Remote identity verification and dynamic storage of identity data
AssigneeDigiCert, Inc.
InventorsJason Allen Sabin, Avesta Hojjati
Life of this patent
Estimating the term…
Abstract
Systems and methods are provided to offer security or trust services to entities over a network. A method, according to one implementation, includes the step of receiving, from a representative of an enterprise, a selection of a group of users to be assigned one or more authorities within the enterprise. The method also includes the step of remotely accessing one or more identity information repositories associated with the enterprise to obtain records pertaining to each user of the group. Also, the method includes the step of using the records to onboard the group of users, whereby onboarding the group includes assigning the one or more authorities to each user of the group.
Claims18
A Trust Service Provider (TSP) comprising:
- a processing device;
- and
- a memory device configured to store a computer program having logic that enables the processing device to execute the steps of
- receiving, from a representative of an enterprise, a selection of a group of users to be assigned one or more authorities within the enterprise,
- remotely accessing one or more identity information repositories associated with the enterprise to obtain records pertaining to each user of the group, wherein the records are obtained by searching through the one or more identity information repositories to gather a name and other identifying information associated with each user, whereby the name and identifying information are used for performing a Remote Identity Verification (RIV) process to allow the user to perform an action that falls within the one or more authorities assigned to the user, and
- using the records to onboard the group of users, whereby onboarding the group includes assigning the one or more authorities to each user of the group, and wherein the selection of the group of users includes configuring a policy engine by the representative, the policy engine being adapted to obtain the records pertaining to each user of the group and to automatically capture changes in the records over time,
- wherein the enterprise includes multiple identity information repositories located in different locations, and wherein onboarding each user further includes:
- extracting data from a government-issued ID provided by the user;
- determining, based on the extracted data, an issuer of the government-issued ID and a location of the issuer;
- searching location information regarding the multiple identity information repositories;
- selecting one of the multiple identity information repositories that is either in a same territory as the issuer or is closest to the issuer;
- and
- storing the name and other identifying information of the user in the selected identity information repository.
A non-transitory computer-readable medium configured to store computer logic having instructions that, when executed, enable a processing device to:
- receive, from a representative of an enterprise, a selection of a group of users to be assigned one or more authorities within the enterprise,
- remotely access one or more identity information repositories associated with the enterprise to obtain records pertaining to each user of the group, wherein the records are obtained by searching through the one or more identity information repositories to gather a name and other identifying information associated with each user, whereby the name and identifying information are used for performing a Remote Identity Verification (RIV) process to allow the user to perform an action that falls within the one or more authorities assigned to the user, and
- use the records to onboard the group of users, whereby onboarding the group includes assigning the one or more authorities to each user of the group, and wherein the selection of the group of users includes configuring a policy engine by the representative, the policy engine being adapted to obtain the records pertaining to each user of the group and to automatically capture changes in the records over time,
- wherein the enterprise includes multiple identity information repositories located in different locations, and wherein onboarding each user further includes:
- extracting data from a government-issued ID provided by the user;
- determining, based on the extracted data, an issuer of the government-issued ID and a location of the issuer;
- searching location information regarding the multiple identity information repositories;
- selecting one of the multiple identity information repositories that is either in a same territory as the issuer or is closest to the issuer;
- and
- storing the name and other identifying information of the user in the selected identity information repository.
A method comprising steps of:
- receiving, from a representative of an enterprise, a selection of a group of users to be assigned one or more authorities within the enterprise,
- remotely accessing one or more identity information repositories associated with the enterprise to obtain records pertaining to each user of the group, wherein the records are obtained by searching through the one or more identity information repositories to gather a name and other identifying information associated with each user, whereby the name and identifying information are used for performing a Remote Identity Verification (RIV) process to allow the user to perform an action that falls within the one or more authorities assigned to the user, and
- using the records to onboard the group of users, whereby onboarding the group includes assigning the one or more authorities to each user of the group, and wherein the selection of the group of users includes configuring a policy engine by the representative, the policy engine being adapted to obtain the records pertaining to each user of the group and to automatically capture changes in the records over time,
- wherein the enterprise includes multiple identity information repositories located in different locations, and wherein onboarding each user further includes:
- extracting data from a government-issued ID provided by the user;
- determining, based on the extracted data, an issuer of the government-issued ID and a location of the issuer;
- searching location information regarding the multiple identity information repositories;
- selecting one of the multiple identity information repositories that is either in a same territory as the issuer or is closest to the issuer;
- and
- storing the name and other identifying information of the user in the selected identity information repository.
Dependencies are inferred from the claim text.