Back to results
US 2022/0191184 A1Published application
System security infrastructure facilitating protecting against fraudulent use of individual identity credentials
AssigneeTactical Lighting Systems
InventorsJames P. McGee, Kevin M. Cutts
Life of this patent
Estimating the term…
Abstract
A networked infrastructure is described that includes a set of programmed computing nodes, each node being configured with a processor and non-transitory computer readable media including computer-executable instructions that, when executed by the processor, facilitate a social security number registry server carrying out a method that provides an individual with the ability to remotely approve or disapprove, in real-time, the use of his/her social security number (SSN) by a relying party server.
Claims15
A method, carried out by a personal identity registry server, for a verification of authorized use of a personal identity by a user request seeking access to resources of a relying party server, where the personal identity is used by the relying party server during authenticating the user request, the method comprising:
- receiving, by the personal identify registry server, a personal identity verification request issued by the relying party server, wherein the personal identity registry server comprises a storage comprising a set of personal identity records where each personal identity record includes:
- a user personal identity and a digital certificate associated with the user personal identity, and wherein the personal identity verification request includes:
- an a personal identity of the user and an identifying information of the relying party server, and wherein the digital certificate includes a public key and a digital signature;
- finding a matching personal identity record in the set of personal identity records corresponding to the personal identity of the user in the received personal identity verification request;
- issuing, in response to the finding the matching personal identity record, an personal identity authentication request message to a message destination associated with the matching personal identity, wherein the message destination is associated with the user corresponding to the matching personal identity record;
- receiving, by the personal identity registry server, an approval response message to the authentication request message;
- performing a challenge/response operation between the personal identity registry server and a verifying device associated with the matching personal identity, wherein the personal identity registry server verifies that the verifying device associated with the matching personal identity has stored a private key that is associated with the public key of the digital certificate;
- and
- transmitting, by the personal identity registry server to the relying party server in accordance with the receiving an approval response and performing a challenge/response operation, a response to the personal identity verification request based upon the performing the challenge/response operation.
6 more elements
A non-transitory computer-readable medium including computer executable instructions that, when executed by a processor on a personal identity registry server, facilitate performing a method for a verification of authorized use of a personal identity by a user request seeking access to resources of a relying party server, where the personal identity is used by the relying party server during the course of authenticating the user, wherein the method carried out by the personal identity registry server comprises:
- receiving, by the personal identity registry server, an personal identity verification request issued by the relying party server, wherein the personal identity registry server comprises a storage comprising a set of personal identity records where each personal identity record includes:
- a user personal identity and a digital certificate associated with the user personal identity, and wherein the personal identity verification request includes:
- a personal identity of the user and an identifying information of the relying party server, and wherein the digital certificate includes a public key and a digital signature;
- finding a matching personal identity record in the set of personal identity records corresponding to the personal identity of the user in the received personal identity verification request;
- issuing, in response to the finding the matching personal identity record, a personal identity authentication request message to a message destination associated with the matching personal identity, wherein the message destination is associated with the user corresponding to the matching personal identity record;
- receiving, by the personal identity registry server, an approval response message to the personal identity authentication request message;
- performing a challenge/response operation between the personal identity registry server and a verifying device associated with the matching personal identity, wherein the personal identity registry server verifies that the verifying device associated with the matching personal identity has stored a private key that is associated with the public key of the digital certificate;
- and
- transmitting, by the personal identity registry server to the relying party server in accordance with the receiving an approval response and performing a challenge/response operation, a response to the personal identity verification request based upon the performing the challenge/response operation.
6 more elements
A personal identity registry server comprising:
- a processor;
- and
- a non-transitory computer-readable medium including computer executable instructions that, when executed by the processor, facilitate performing a method for a verification of authorized use of a personal identity by a user request seeking access to resources of a relying party server, where the personal identity is used by the relying party server during the course of authenticating the user, wherein the method comprises:
- receiving, by the personal identity registry server, an personal identity verification request issued by the relying party server, wherein the personal identity registry server comprises a storage comprising a set of personal identity records where each personal identity record includes:
- a user personal identity and a digital certificate associated with the user personal identity, and wherein the personal identity verification request includes:
- a personal identity of the user and an identifying information of the relying party server, and wherein the digital certificate includes a public key and a digital signature;
- finding a matching personal identity record in the set of personal identity records corresponding to the personal identity of the user in the received personal identity verification request;
- issuing, in response to the finding the matching personal identity record, a personal identity authentication request message to a message destination associated with the matching personal identity, wherein the message destination is associated with the user corresponding to the matching record;
- receiving, by the registry server, an approval response message to the personal identity authentication request message;
- performing a challenge/response operation between the personal identity registry server and a verifying device associated with the matching personal identity, wherein the personal identity registry server verifies that the verifying device associated with the matching personal identity has stored a private key that is associated with the public key of the digital certificate;
- and
- transmitting, by the personal identity registry server to the relying party server in accordance with the receiving an approval response and performing a challenge/response operation, a response to the personal identity verification request based upon the performing the challenge/response operation.
9 more elements
Dependencies are inferred from the claim text.