Systems and methods for secure online credential authentication
AssigneeID.me, Inc.
InventorBlake HALL
Life of this patent
Estimating the term…
Abstract
Systems, methods, and non-transitory computer-readable medium are disclosed for secure online credential authentication. One method includes receiving, over an electronic network, identification information from an identity provider; accessing, from a database, previously stored hashed identification information stored in association with a previous identity provider; comparing the identification information to previously stored hashed identification information; and storing the identification information in association with the identity provider that provided the identification information in the database when the hashed identification information does not match previously stored hashed identification information.
Claims20
A computer-implemented method for secure online credential authentication, the computer-implemented method including:
- receiving, at a credential broker over an electronic network, identification information associated with a user from an identity provider;
- wherein the credential broker integrates a plurality of identity providers with a plurality of relying parties for the secure online credential authentication;
- hashing, by the credential broker, the identification information using a hashing function to produce hashed identification information;
- deleting, by the credential broker, the identification information after hashing;
- accessing, by the credential broker from a database, previously stored hashed identification information stored in association with a previous identity provider;
- comparing, by the credential broker, the hashed identification information to the previously stored hashed identification information;
- storing, by the credential broker, the hashed identification information in association with the identity provider in the database when the hashed identification information does not match the previously stored hashed identification information;
- and
- transmitting, by the credential broker, an authentication result to a relying party.
A system for secure online credential authentication, the system including:
- a data storage device that stores instructions for the secure online credential authentication;
- and
- one or more processors configured to execute the instructions to perform a method including:
- receiving, over an electronic network, identification information associated with a user from an identity provider;
- wherein the one or more processors are configured as a credential broker that integrates a plurality of identity providers with a plurality of relying parties for the secure online credential authentication;
- hashing the identification information using a hashing function to produce hashed identification information;
- deleting the identification information after hashing;
- accessing, from a database, previously stored hashed identification information stored in association with a previous identity provider;
- comparing the hashed identification information to the previously stored hashed identification information;
- storing the hashed identification information in association with the identity provider in the database when the hashed identification information does not match the previously stored hashed identification information;
- and
- transmitting an authentication result to a relying party.
A non-transitory computer-readable medium storing instructions that, when executed by one or more processors, cause the one or more processors to perform a method for secure online credential authentication, the method including:
- receiving, over an electronic network, identification information associated with a user from an identity provider;
- wherein the one or more processors are configured as a credential broker that integrates a plurality of identity providers with a plurality of relying parties for the secure online credential authentication;
- hashing the identification information using a hashing function to produce hashed identification information;
- deleting the identification information after hashing;
- accessing, from a database, previously stored hashed identification information stored in association with a previous identity provider;
- comparing the hashed identification information to the previously stored hashed identification information;
- storing the hashed identification information in association with the identity provider in the database when the hashed identification information does not match the previously stored hashed identification information;
- and
- transmitting an authentication result to a relying party.
Dependencies are inferred from the claim text.