# US 11,122,034 B2 · Method and apparatus for an identity assurance score with ties to an ID-less and password-less authentication system > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 11,122,034 B2 - Document ID: US11122034B2 - Status: Granted - Kind: B2 - Application number: 15/970,796 - Filed: 2018-05-03 - Published: 2018-09-06 - Granted: 2021-09-14 - Earliest claimed: 2015-02-24 - Assignees: Nelson A. Cicchitto - Applicants: Nelson A. Cicchitto - Inventors: Nelson A. Cicchitto - Web page: https://patentgrep.com/patent/US11122034B2 ## CPC - H04L 63/083: {using passwords (cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226)} - H04L 63/0815: {providing single-sign-on or federations} - H04W 12/068: {using credential vaults, e.g. password manager applications or one time password [OTP] applications} - H04L 2463/082: applying multi-factor authentication - H04W 12/68: Gesture-dependent or behaviour-dependent - H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M) - H04W: WIRELESS COMMUNICATION NETWORKS (broadcast communication H04H; communication systems using wireless links for non-selective communication, e.g. wireless extensions H04M1/72) ## Abstract A technique is provided by which a user goes to a site and instead of the authentication system of the site going to their own databases to match an ID and password given by the user, because doing so is not secure, the site companies makes a call to an identity assurance score server (with ties to the ID-less and password-less system) and send a parameter such as a number. Then, based on that parameter (e.g., number or score), the identity assurance score server (with ties to the ID-less and password-less system, such as described hereinabove) sends a corresponding login protocol or factors to be satisfied to authenticate the user. ## Claims ### Claim 1 A computer-implemented method, comprising: receiving, at an identity assurance server, a first request initiated from a company server for an identity assurance score corresponding to an entity requesting the company server for access to an asset of the company, wherein the entity is a user and wherein the identity assurance score is computed independently of a device used by the user for requesting access; generating, in response to the request, the identity assurance score and determining, based on the generated identity assurance score, a collection of requirements that the entity must satisfy to access the asset; transmitting by the identity assurance server for delivery to the company server, the identity assurance score and the collection of requirements for the entity to satisfy; receiving, at the identity assurance server and originating from the company server, informational data corresponding to the collection of requirements completed by the entity; confirming, at the identity assurance server, that the received informational data matches data previously saved on a database at the identity assurance server; and notifying the company that the received information data has been confirmed; wherein one or more steps are performed on at least a processor coupled to at least a memory; and wherein a hierarchy of levels comprises the following levels of requirements for granting access to the asset: first level—ID of user and No Password; second level—ID and Password; third level—Description of something the entity knows; fourth level—Description of something the entity has; fifth level—Number of social network connections the entity has; sixth level—Location of the entity; seventh level—One biometric identifier; eighth level—Two biometric identifiers; ninth level—Three biometric identifiers; tenth level—Financial information corresponding to the entity; eleventh level—One health identifier; twelfth level—Second health identifier; and thirteenth level—DNA (Deoxyribonucleic acid) of the entity. ### Claim 2 (depends on 1) The method of claim 1, wherein the asset of the company is any of a computer-related account or service or a room or building under control of the company. ### Claim 3 (depends on 1) The method of claim 1, wherein the identity assurance score is based on a predetermined hierarchy of levels of requirements to be satisfied for the request to be approved. ### Claim 4 (depends on 3) The method of claim 3, wherein the requirements of the level are cumulative, meaning that the identity assurance score causes the requirements for the current level and the previous levels to be checked for satisfaction before approving the request. ### Claim 5 (depends on 3) The method of claim 3, wherein the identity assurance score for the current level does not have to incorporate requirements of any other level of any other identity assurance score before approving the request. ### Claim 6 (depends on 1) The method of claim 1, wherein a biometric identifier is fingerprint or voice of the entity. ### Claim 7 (depends on 6) The method of claim 6, wherein financial information comprises any of: current bank balances; the number of bank accounts; whether the entity is a homeowner; or whether the entity has any personal loans. ### Claim 8 (depends on 7) The method of claim 7, wherein a health identifier is 1 Blood Type; dental information; or type of surgeries. ### Claim 9 An apparatus, comprising: a first receiving processor configured to receive, at an identity assurance server, a first request initiated from a company server for an identity assurance score corresponding to an entity requesting the company