Identification (ID) proofing and risk engine integration system and method
AssigneeSecureAuth Corporation
InventorsShahrokh Shahidzadeh, Frank Stefan Ulbrich
Life of this patent
Estimating the term…
Abstract
The system and method disclosed performs entity authentication through identification proofing. A relying party such as a corporation or other type of entity having a secure website, computer network and secure facility working a risk engine can determine the authenticity, validation and verification during registration of a user entity. The identification proofing is integrated with a risk engine. The risk engine is capable of using bio-behavior based information which may be continuously monitored.
Claims7
A method for identity proofing a user entity for allowing for secure access comprising:
- in a resolution step, capturing registration information of the user entity at a relying party and monitoring the user entity by the risk engine during an active session;
- in a first part of a validation step, determining by the risk engine whether the user entity is not a threat actor by reviewing a plurality of egocentric and allocentric factors and if an abnormality is detected, notifying the relying party to terminate the active session;
- in a second part of the validation step, reviewing by the risk engine evidence submitted by the user entity and comparing the evidence to an internal database to determine whether the owner of the identity is the user entity and whether the user entity is a claimed registered identity or a new identity;
- in a verification step, if the user entity is the claimed registered identity, the risk engine will continuously capture contextual and behavioral factors of the user entity at the smart data hub to develop a bio-behavioral model of the user entity through machine learning;
- in the verification step, if the user entity is the new identity, obtaining the user entity contact information from at least one of a plurality of third party identity aggregators and contacting the user entity to obtain a confirmation that the user entity is attempting to register with the relying party and if the user entity is not new, the risk engine already has the contact information for the user entity and contacts the user entity directly through a predetermined out of band method;
- and
- sending a risk score from the risk engine to the relying party a classification of the risk determining that the user entity is or is not a threat actor.
Dependencies are inferred from the claim text.