# US 2018/0324151 A1 · Method and system for protecting and utilizing Internet Identity, using smartphone.

> Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt

- Number: US 2018/0324151 A1
- Document ID: US20180324151A1
- Status: Published application
- Kind: A1
- Application number: 15/774,012
- Filed: 2016-11-08
- Published: 2018-11-08
- Earliest claimed: 2015-11-10
- Assignees: Eli Talmor; Rita Talmor
- Inventors: Eli Talmor; Rita Talmor
- Web page: https://patentgrep.com/patent/US20180324151A1

## CPC

- H04W 12/06: Authentication
- G06Q 20/322: {Aspects of commerce using mobile devices [M-devices]}
- G06Q 20/351: {Virtual cards}
- G06Q 20/36: using electronic wallets or electronic money safes
- G06Q 20/3823: {combining multiple encryption tools for a transaction}
- G06Q 20/3829: {involving key management}
- G06Q 20/4012: {Verifying personal identification numbers [PIN]}
- G06Q 20/4014: {Identity check for transactions}
- G06Q 20/40145: {Biometric identity checks}
- H04L 9/083: {involving central third party, e.g. key distribution center [KDC] or trusted third party [TTP]}
- H04L 9/0869: {involving random numbers or seeds}
- H04L 63/0414: {during transmission, i.e. party's identity is protected against eavesdropping, e.g. by using temporary identifiers, but is known to the other party or parties involved in the communication}
- H04L 63/0428: {wherein the data content is protected, e.g. by encrypting or encapsulating the payload}
- H04L 63/083: {using passwords (cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226)}
- H04L 63/0861: {using biometrical features, e.g. fingerprint, retina-scan (cryptographic mechanisms or cryptographic arrangements for entity authentication using biological data H04L9/3231)}
- H04M 1/0202: {Portable telephone sets, e.g. cordless phones, mobile phones or bar type handsets (constructional features of telephone transmitters or receivers, e.g. of speakers or microphones H04M1/03)}
- G06Q 2220/00: Business processing using cryptography
- H04L 63/107: {wherein the security policies are location-dependent, e.g. entities privileges depend on current location or allowing specific operations only from locally connected terminals}
- H04W 4/02: Services making use of location information
- H04W 4/12: Messaging; Mailboxes; Announcements
- H04W: WIRELESS COMMUNICATION NETWORKS (broadcast communication H04H; communication systems using wireless links for non-selective communication, e.g. wireless extensions H04M1/72)
- G06Q: INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
- H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M)
- H04M: TELEPHONIC COMMUNICATION (circuits for controlling other apparatus via a telephone cable and not involving telephone switching apparatus G08)

## Abstract

The present invention enables secure identification, transactions or access using smartphones. The present invention presents a method and a system for secure identification, transaction and access, comprising an interaction between a user; a smartphone of the user; a software application, enabling the user to communicate with a Relying-Party-Service-Provider and; an Identity-Management-as-a-Service, performing identity verification of the user, using software application; and a Relying-Party-Service-Provider, performing transaction and access of the user. Relying-Party-Service-Provider may be one of the group consisting of Banks, Financial Services, Online Shops, Online Voting, Enterprise Websites, Smart Home, Mobile and Web applications.

## Claims

### Claim 1

A system for secure identification, transaction and access, comprising: a user; a smartphone of the user; a transaction/access smartphone application for communication of the user with a Relying-Party-Service-Provider; an identity external library or smartphone application for interaction of the user with an Identity-Management-as-a-Service.
Said Identity-Management-as-a-Service performing strong identification of the said user using any combination of:
a. said smartphone hardware identifiers, from the group comprising of: Smartphone SIM, Smartphone IMEI and Smartphone OS version build number,
b. said smartphone location identifiers, from the group comprising of: Cellular Network Country Identifier, Network Type, Roaming Flag, Network Operator Identifier, SIM Operator Identifier, Tower Cell Location LAC (location area code), Tower Cell Location CID (Cell ID) and Geo-location Coordinates (either Cellular-Network Base or GPS based),
c. user's PIN entered by the said user via said smartphone,
d. user's behavioral biometrics, measured while entering said PIN by the said user.
Said Relying-Party-Service-Provider providing for transaction and access of the user.

### Claim 2

A system for secure identification, transaction and access of comprising: a user; a smartphone of the user; a transaction/access smartphone application for communication of the user with a Relying-Party-Service-Provider; an identity external library or smartphone application for interaction of the user with an Identity-Management-as-a-Service.
Wherein the smartphone application uses a secure messaging or data transfer between said Relying Party smartphone app. and said identity external library or application, in order to interact with the Identity-Management-as-a-Service and to identify the communication request between the user and the Relying-Party-Service-Provider.
Said data transfer includes a Session ID, wherein said Session ID is being randomly generated by the transaction/access smartphone application, while being used to identify the access or transaction request of said user to the Relying-Party-Service-Provider.
Said data transfer encrypts transaction data with, randomly generated, transaction key and transfers such key to identity smartphone application.
Said data transfer includes Risk parameter determination to request PIN entry by the said user or Voiceprint authentication by said user.

### Claim 3 (depends on 2)

The system of claim 2 where the said Session ID is sent together the access or transaction request, encrypted by said transaction key, by the said smartphone device to the said Relying-Party-Service-Provider.

