US 8,800,027 B1 · Authentication using privacy protected personally identifiable information

Abstract

An authentication method and system provides for a user requesting authentication where the authentication request includes Personally Identifiable Information (PPI) such as geolocation data. The user's device requesting authentication alters or encrypts the PII in order to prevent the PII's unintentional discovery by third parties or to comply with jurisdictional requirements for the safeguarding of PII. The receiving party saves the altered or encrypted PII for later use. In order to use the PII and perform calculations for authentication, the receiving party requests a trusted third party with knowledge of the methodology or key used to alter or encrypt the PII to perform calculations on the original values of the PII without saving the PII. The trusted third party returns a computed value to the receiving party where it is used to determine whether the user will be authenticated.

Claims18

Dependent claims

A method of authenticating a user device associated with a user, the method comprising:

receiving, from an application provider, in response to a request for authentication from the user device, the request including an altered current personally identifiable information (PII) and an altered previous PII, the application provider unable to reproduce a current PII and a previous PII;
computing an authentication value based upon the altered current PII and the altered previous PII;
forwarding the authentication value to the application provider, the application provider authenticating the user device based upon the authentication value;
wherein computing the authentication value based upon the current original PII and the previous original PII includes:
decrypting each of the altered current PII and the altered previous PII with an encryption key associated with the user device to produce an original value of each of the altered current PII and the altered previous PII;
wherein decrypting each of the altered current PII and the altered previous PII with an encryption key associated with the user device includes:
receiving a current one time password (OTP) value representing the altered current PII, and
extracting a distance and direction from specified bits of the OTP value.

5 more elements

A method of authenticating a user device associated with a user, the method comprising:

producing personally identifiable information (PII) in response to a user requesting authentication to use an application of an application provider;
altering the PII to obscure the PII using an obscuring value unique to each user device;
transmitting a request for authentication including the altered PII to an application provider, the application provider storing the altered PII with a previously stored instance of the altered PII, the application provider unable to reproduce the PII from the altered PII, the application provider requesting a trusted device to produce an authentication value based on the altered PII and the previously stored instance of the altered PII;
and
receiving from the application provider an indication of authentication, the application provider determining authentication based upon an authentication value calculated on the trusted device;
wherein the altered PII is decrypted with an encryption key associated with the user device to produce an original value of the altered PII;
wherein decrypting the altered PII with an encryption key associated with the user device includes:
receiving a current one time password (OTP) value representing the altered current PII, and
extracting a distance and direction from specified bits of the OTP value.

6 more elements

A system for authenticating a user, the system comprising:

an application provider includes circuit constructed and arranged to receive from a user device, a request for authentication, the request for authentication includes an altered current personally identifiable information (PII), the application provider further constructed and arranged to store the altered current PII with altered previous PII previously transmitted from the user device, the application provider unable to reproduce a current PII from the altered current PII;
a trusted party includes circuit constructed and arranged to receive from the application provider, the altered current PII and the altered previous PII, the trusted party further constructed and arranged to compute an authentication value based on the altered current PII and the altered previous PII and return the authentication value to the application provider;
the application provider further constructed and arranged to authenticate the user based upon the authentication value returned by the trusted party;
wherein the trusted party is further constructed and arranged to:
decrypt each of the altered current PII and the altered previous PII with an encryption key associated with the user device to produce an original value of each of the altered current PII and the altered previous PII;
wherein decrypting each of the altered current PII and the altered previous PII with an encryption key associated with the user device includes:
receiving a current one time password (OTP) value representing the altered current PII, and
extracting a distance and direction from specified bits of the OTP value.

5 more elements

Dependencies are inferred from the claim text.

Authentication using privacy protected personally identifiable information

Life of this patent

Authentication using privacy protected personally identifiable information

Life of this patent

Abstract

Claims18