# US 12,771,691 B2 · Friction-less identity proofing during employee self-service registration > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 12,771,691 B2 - Document ID: US12771691B2 - Status: Granted - Kind: B2 - Application number: 19/018,783 - Filed: 2025-01-13 - Published: 2025-08-07 - Granted: 2026-10-20 - Earliest claimed: 2019-04-05 - Assignees: ADP, Inc. - Applicants: ADP, Inc. - Inventors: Kalyan VBH; Frank Villavicencio; Pavan Katamveera - Web page: https://patentgrep.com/patent/US12771691B2 ## CPC - H04L 63/0884: {by delegation of authentication, e.g. a proxy authenticates an entity to be authenticated on behalf of this entity vis-à-vis an authentication entity} - H04L 63/0807: {using tickets, e.g. Kerberos (cryptographic mechanisms or cryptographic arrangements for entity authentication using tickets or tokens H04L9/3213)} - H04L 63/083: {using passwords (cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226)} - H04L 63/1433: {Vulnerability analysis} - H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M) ## Abstract A method for proving identity when registering for a service includes presenting by the entity a user with options for registering for the service, wherein the options comprise validating an identity of the user through a trusted partner. The method includes receiving, by the entity, user data from the trusted partner responsive to the user logging into a page on the trusted partner. The method includes validating the user identity for the service responsive to a determination that a user identifier from the trusted partner matches a user identifier on record with the entity. The method includes populating entity user data for the service according to the user data received from the trusted partner responsive to successfully validation of the user identity. In embodiments, a risk analysis score is determined for the user and registration steps for registering are selected based on comparison of the registration score with a threshold. ## Claims ### Claim 1 A system, comprising: one or more processors, coupled with memory, to: provide, for presentation via a registration interface for a service, an option to validate an identity of a user of a device used to register for the service; receive, from the device via the registration interface responsive to a selection of the option, an interface input comprising a first type of information that identifies the user; obtain, from an artificial intelligence analyzer provided by a third party server using the first type of information, a score corresponding to a likelihood that the interface input is fraudulent; set a criteria for a level of likelihood that the interface input is fraudulent based on a first location associated with the first type of information and a second location associated with the device; determine, based on the score satisfying a threshold set according to the criteria, that the interface input is fraudulent; validate the identity of the user based on the determination; and transmit, for presentation via the registration interface, responsive to the validation of the identity of the user, a prompt window to populate data of the user for the service. ### Claim 2 (depends on 1) The system of claim 1, wherein the one or more processors further: determine the score based on at least one of: a location of the device from which the first type of information is provided, a location of the user, or a location of an employer of the user. ### Claim 3 (depends on 1) The system of claim 1, wherein the one or more processors further: determine the first location based on at least one of a location of a residence of the user or a location of a location of an employer of the user; and determine the second location using an internet protocol (IP) address of the device. ### Claim 4 (depends on 1) The system of claim 1, wherein the one or more processors further: determine the score based at least on a comparison of a geographical area of the first location and a geographical area of the second location, wherein the score corresponds to the likelihood that the interface input is entered by a person other than the user. ### Claim 5 (depends on 1) The system of claim 1, wherein the first type of information includes information on the user that is publicly available, wherein the information comprises at least one of: a first name, a last name, and a date of birth, an email address, or a telephone number. ### Claim 6 (depends on 1) The system of claim 1, wherein the one or more processors further: determine the score for a first portion of the first type of information that corresponds to a likelihood greater than the threshold that the interface input is fraudulent; and determine, responsive to the score for the first portion of the first type of information corresponding to the likelihood greater than the threshold, to request additional information on the user via the interface, the additional information corresponding to a second type of information. ### Claim 7 (depends on 1) The system of claim 1, wherein the one or more processors further: generate a personal registration code specific to the user; and send the personal registration code to a device of the user via a secondary channel of communication. ### Claim 8 (depends on 7) The system of claim 7, wherein the secondary channel of communication comprises one of an email, a text message or a phone number. ### Claim 9 (depends on 7) The system of claim 7, wherein the one or more processors further: validate the identity of the user upon receiving