Multifactor identity authentication via cumulative dynamic contextual identity
AssigneeWells Fargo Bank, N.A.
InventorPeter Bordow
Life of this patent
Estimating the term…
Abstract
Disclosed are example methods, systems, and devices that allow for generation and maintenance of a central identity databank for a user's digital life. The identity databank may include identity elements with payload values and metadata values corresponding immutable attributes of the user. A multifactor identity authentication protocol allows service provider devices to more reliably validate transactions with user devices via an identity system. The identity databank may include passwords, which may be generated by the identity system linked to user accounts and/or service providers. The passwords may be provided to service provider devices, eliminating the need for users to conceive of a multitude of varying passwords for the user's accounts.
Claims19
A method comprising:
- receiving a first transmission from a service provider device with which a first user device is transacting, the first transmission comprising (i) a request for user data of a user and (ii) biometric information detected via one or more user interfaces of the first user device;
- comparing the biometric information to data corresponding to the user stored in an identity databank to verify the user;
- determining, prior to retrieving the requested user data, that a first profile of a plurality of profiles indicates the service provider device is authorized to access the requested user data, wherein each profile of the plurality of profiles identifies a respective set of user data and a respective entity that is authorized to access the user data;
- retrieving, responsive to verifying the user, from the identity databank, the requested user data from one or more identity elements in the identity databank;
- and
- initiating another transmission comprising the requested user data to the service provider device.
A central identity system comprising one or more processors, the central identity system being configured to:
- receive a first transmission from a service provider device of a service provider, wherein a user is transacting with the service provider device using a first user device, the first transmission comprising:
- a request for user data of the user;
- and
- biometric data corresponding to the user, the biometric data having been detected by one or more user interfaces of the first user device and transmitted to the service provider device;
- initiate a second transmission to the first user device or a second user device of the user to confirm that the user authorizes the central identity system to transmit the requested user data to the service provider device;
- validate the biometric data from the service provider device using an identity databank comprising identity elements corresponding to the user, each identity element comprising a set of one or more payload values and a set of one or more metadata values, wherein validating the biometric data comprises determining that the biometric data matches or is sufficiently similar to values in one or more corresponding identity elements in the identity databank;
- retrieve, from identity elements in the identity databank, payload values corresponding to the requested user data;
- and
- initiate a third transmission to the service provider device, the third transmission comprising the payload values retrieved from the identity databank.
A method comprising:
- receiving, from a service provider device with which a first user device is communicating, an authentication request comprising a set of payload values and a set of metadata values, the set of payload values including biometric information acquired via a user interface of the first user device, and the set of metadata values including a date and a geolocation detected using a location sensor of the first user device;
- validating the authentication request from the service provider device via at least one of the first user device or a second user device;
- verifying the biometric information using an identity databank of a user;
- determining, responsive to verifying the biometric information, that the service provider device is authorized to access a validated dataset;
- responsive to determining that the service provider device is authorized to access the validated dataset, generating an authentication response comprising the validated dataset and transmitting the authentication response to the service provider device;
- and
- recording the authentication request as part of an identity element in the identity databank.
Dependencies are inferred from the claim text.