server for access to an asset of the company, wherein the entity is a user and wherein the identity assurance score is computed independently of a device used by the user for requesting access; a generating processor configured to generate, in response to the request, the identity assurance score and determine, based on the generated identity assurance score, a collection of requirements that the entity must satisfy to access the asset; a transmitting processor configured to transmit by the identity assurance server for delivery to the company server, the identity assurance score and the collection of requirements for the entity to satisfy; a second receiving processor configured to receive, at the identity assurance server and originating from the company server, informational data corresponding to the collection of requirements completed by the entity; a confirming processor configured to confirm, at the identity assurance server, that the received informational data matches data previously saved on a database at the identity assurance server; a notifying processor configured to notify the company that the received information data has been confirmed; and at least one memory operable to store computer program instructions a by at least one of said processors; wherein a hierarchy of levels comprises the following levels of requirements for granting access to the asset: first level—ID of user and No Password; second level—ID and Password; third level—Description of something the entity knows; fourth level—Description of something the entity has; fifth level—Number of social network connections the entity has; sixth level—Location of the entity; seventh level—One biometric identifier; eighth level—Two biometric identifiers; ninth level—Three biometric identifiers; tenth level—Financial information corresponding to the entity; eleventh level—One health identifier; twelfth level—Second health identifier; and thirteenth level—DNA (Deoxyribonucleic acid) of the entity. ### Claim 10 (depends on 9) The apparatus of claim 9, wherein the asset of the company is any of a computer-related account or service or a room or building under control of the company. ### Claim 11 (depends on 9) The apparatus of claim 9, wherein the identity assurance score is based on a predetermined hierarchy of levels of requirements to be satisfied for the request to be approved. ### Claim 12 (depends on 11) The apparatus of claim 11, wherein the requirements of the level are cumulative, meaning that the identity assurance score causes the requirements for the current level and the previous levels to be checked for satisfaction before approving the request. ### Claim 13 (depends on 11) The apparatus of claim 11, wherein the identity assurance score for the current level does not have to incorporate requirements of any other level of any other identity assurance score before approving the request. ### Claim 14 (depends on 9) The apparatus of claim 9, wherein a biometric identifier is fingerprint or voice of the entity. ### Claim 15 (depends on 14) The apparatus of claim 14, wherein financial information comprises any of: current bank balances; the number of bank accounts; whether the entity is a homeowner; or whether the entity has any personal loans. ### Claim 16 (depends on 15) The apparatus of claim 15, wherein a health identifier is 1 Blood Type; dental information; or type of surgeries. ### Claim 17 A non-transitory computer readable medium having stored thereon a computer program, said computer program comprising a program code which, when executed by a processor, performs the steps of: receiving, at an identity assurance server, a first request initiated from a company server for an identity assurance score corresponding to an entity requesting the company server for access to an asset of the company, wherein the entity is a user and wherein the identity assurance score is computed independently of a device used by the user in requesting access; generating, in response to the request, the identity assurance score and determining, based on the generated identity assurance score, a collection of requirements that the entity must satisfy to access the asset; transmitting by the identity assurance server for delivery to the company server, the identity assurance score and the collection of requirements for the entity to satisfy; receiving, at the identity assurance server and originating from the company server, informational data corresponding to the collection of requirements completed by the entity; confirming, at the identity assurance server, that the received informational data matches data previously saved on a database at the identity assurance server; and notifying the company that the received information data has been confirmed; wherein a hierarchy of levels comprises the following levels of requirements for granting access to the asset: first level—ID of user and No Password; second level—ID and Password; third level—Description of something the entity knows; fourth level—Description of something the entity has; fifth level—Number of social network connections the entity has; sixth level—Location of the entity; seventh level—One biometric identifier; eighth level—Two biometric identifiers; ninth level—Three biometric identifiers; tenth level—Financial information corresponding to the entity; eleventh level—One health identifier; twelfth level—Second health identifier; and thirteenth level—DNA (Deoxyribonucleic acid) of the entity.