### Claim 4 (depends on 3)

The system of claim 3 where the said Relying-Party-Service-Provider sends said Session ID, to the said Identity-Management-as-a-Service.

### Claim 5 (depends on 4)

The system of claim 4 where the said Identity-Management-as-a-Service returns to the said Relying-Party-Service-Provider, the information including user's ID and the transaction key, used to decrypt said access or transaction request.

### Claim 6 (depends on 5)

The system of claim 5 where Relying-Party-Service-Provider authorizes the user's ID and transaction request, received from the said smartphone device.

### Claim 7 (depends on 6)

The system of claim 6 where the user's ID consists of one or more of the attributes from the group comprising of:
a. National ID #,
b. Gender,
c. Date of Birth,
d. First Name, Last Name,
e. Home Address,
f. Mobile #,
g. Email (used for Social Media),
h. Social Media (Facebook, Linkedin, Twitter) link,
i. Enterprise Name.
j. Bank Account
k. Payment Card.

### Claim 8 (depends on 1, 7)

The system of claim 1 and claim 7, where user's ID is stored, cloud-based, in the said, Identity-Management-as-a-Service and is dynamically bound to smartphone hardware identifiers.

### Claim 9 (depends on 7)

The system of claim 7 where user's ID attributes are submitted online by the user to the Identity Management-as-a-Service using the smart-phone, followed by verifying user's identity with a Trusted Third Party.

### Claim 10 (depends on 1, 2)

The system of claim 1 and claim 2 where the Relying-Party-Service-Provider may be one of the group consisting of Banking, Financial Services, Online Shops, Online Voting, Enterprise Websites, Smart Home, Smart Car, Gaming, Dating and other applications preventing Identity Theft and/or Identity Fraud.

### Claim 11

A method for secure identification, transaction and access, comprising an interaction between a user; a smartphone of the user; a transaction/access smartphone application for communication of the user with a Relying-Party-Service-Provider; an identity external library or smartphone application for interaction of the user with an Identity-Management-as-a-Service.
Said Identity-Management-as-a-Service performing strong identification of the said user using any combination of:
a. said smartphone hardware identifiers, from the group comprising of: Smartphone SIM, Smartphone IMEI and Smartphone OS version build number,
b. said smartphone location identifiers, from the group comprising of: Cellular Network Country Identifier, Network Type, Roaming Flag, Network Operator Identifier, SIM Operator Identifier, Tower Cell Location LAC (location area code), Tower Cell Location CID (Cell ID) and Geo-location Coordinates (either Cellular-Network Base or GPS based),
c. user's PIN entered by the said user via said smartphone,
d. user's behavioral biometrics, measured while entering said PIN by the said user.
Said Relying-Party-Service-Provider providing for transaction and access of the user.

### Claim 12 (depends on 11)

The method of claim 11 where the smartphone application uses a secure messaging or data transfer between said Relying Party smartphone app. and said identity external library or application, in order to interact with the Identity-Management-as-a-Service and to identify the communication request between the user and the Relying-Party-Service-Provider.
Said data transfer includes a Session ID, wherein said Session ID is being randomly generated by the transaction/access smartphone application, while being used to identify the access or transaction request of said user to the Relying-Party-Service-Provider.
Said data transfer encrypts transaction data with, randomly generated, transaction key and transfers such key to identity smartphone application.
Said data transfer includes Risk parameter determination to request said PIN entry by the said user or Voiceprint authentication by said user.

### Claim 13 (depends on 12)

The method of claim 12 where the said Session ID is sent together the access or transaction request, encrypted by said transaction key, by the said smartphone device to the said Relying-Party-Service-Provider.

### Claim 14 (depends on 13)

The method of claim 13 where the said Relying-Party-Service-Provider sends said Session ID, to the said Identity-Management-as-a-Service.

### Claim 15 (depends on 14)

The method of claim 14 where the said Identity-Management-as-a-Service returns to the said Relying-Party-Service-Provider, the information including user's ID and the transaction key, used to decrypt said access or transaction request.

### Claim 16 (depends on 15)

The method of claim 15 where Relying-Party-Service-Provider authorizes the user's ID and transaction request, received from the said smartphone device.

### Claim 17 (depends on 16)

The method of claim 16 where the user's ID consists of one or more of the attributes from the group comprising of:
a. National ID #,
b. Gender,
c. Date of Birth,
d. First Name, Last Name,
e. Home Address,
f. Mobile #,
g. Email (used for Social Media),
h. Social Media (Facebook, Linkedin, Twitter) link,
i. Enterprise Name.
j. Bank Account
k. Payment Card.

### Claim 18 (depends on 11, 17)

The method of claim 11 where user's ID of claim 17 is stored in the cloud—based Identification-as-a-Service and is dynamically bound to smartphone hardware identifiers of claim.

### Claim 19 (depends on 17)

The method of claim 17 where user's ID attributes are submitted online by the user to the Identity Management-as-a-Service using the smart-phone, followed by verifying user's identity with a Trusted Third Party.

### Claim 20 (depends on 11)

The method of claim 11 where the Relying-Party-Service-Provider may be one of the group consisting of Banking, Financial Services, Online Shops, Online Voting, Enterprise Websites, Smart Home, Smart Car, Gaming, Dating and other applications preventing Identity Theft and/or Identity Fraud.