Multifactor identity authentication via cumulative dynamic contextual identity
AssigneeWells Fargo Bank, N.A.
InventorPeter Bordow
Life of this patent
Estimating the term…
Abstract
Disclosed are example methods, systems, and devices that allow for generation and maintenance of a central identity databank for a user's digital life. The identity databank may include identity elements with payload values and metadata values corresponding immutable attributes of the user. A multifactor identity authentication protocol allows service provider devices to more reliably validate transactions with user devices via an identity system. The identity databank may include passwords, which may be generated by the identity system linked to user accounts and/or service providers. The passwords may be provided to service provider devices, eliminating the need for users to conceive of a multitude of varying passwords for the user's accounts.
Claims20
A method comprising:
- determining, based on one or more payload values, for each identity element in a set of one or more identity elements:
- (1) metadata related to the identity element;
- and
- (2) at least one of a first identifier of each identity element or a second identifier of a source of each identity element,
- wherein the identify elements are in an identity databank and were generated based on user data related to a user;
- receiving, via a graphical interface, instructions for control of the identity databank, the graphical interface being configured to allow the user to control:
- entities that may access values in identity elements of the identity databank;
- and
- purposes for which identified values in the identity elements may be shared;
- and
- receiving, in a transmission initiated by a service provider device, a request for at least one of user data or authentication.
A system comprising one or more processors configured to:
- determine, based on one or more payload values, for each identity element in a set of one or more identity elements:
- (1) metadata corresponding to the identity element;
- and
- (2) at least one of a first identifier of each identity element or a second identifier of a source of each identity element,
- wherein the identify elements are in an identity databank and were generated from user data related to a user;
- receive, via a graphical interface, instructions for control of the identity databank, the graphical interface being configured to allow the user to control:
- entities that may access values in identity elements of the identity databank;
- and
- purposes for which identified values in the identity elements may be shared;
- and
- receive, in a transmission initiated by a service provider device, a request for at least one of user data or authentication.
A user device comprising:
- a network interface configured to communicate via a telecommunications network;
- one or more user interfaces for receiving inputs from and providing outputs to a user;
- and
- one or more processors configured to:
- accept a first input, via the one or more user interfaces, requesting registration for an identity service administered by a central identity system;
- transmit to the central identity system, via the network interface, an indication that the identity service has been requested, wherein the registration causes the central identity system to determine, based on one or more payload values, for each identity element in a set of one or more identity elements:
- (1) metadata related to the identity element;
- and
- (2) at least one of a first identifier of each identity element or a second identifier of a source of each identity element,
- wherein the identify elements are in an identity databank and were generated from user data related to a user;
- and
- present, via the one or more user interfaces, a graphical interface, the graphical interface being configured to allow the user to control at least one of:
- entities that may access, via the central identity system, values in identity elements of the identity databank;
- or
- purposes for which identified values in the identity elements may be shared by the central identity system;
- and
- receive, in a transmission initiated by a service provider device, a request for at least one of user data or authentication.
Dependencies are inferred from the claim text.