the one or more identity information repositories to gather a name and other identifying information associated with each user, whereby the name and identifying information are used for performing a Remote Identity Verification (RIV) process to allow the user to perform an action that falls within the one or more authorities assigned to the user, and use the records to onboard the group of users, whereby onboarding the group includes assigning the one or more authorities to each user of the group, and wherein the selection of the group of users includes configuring a policy engine by the representative, the policy engine being adapted to obtain the records pertaining to each user of the group and to automatically capture changes in the records over time, wherein the enterprise includes multiple identity information repositories located in different locations, and wherein onboarding each user further includes:
extracting data from a government-issued ID provided by the user;
determining, based on the extracted data, an issuer of the government-issued ID and a location of the issuer;
searching location information regarding the multiple identity information repositories;
selecting one of the multiple identity information repositories that is either in a same territory as the issuer or is closest to the issuer; and
storing the name and other identifying information of the user in the selected identity information repository.

9 . The non-transitory computer-readable medium of claim 8 , wherein the instructions further enable the processing device to perform an identity verification process, wherein, for each user, the identity verification process includes the steps of:
a) receiving input from the respective user to verify the identity of the user, and b) when the identity of the user is verified, enabling the user to perform an action that falls within the one or more authorities assigned to the user.

10 . The non-transitory computer-readable medium of claim 9 , wherein receiving input from the user includes receiving one or more scans of government-issued ID and one or more visual images of the user captured by a processing device.

11 . The non-transitory computer-readable medium of claim 10 , wherein the one or more visual images include a video of the user when both the processing device and the user's head are in motion.

12 . The non-transitory computer-readable medium of claim 10 , wherein the government-issued ID is a driver's license, a passport, or a national identity card.

13 . The non-transitory computer-readable medium of claim 9 , wherein performing the action includes electronically signing a document.

14 . The non-transitory computer-readable medium of claim 8 , wherein the selection of the group of the users includes:
a) allowing the representative to configure or choose a policy engine adapted to obtain the records pertaining to each user of the group; and b) schedule the policy engine to automatically capture changes in the records.

15 . A method comprising steps of:
receiving, from a representative of an enterprise, a selection of a group of users to be assigned one or more authorities within the enterprise, remotely accessing one or more identity information repositories associated with the enterprise to obtain records pertaining to each user of the group, wherein the records are obtained by searching through the one or more identity information repositories to gather a name and other identifying information associated with each user, whereby the name and identifying information are used for performing a Remote Identity Verification (RIV) process to allow the user to perform an action that falls within the one or more authorities assigned to the user, and using

Assignees

• Digicert Inc

Inventors

• Sabin Jason Allen
• Hojjati Avesta

Classifications

• H04W12/69

  Identity-dependent · CPC title

• H04W8/22

  Processing or transfer of terminal data, e.g. status or physical capabilities · CPC title

• H04W12/02 Primary

  Protecting privacy or anonymity, e.g. protecting personally identifiable information [PII] · CPC title