System for secure verification of identity data

Patent metadata

Field	Value
Publication number	US-2019044917-A1
Application number	US-201715669437-A
Country	US
Kind code	A1
Filing date	Aug 4, 2017
Priority date	Aug 4, 2017
Publication date	Feb 7, 2019
Grant date	—

Abstract

Embodiments of the present invention provide a system for secure verification of identity data. A request for verification of a customer for a client's product or service is received, the request including a baseline set of customer information. This received baseline set of customer information is compared to customer information stored on a private block chain network to determine whether the received baseline set of customer information matches the stored information for the same customer. If there is a match, a virtual customer key is generated or copied from the private block chain network and transmitted to a client system. The client system can then provide subsequent requests for customer identity verification or additional information about that customer by presenting the virtual key.

First claim

1 . A system for secure verification of identity data, the system comprising:
a memory device; and a processing device operatively coupled to the memory device, wherein the processing device is configured to execute computer-readable program code to:
receive, from a client system associated with a client, a request for verification of a customer for a product or service of the client, wherein the request for verification of the customer comprises baseline customer information;
compare the received baseline customer information to stored baseline customer information on a private block chain network;
determine whether the received baseline customer information matches the stored baseline customer information on the private block chain network; and
in response to determining that the received baseline customer information does not match the stored customer information on the private block chain network, transmit, to the client system, an indication that the request for verification of the customer was not successful; or
in response to determining that the received baseline customer information does match the stored baseline customer information on the private block chain network, transmit, to the client system, a customer key associated with the stored customer information on the private block chain network, wherein the customer key includes an indication that the customer is verified.

2 . The system of claim 1 , wherein the private block chain network comprises a distributed network of nodes managed by one or more entities, wherein the nodes are operatively coupled to each other, have at least a portion of a private block chain ledger, and share information on the ledger through electronic communication.

3 . The system of claim 1 , wherein the processing device is further configured to execute computer-readable program code to:
receive, from the client system, the customer key and an indication that the customer has signed up for the product or service of the client; associate the customer key with the stored customer information on the private block chain network to locate the stored customer information on the private block chain network; and record the indication that the customer has signed up for the product or service of the client in the private block chain network.

4 . The system of claim 1 , wherein the customer key does not comprise personally identifiable information of the customer.

5 . The system of claim 1 , wherein the processing device is further configured to execute computer-readable program code to:
provide a public or semi-private portal to the client system, wherein the portal comprises encrypted information about the customer and a plurality of additional customers; receive the customer key and a request for additional customer information from the client system; and in response to receiving the customer key, decrypt the encrypted information about the customer on the public or semi-private portal for only the client system.

6 . The system of claim 5 , wherein the decrypted portion of the stored customer information is displayed on the public or semi-private portal for only the client system for a predetermined period of time.

7 . The system of claim 1 , wherein the processing device is further configured to execute computer-readable program code to:
receive, from the client system, the customer key and a request for a subsequent verification of the customer; associate the customer key with the stored customer information on the private block chain network to determine whether the stored baseline customer information in the private block chain network has changed since the customer key was transmitted to the client system; and in response to determining that the stored baseline customer information has changed, transmit, to the client system, an indication of a failure of the subsequent verification of the customer; or in response to determining that the stored baseline customer information has not changed, transmit, to the client system, an indication of a success of the subsequent verification of the customer.

8 . The system of claim 1 , wherein the processing device is further configured to execute computer-readable program code to:
receive the customer key and a request for additional customer information from the client system; determine that the additional customer information is associated with an increased level of authorization; request authorization credentials from the client system, wherein the authorization credentials comprise supplemental customer information beyond the baseline customer information or a unique passcode associated with the customer; receive the authorization credentials from the client system; in response to receiving the authorization credentials from the client system, extract, from the private block chain network, the additional customer information; and transmit the extracted additional customer information to the client system.

9 . The system of claim 8 , wherein the extracted additional customer information is encrypted and transmitted to the client system via a secure communication channel.

10 . A computer program product for secure verification of identity data, the computer program product comprising at least one non-transitory computer readable medium comprising computer readable instructions, the instructions comprising instructions for:
receiving, from a client system associated with a client, a request for verification of a customer for a product or service of the client, wherein the request for verification of the customer comprises baseline customer information; comparing the received baseline customer information to stored baseline customer information on a private block chain network; determining whether the received baseline customer information matches the stored baseline customer information on the private block chain network; and in response to determining that the received baseline customer information does not match the stored customer information on the private block chain network, transmitting, to the client system, an indication that the request for verification of the customer was not successful; or in response to determining that the received baseline customer information does match the stored baseline customer information on the private block chain network, transmitting, to the client system, a customer key associated with the stored customer information on the private block chain network, wherein the customer key includes an indication that the customer is verified.

11 . The computer program product of claim 10 , wherein the private block chain network comprises a distributed network of nodes managed by one or more entities, wherein the nodes are operatively coupled to each other, have at least a portion of a private block chain ledger, and share information on the ledger through electronic communication.

12 . The computer program product of claim 10 , wherein the computer readable instructions further comprise instructions for:
receiving, from the client system, the customer key and an indication that the customer has signed up for the product or service of the client; associating the customer key with the stored customer information on the private block chain network to locate the stored customer information on the private block chain network; and recording the indication that the customer has signed up for the product or service of the client in the private block chain network.

13 . The computer program product of claim 10 , wherein the customer key does not comprise personally identifiable information of the customer.

Assignees

• Bank Of America

Inventors

• Mork Phillip Wade
• Church Richard Paxton
• Mohamed Zafer

Classifications

• G06Q2220/00

  Business processing using cryptography · CPC title

• G06F21/64

  Protecting data integrity, e.g. using checksums, certificates or signatures · CPC title

• H04L63/08

  for authentication of entities (cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32) · CPC title

• H04L63/105

  Multiple levels of security · CPC title

• H04L63/0428 Primary

  wherein the data content is protected, e.g. by encrypting or encapsulating the payload · CPC title