Secure, confidential authentication with private data

US7676433B1 · kind B1 · utility

Assignee

• RAF Technology, Inc. · US

Inventors

• David Justin Ross · Redmond, US
• Bill G. Cornell · Bellevue, US

Key dates

• Filing date: Mar 21, 2006
• Grant date: Mar 9, 2010
• Expiry date: Jan 7, 2029

Classification

• Technology area (CPC G): Physics
• CPC primary: G06Q40/04
• WIPO field: IT methods for management
• WIPO sector: Electrical engineering

Abstract

Risk of personal identity theft, especially in connection with on-line commerce, is mitigated by maintaining private data in a secure database maintained by a trusted third party verification service. To authenticate the identity of a user or customer, in one embodiment, a knowledge-based challenge is issued to the user, and the response is compared to stored data by the verification service. The verification service reports to the vendor, to authenticate the user identity, capability and or authorization for the proposed transaction without disclosing private data to the vendor.