System and method for providing a high-value identity

Patent metadata

Field	Value
Publication number	US-9734340-B1
Application number	US-201313856219-A
Country	US
Kind code	B1
Filing date	Apr 3, 2013
Priority date	Apr 3, 2013
Publication date	Aug 15, 2017
Grant date	Aug 15, 2017

Abstract

Methods include receiving a request for verified data from a requesting entity. Methods also include requesting, from a user, consent to obtain user data corresponding to the user. Methods further include receiving the consent and obtaining preliminary data corresponding to the user. Methods also include transmitting a message to a user data provider in response to receiving the consent, in which the message comprises the preliminary data and a request for the user data. Methods also include receiving response data, wherein the response data corresponds to the user data. Methods further include analyzing the response data and determining the verified data in response to analyzing the response data. Methods also include providing the verified data to the requesting entity.

First claim

What is claimed is:

1. A method comprising:
receiving, from a requesting commercial entity, a request to verify whether personal information of a user satisfies particular criteria;
in response to receiving the request to verify whether personal information of the user satisfies the particular criteria, requesting consent from the user to obtain, from a third party, the personal information, wherein requesting consent from the user comprises transmitting a first message to the user;
receiving the consent from the user in response to the first message;
obtaining preliminary data corresponding to the user;
transmitting a second message to a plurality of user data providers in response to receiving the consent, wherein the second message comprises the preliminary data and a request for the personal information;
receiving response data comprising the personal information, from two or more of the plurality of user data providers, the response data from the two or more of the plurality of user data providers comprising user data linked to the preliminary data;
analyzing, using a hardware processor, the response data;
determining, using the hardware processor, whether the personal information of the user satisfies the particular criteria, in response to analyzing the response data; and
in response to determining that the personal information of the user satisfies the particular criteria, verifying, to the commercial entity, that the personal information satisfies the particular criteria, without providing the personal information to the commercial entity,
wherein analyzing the response data comprises:
obtaining reputation data and aging data corresponding to the two or more of the plurality of user data providers;
determining a validity factor corresponding to each of the two or more of the plurality of user data providers based on the reputation data and the aging data;
providing the validity factor corresponding to each of the two or more of the plurality of user data providers to the commercial entity;
determining whether the validity factor corresponding to at least one of the two or more of the plurality of user data providers is greater than a predetermined threshold; and
prioritizing the response data based on which user data provider of the two or more of the plurality of user data providers has a higher validity factor.

2. The method of claim 1 , wherein the personal information comprises at least one of: identity data and attribute data.

3. The method of claim 1 , wherein the plurality of user data providers is selected from a group comprising: a payments service provider, a banking provider, a government entity, a social networking service, a credit agency, and an employer.

4. The method of claim 1 , further comprising providing a name corresponding to at least one of the two or more of the plurality of user data providers to the commercial entity.

5. The method of claim 1 , further comprising:
using the preliminary data to identify internal data corresponding to the personal information;
and analyzing the internal data;
wherein verifying that the personal information satisfies the particular criteria comprises verifying that the personal information satisfies the particular criteria in response to analyzing the response data and the internal data.

6. A system comprising:
a first receiving device configured to receive, from a requesting commercial entity, a request to verify whether personal information of a user satisfies particular criteria;
a requesting device configured to, in response to receiving the request to verify whether the personal information of the user satisfies particular criteria, request consent from the user to obtain, from a third party, the personal information, wherein requesting consent from the user comprises transmitting a first message to the user;
a second receiving device configured to receive the consent from the user in response to the first message;
a first obtaining device configured to obtain preliminary data corresponding to the user;
a transmitting device configured to transmit a second message to a plurality of user data providers in response to receiving the consent, the second message comprising the preliminary data and a request for the personal information;
a third receiving device configured to receive response data comprising the personal information, from two or more of the plurality of user data providers, the response data from the two or more of the plurality of user data providers comprising user data linked to the preliminary data;
a first analyzing device configured to analyze the response data;
a first determining device configured to determine whether the personal information of the user satisfies the particular criteria, in response to analyzing the response data;
a first providing device configured to, in response to determining that the personal information of the user satisfies the particular criteria, verify, to the commercial entity, that the personal information satisfies the particular criteria, without providing the personal information to the commercial entity,
a second obtaining device configured to obtain reputation data and aging data corresponding to the two or more of the plurality of user data providers;
a second determining device configured to determine a validity factor corresponding to each of the two or more of the plurality of user data providers based on the reputation data and the aging data; and
a second providing device configured to provide the validity factor corresponding to each of the two or more of the plurality of user data providers to the commercial entity,
wherein the first analyzing device is configured to determine whether the validity factor corresponding to at least one of the two or more of the plurality of user data providers is greater than a predetermined threshold, and
wherein the first analyzing device is configured to prioritize the response data based on which user data provider of the two or more of the plurality of user data providers has a higher validity factor.

7. The system according to claim 6 , wherein the personal information comprises at least one of: identity data and attribute data.

8. The system according to claim 6 , wherein the plurality of user data providers is selected from a group comprising: a payments service provider, a banking provider, a government entity, a social networking service, a credit agency, and an employer.

9. The system of claim 6 , further comprising a third providing device configured to provide a name corresponding to at least one of the two or more of the plurality of user data providers to the commercial entity.

10. The system of claim 6 , further comprising:
an identifying device configured to identify, using the preliminary data, internal data corresponding to the personal information; and
a second analyzing device configured to analyze the internal data;
wherein the first determining device is configured to verify that the personal information satisfies the particular criteria in response to analyzing the response data and the internal data.

11. A computer program product comprising:
a non-transitory computer readable storage medium having computer readable program code embodied therewith, the computer readable program code comprising:
computer readable program code configured to receive, from a requesting commercial entity, a request to verify whether personal information of a user satisfies particular criteria;
computer readable program code configured to, in response to receiving the request to verify whether personal information of a user satisfies particular criteria, transmit to the user a request for

Assignees

• Danielson Debra Jean
• Brown Timothy Gorden
• Broberg Jeffrey C
• Schaefer Walter
• Ca Inc

Inventors

• Danielson Debra Jean
• Brown Timothy Gorden
• Broberg Jeffrey C
• Schaefer Walter

Classifications

• G06F21/45 Primary

  Structures or tools for the administration of authentication · CPC title

• G06F21/60 Primary

  Protecting data · CPC title

• G06F21/6254

  by anonymising data, e.g. decorrelating personal data from the owner's identification · CPC title