Identity verification services using private data

Patent metadata

Field	Value
Publication number	US-9590969-B2
Application number	US-201414208779-A
Country	US
Kind code	B2
Filing date	Mar 13, 2014
Priority date	Mar 13, 2014
Publication date	Mar 7, 2017
Grant date	Mar 7, 2017

Abstract

A method includes receiving a request, from a client, to verify that an operator of the client is a purported individual. The request includes a personal identifier associated with the purported individual. The personal identifier corresponds to an account established by the purported individual. The account is provided by a cloud service provider. The method also includes transmitting the personal identifier to the cloud service provider. The method further includes, in response to transmitting the personal identifier, receiving private data indicative of the purported individual's usage of the account. The method still further includes creating an identity assessment based on the private data; The method even further includes receiving an evaluation of the identity assessment from the operator of the client. The method additionally includes determining, based on the evaluation of the identity assessment, whether the operator of the client is the purported individual.

First claim

What is claimed is:

1. A method, comprising:
receiving a request, from a client, to verify that an operator of the client is a purported individual, the request comprising a personal identifier associated with the purported individual, wherein the personal identifier corresponds to an account established by the purported individual, the account provided by a first cloud service provider;
transmitting the personal identifier to the first cloud service provider;
in response to transmitting the personal identifier, receiving from the first cloud service provider private data indicative of the purported individual's usage of the account, wherein the private data comprises a plurality of private interactions of the purported individual with a second cloud service provider;
using the private data to create a generalization about the preferences of the purported individual based on the plurality of private interactions;
creating an identity assessment based on the private data, the identity assessment including the generalization;
receiving an evaluation of the identity assessment from the operator of the client, the evaluation including an identification of the generalization by the operator of the client;
determining, based on the evaluation of the identity assessment, whether the operator of the client is the purported individual;
in response to determining that the operator of the client is the purported individual,
granting the operator access to features of the first cloud service provider in accordance with the policies of the first cloud service provider.

2. The method of claim 1 , further comprising:
determining recent account activity of the purported individual using the private data, wherein the identity assessment comprises a question regarding the recent account activity of the purported individual.

3. The method of claim 1 , further comprising:
accessing a public record database to obtain public records associated with the purported individual, wherein the identity assessment is created further based on the public data.

4. The method of claim 1 , wherein the cloud service provider provides a commercial computer backup service, wherein the private data is further indicative of documents stored in a memory of the purported individual's computer; and
wherein the evaluation of the identity assessment is automatically completed by a program.

5. The method of claim 1 , further comprising:
determining a preferred music genre of the purported individual based on the private data, wherein the cloud service provider provides a music streaming service.

6. The method of claim 1 , wherein the personal identifier is a social security number of the purported individual.

7. A computer configured to access a storage device, the computer comprising:
a processor; and
a non-transitory, computer-readable storage medium storing computer-readable instructions that when executed by the processor cause the computer to perform:
receiving a request, from a client, to verify that an operator of the client is a purported individual, the request comprising a personal identifier associated with the purported individual, wherein the personal identifier corresponds to an account established by the purported individual, the account provided by a first cloud service provider;
transmitting the personal identifier to the first cloud service provider;
in response to transmitting the personal identifier, receiving from the first cloud service provider private data indicative of the purported individual's usage of the account, wherein the private data comprises a plurality of private interactions of the purported individual with a second cloud service provider;
using the private data to create a generalization about the preferences of the purported individual based on the plurality of private interactions;
creating an identity assessment based on the private data, the identity assessment including the generalization;
receiving an evaluation of the identity assessment from the operator of the client, the evaluation including an identification of the generalization by the operator of the client;
determining, based on the evaluation of the identity assessment, whether the operator of the client is the purported individual;
in response to determining that the operator of the client is the purported individual:
granting the operator access to services of the first cloud service provider in accordance with the policies of the first cloud service provider.

8. The computer of claim 7 , wherein the computer-readable instructions further cause the computer to perform:
determining recent account activity of the purported individual using the private data, wherein the identity assessment comprises a question regarding the recent account activity of the purported individual.

9. The computer of claim 7 , wherein the computer-readable instructions further cause the computer to perform:
accessing a public record database to obtain public records associated with the purported individual, wherein the identity assessment is created further based on the public data.

10. The computer of claim 7 , wherein the first cloud service provider provides a commercial computer backup service, wherein the private data is further indicative of documents stored in a memory of the purported individual's computer; and
wherein the evaluation of the identity assessment is automatically completed by a program.

11. The computer of claim 7 , wherein the computer-readable instructions further cause the computer to perform:
determining a preferred music genre of the purported individual based on the private data, wherein the first cloud service provider provides a music streaming service.

12. The computer of claim 7 , wherein the personal identifier is a social security number of the purported individual.

13. A computer program product comprising:
a non-transitory computer-readable storage medium having computer-readable program code embodied therewith, the computer-readable program code comprising:
computer-readable program code configured to receive a request, from a client, to verify that an operator of the client is a purported individual, the request comprising a personal identifier associated with the purported individual, wherein the personal identifier corresponds to an account established by the purported individual, the account provided by a first cloud service provider;
computer-readable program code configured to transmit the personal identifier to the cloud service provider;
computer-readable program code configured to, in response to transmitting the personal identifier, receive from the first cloud service provider private data indicative of the purported individual's usage of the account, wherein the private data comprises a plurality of private interactions of the purported individual with a second cloud service provider;
computer-readable program code configured to use the private data to create a generalization about the purported individual's preferences based on the plurality of private interactions;
computer-readable program code configured to create an identity assessment based on the private data, the identity assessment including the generalization;
computer-readable program code configured to receive an evaluation of the identity assessment from the operator of the client, the evaluation including an identification of the generalization by the operator of the client;
computer-readable program code configured to determine, based on the evaluation of the identity assessment, whether the operator of the client is the purported individual; and
computer-reada

Assignees

• Reno James Donald
• Ca Inc

Inventors

• Reno James Donald

Classifications

• G06F21/316

  by observing the pattern of computer usage, e.g. typical user behaviour · CPC title

• H04L63/08 Primary

  for authentication of entities (cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32) · CPC title