of the personal registration code via the secondary channel of communication. ### Claim 10 (depends on 6) The system of claim 6, wherein the one or more processors further: present the user with a query comprising one or more questions from a knowledge-based authentication (KBA) database; and validate the identity of the user in response to one or more answers to the one or more questions. ### Claim 11 (depends on 1) The system of claim 1, wherein the one or more processors are provided via a first server of a plurality of servers and the artificial intelligence analyzer is provided via the server of the plurality of servers. ### Claim 12 (depends on 1) The system of claim 1, wherein the one or more processors further: update the criteria for the level of likelihood to change the threshold responsive to a change in data corresponding to at least one of a previous location of the user or a previous location of the device. ### Claim 13 (depends on 1) The system of claim 1, wherein the one or more processors further: transmit, for presentation via the registration interface, a second option to validate the identity of the user using a trusted partner system on a server of a plurality of servers; receive the data of the user from the trusted partner system; and validate the identity of the user responsive to a determination that a user identifier from the trusted partner system matches a user identifier on record with an entity that is configured to provide the service. ### Claim 14 (depends on 13) The system of claim 13, wherein the one or more processors further: populates entity user data for the service according to the user data received from the trusted partner system responsive to the validation. ### Claim 15 A method, comprising: providing, by one or more processors coupled with memory, for presentation via a registration interface for a service, an option to validate an identity of a user of a device used to register for the service; receiving, by the one or more processors, from the device via the registration interface responsive to a selection of the option, an interface input comprising a first type of information that identifies the user; obtaining, by the one or more processors, from an artificial intelligence analyzer provided by a third party using the first type of information, a score corresponding to a likelihood that the interface input is fraudulent; setting, by the one or more processors, a criteria for a level of likelihood that the interface input is fraudulent based on a first location associated with the first type of information and a second location associated with the device; determining, by the one or more processors, based on the score satisfying a threshold set according to the criteria, that the interface input is fraudulent; validating, by the one or more processors, the identity of the user based on the determination; and transmitting, by the one or more processors, for presentation via the registration interface, responsive to the validation of the identity of the user, a prompt window to populate data of the user for the service. ### Claim 16 (depends on 15) The method of claim 15, comprising: determining, by the one or more processors, the score based on at least one of: a location of the device from which the first type of information is provided, a location of the user, or a location of an employer of the user. ### Claim 17 (depends on 15) The method of claim 15, comprising: determining, by the one or more processors, the first location based on at least one of a location of a residence of the user or a location of a location of an employer of the user; and determining, by the one or more processors, the second location using an internet protocol (IP) address of the device. ### Claim 18 (depends on 15) The method of claim 15, comprising: determining, by the one or more processors, the score based at least on a comparison of a geographical area of the first location and a geographical area of the second location, wherein the score corresponds to the likelihood that the interface input is entered by a person other than the user. ### Claim 19 (depends on 15) The method of claim 15, wherein the first type of information on the user comprises at least one of: a first name, a last name, and a date of birth, an email address, or a telephone number. ### Claim 20 A non-transitory computer-readable media storing instructions for causing one or more processors to: provide, for presentation via registration interface for registering a service, an option to validate an identity of a user of a device used to register for the service; receive, from the device via the registration interface responsive to a selection of the option, an interface input comprising a first type of information that identifies the user; obtain, from an artificial intelligence analyzer provided by a third party server using the first type of information, a score corresponding to a likelihood that the interface input is fraudulent; set a criteria for a level of likelihood that the interface input is fraudulent based on a first location associated with the first type of information and a second location associated with the device; determine, based on the score satisfying a threshold set according to the criteria, that the interface input is fraudulent; validate the identity of the user based on the determination; and transmit, for presentation via the registration interface, responsive to the validation of the identity of the user, a prompt window to populate data of the user for the service.