Online user authentication
AssigneeBarclays Bank PLC
InventorSrinivas Kasturi
Life of this patent
Estimating the term…
Abstract
A user establishes a verified online identity, for example by providing an identity token and biometric information, and an assurance level is established for that identity for use in an authentication service. Different assurance levels may be provided based on the degree of verification of the user's identity, for example by social network scoring, credit references, or by means of the identity token and biometric information.
Claims25
A method of creating a high-assurance online identity for a user via an Internet terminal, the method comprising:
- a. obtaining user identity information from a contactless identity token provided by the user, by means of a contactless reader integrated with or connected to the Internet terminal;
- b. verifying the user identity information against a remote identification database;
- c. obtaining biometric information from the user at the Internet terminal;
- and
- d. verifying the biometric information against known biometric information associated with the contactless identity token;
- whereby the high-assurance online identity is created for the user and is associated with the contactless identity token.
A computer program comprising programmable code arranged to perform a method of creating a high-assurance online identity for a user via an Internet terminal, the method comprising:
- a. obtaining user identity information from a contactless identity token provided by the user, by means of contactless reader integrated with or connected to the Internet terminal;
- b. verifying the user identity information against a remote identification database;
- c. obtaining biometric information from the user at the Internet terminal;
- and
- d. verifying the biometric information against known biometric information associated with the contactless identity token;
- whereby the high-assurance online identity is created for the user and is associated with the contactless identity token.
Dependencies are inferred from the claim text.