Online user authentication
A user establishes a verified online identity, for example by providing an identity token and biometric information, and an assurance level is established for that identity for use in an authentication service. Different assurance levels may be provided based on the degree of verification of the user's identity, for example by social network scoring, credit references, or by means of the identity token and biometric information.
1. A method of creating a high-assurance online identity for a user via an Internet terminal, the method comprising:
a. obtaining user identity information from a contactless identity token provided by the user, by means of a contactless reader integrated with or connected to the Internet terminal;
b. verifying the user identity information against a remote identification database;
c. obtaining biometric information from the user at the Internet terminal; and
d. verifying the biometric information against known biometric information associated with the contactless identity token;
whereby the high-assurance online identity is created for the user and is associated with the contactless identity token.
2. The method of claim 1 , wherein an association between the user identity information and the contactless identity token has previously been verified.
3. The method of claim 1 , wherein the known biometric information is obtained from the contactless identity token.
4. The method of claim 1 , wherein the known biometric information is obtained from a remote database.
5. The method of claim 1 , wherein the contactless identity token comprises a passport or blank card.
6. The method of claim 1 , wherein the biometric information is obtained from the user from a capture device connected to the Internet terminal.
7. The method of claim 6 , wherein the biometric information comprises one or more of a facial image, fingerprint, or retina or iris scan of the user.
8. The method of claim 1 , further including:
e. sending to the user, by other than the Internet, a confirmation token;
f. entering the confirmation token at the Internet terminal; and
g. verifying the confirmation token.
9. The method of claim 8 , wherein the confirmation token is sent to an address corresponding to the user identity information.
10. The method of claim 1 , further comprising the step of providing an authentication service based on a result arrived at based upon the step of verifying.
11. The method of claim 10 , wherein the user accesses the authentication service by providing an identity token associated with the user.
12. The method of claim 11 , wherein the identity token by which the user accesses the authentication service comprises the contactless identity token provided by the user at step a.
13. The method of claim 11 , wherein the identity token by which the user accesses the authentication service comprises a hank card.
14. The method of claim 1 , further comprising:
providing at least one option for creating a lower level of assurance for the online identity of the user.
15. The method of claim 14 , wherein the at least one option includes verification of social network information provided by the user.
16. The method of claim 14 , wherein the at least one option includes verification of information provided by the user against one or more credit agencies, and the level of assurance is based on a rating for the user providing by the one or more credit agencies.
17. The method of claim 14 , further comprising the step of providing an authentication service based on the high-assurance online identity.
18. The method of claim 17 , wherein the authentication service includes an assurance rating of the user.
19. The method of claim 18 , wherein a level of authorization is provided to the user dependent on the user's assurance rating.
20. The method of claim 17 , wherein the user accesses the authentication service by providing biometric information.
21. The method of claim 20 , wherein the biometric information comprises a facial image of the user.
22. The method of claim 21 , wherein the facial image is obtained automatically at the Internet terminal in response to the user requesting access to the authentication service.
23. The method of claim 1 , wherein the high-assurance online identity comprises an OpenID identity.
24. The method of claim 1 , wherein the Internet terminal comprises one of a desktop computer, a laptop computer, a PDA or a smartphone.
25. A computer program comprising programmable code arranged to perform a method of creating a high-assurance online identity for a user via an Internet terminal, the method comprising:
a. obtaining user identity information from a contactless identity token provided by the user, by means of contactless reader integrated with or connected to the Internet terminal;
b. verifying the user identity information against a remote identification database;
c. obtaining biometric information from the user at the Internet terminal; and
d. verifying the biometric information against known biometric information associated with the contactless identity token;
whereby the high-assurance online identity is created for the user and is associated with the contactless identity token.