Method and apparatus for an identity assurance score with ties to an id-less and password-less authentication system
AssigneeAvatier IP, LLC
InventorNelson A. Cicchitto
Life of this patent
Estimating the term…
Abstract
A technique is provided by which a user goes to a site and instead of the authentication system of the site going to their own databases to match an ID and password given by the user, because doing so is not secure, the site companies makes a call to an identity assurance score server (with ties to the ID-less and password-less system) and send a parameter such as a number. Then, based on that parameter (e.g., number or score), the identity assurance score server (with ties to the ID-less and password-less system, such as described hereinabove) sends a corresponding login protocol or factors to be satisfied to authenticate the user.
Claims18
A computer-implemented method, comprising:
- receiving, at an identity assurance server, a first request initiated from a company server for an identity assurance score corresponding to an entity requesting the company server for access to an asset of the company;
- generating, in response to the request, the identity assurance score and determining a collection of requirements that the entity must satisfy to access the asset, wherein the collection of requirements are based on a predetermined hierarchy of levels of requirements to be satisfied for the request to be approved and are based on the generated identity assurance score;
- transmitting by the identity assurance server for delivery to the company server, the identity assurance score and the collection of requirements for the entity to satisfy;
- receiving, at the identity assurance server and originating from the company server, informational data corresponding to the collection of requirements completed by the entity;
- confirming, at the identity assurance server, that the received informational data matches data previously saved on a database at the identity assurance server;
- and
- notifying the company that the received information data has been confirmed;
- wherein one or more steps are performed on at least a processor coupled to at least a memory.
An apparatus, comprising at least one processor operatively connected to at least one computer readable medium having computer executable instructions stored thereon, wherein when executed by the at least one processor, the computer executable instructions perform the following steps:
- receiving a first request initiated from a company server for an identity assurance score corresponding to an entity requesting the company server for access to an asset of the company;
- generating the identity assurance score and determining a collection of requirements that the entity must satisfy to access the asset, wherein the collection of requirements are based on a predetermined hierarchy of levels of requirements to be satisfied for the request to be approved and are based on the generated identity assurance score;
- transmitting, for delivery to the company server, the identity assurance score and the collection of requirements for the entity to satisfy;
- receiving, from the company server, informational data corresponding to the collection of requirements completed by the entity;
- confirming that the received informational data matches data previously saved on a database at the identity assurance server;
- and
- notifying the company that the received information data has been confirmed.
Dependencies are inferred from the claim text.