Method and system for protecting and utilizing Internet Identity, using smartphone.

A system for secure identification, transaction and access of comprising:

• a user;
• a smartphone of the user;
• a transaction/access smartphone application for communication of the user with a Relying-Party-Service-Provider;
• an identity external library or smartphone application for interaction of the user with an Identity-Management-as-a-Service.
• Wherein the smartphone application uses a secure messaging or data transfer between said Relying Party smartphone app. and said identity external library or application, in order to interact with the Identity-Management-as-a-Service and to identify the communication request between the user and the Relying-Party-Service-Provider.
• Said data transfer includes a Session ID, wherein said Session ID is being randomly generated by the transaction/access smartphone application, while being used to identify the access or transaction request of said user to the Relying-Party-Service-Provider.
• Said data transfer encrypts transaction data with, randomly generated, transaction key and transfers such key to identity smartphone application.
• Said data transfer includes Risk parameter determination to request PIN entry by the said user or Voiceprint authentication by said user.

A method for secure identification, transaction and access, comprising an interaction between a user;

• a smartphone of the user;
• a transaction/access smartphone application for communication of the user with a Relying-Party-Service-Provider;
• an identity external library or smartphone application for interaction of the user with an Identity-Management-as-a-Service.
• Said Identity-Management-as-a-Service performing strong identification of the said user using any combination of:
• a. said smartphone hardware identifiers, from the group comprising of:
• Smartphone SIM, Smartphone IMEI and Smartphone OS version build number,
• b. said smartphone location identifiers, from the group comprising of:
• Cellular Network Country Identifier, Network Type, Roaming Flag, Network Operator Identifier, SIM Operator Identifier, Tower Cell Location LAC (location area code), Tower Cell Location CID (Cell ID) and Geo-location Coordinates (either Cellular-Network Base or GPS based),
• c. user's PIN entered by the said user via said smartphone,
• d. user's behavioral biometrics, measured while entering said PIN by the said user.
• Said Relying-Party-Service-Provider providing for transaction and access of the user.