Identity verification system
AssigneeQ5ID, Inc.
InventorsSteven Allen Larson, Dominic John O'Dierno, Mark Robert Johnson
Life of this patent
Estimating the term…
Loading patent…
AssigneeQ5ID, Inc.
InventorsSteven Allen Larson, Dominic John O'Dierno, Mark Robert Johnson
Estimating the term…
Methods, systems, and storage media are described for identity management and identity verification is provided in which users authenticate their identities during an enrollment process, and may access and modify their identity information via a secure portal. The enrollment process includes collecting various identifying data and biometric data of a user. A live interview portion during the enrollment process is used to check the liveness and verify the collected identifying data and biometric data. Other embodiments may be described and/or claimed.
A computer system to provide identity verification service, comprising:
One or more non-transitory computer-readable media (NTCRM) comprising instructions, wherein execution of the instructions by one or more processors of a computer system is to cause the computer system to:
Dependencies are inferred from the claim text.
Drawings are temporarily unavailable. Open the PDF at USPTO
User authentication: using biometric data, e.g. fingerprints, iris scans or voiceprints
For authentication of entities: using biometrical features, e.g. fingerprint, retina-scan
Arrangements for executing specific programs: execution arrangements for user interfaces
Authentication, i.e. establishing the identity or authorisation of security principals: user authentication
About 12 years 7 months of term left · ends 17 May 2039 (estimated)
The present disclosure generally relates to the fields of computing, and in particular, to identity verification and information security technologies.
The background description provided herein is for the purpose of generally presenting the context of the disclosure. Unless otherwise indicated herein, the materials described in this section are not prior art to the claims in this application and are not admitted to be prior art by inclusion in this section.
Identity verification services are often used by businesses and/or government agencies to ensure that information provided by users is associated with the identity of a real person. Businesses or government agencies may verify the identity of the real person using identity information indicated by physical identifying documents (e.g., driver's license, passport, identity cards, etc.), or they may verify identity information against authoritative sources (e.g., credit bureaus, government database(s), corporate database(s), etc.).
Embodiments will be readily understood by the following detailed description in conjunction with the accompanying drawings. To facilitate this description, like reference numerals designate like structural elements. Embodiments are illustrated by way of example, and not by way of limitation, in the figures of the accompanying drawings.
FIG. 1 depicts an environment in which various embodiments discussed herein may be practiced.
FIG. 2A illustrates an example data flow of an enrollment process according to various embodiments. FIG. 2B illustrates another example data flow of an enrollment process according to various embodiments.
Embodiments described herein are related to identity verification and information security technologies. Identity verification services may utilize identity information from physical identifying documents, images or videos of physical identifying documents, authentication or authorization credentials, identity scores, biometric data, and/or knowledge-based authentication (KBA) data to authenticate a user's identity. Conventional identity verification systems require users to provide identity information electronically by submitting identity information to an authentication mechanism via user interface(s). In many cases, users have to enter their identity information into a web form, or scan or otherwise capture biometric data using a camera or other like device. Additionally, many service providers require their users to enter/scan and submit user identifying information in order for those users to access their platforms. This means that users often have to enter/scan and submit the same identity information to multiple service providers. Requiring users to provide identity information to individual service providers not only consumes a significant amount of the users' time, but also results in increased computational, storage, and network resource consumption. Furthermore, repeatedly sending identity information to different service providers, each of which may implement different security technologies, may increase the likelihood that the identity information is stolen in transit or due to security failures at a service provider system.
In disclosed embodiments, an identity management system is provided in which users authenticate their identities during an enrollment process, and may access and modify their identity information via a secure portal. The identity management system performs “identity enrollment,” which is a holistic approach to enrolling users into the identity management system to secure their identities and to verify their identity in the process. In embodiments, individual users may own or otherwise be associated with an identity profile (also referred to as a “user profile”) that describes the depth and quality of the individual users' identity. Individual users can update and improve the quality of the collected identifying information using the secure portal. In one example, users may provide updated or new biographic or demographic data as new life events take place (e.g., name changes due to marriage, new addresses when a user moves to a residence, etc.). In another example, users may provide updated biometric data as their appearance changes (e.g., due to aging, dying hair, new piercings; scars on face, hands, or other body parts, new acquired tattoos; etc.). The secure portal also allows users to provide new updated or new biometric data as the system evolves with new biometric capturing technologies. The secure enrollment portal also allows the users to review and edit information and collected data (or data being collected) for accuracy. The secure enrollment portal also allows the users to review potential opportunities with third party service provider platforms to participate in offers or opportunities being provided by those platforms, or to opt-in to data collection. In some embodiments, the secure portal indicates when a user's identity has been tracked or when an authentication has been attempted. In these ways, individual user may update and enhance the completeness of their identity profiles for a more seamless identity verification process when attempting to obtain products or services from third party service providers, and for enhancing user privacy and preventing identity theft or other malicious identity-based abuses.
In various embodiments, a live video interview takes place during an enrollment process to assess both true identity and user liveness. The live interview may be performed by a human interviewer or an autonomous software agent, such as a virtual assistant, chatbot, artificial intelligence (AI) agent, and/or the like. During the live interview, biometric data (e.g., facial data, hand/palm data, voice data, etc.) is/are collected and/or compared with previously collected biometric data for identity validation and authentication. For example, images of an applicant captured during the enrollment process may be cross checked using various algorithms to check against images captured during the on-screen enrollment, user-supplied selfie images, image(s) from scanned identity documents, and/or screenshot(s) captured during the live interview. The biometric data collected during the live interview may also be compared with other collected data such as the validated authentication identity documents (e.g., driver's license photo, passport photo, etc.) and/or prior collected biometric data.