Systems and methods using a primary account number to represent identity attributes
A system and method is provided to register a user; assign a primary account number (PAN) to the user; create an account; create a unique cipher with keys; link, by a trusted source of identification, the PAN to an attribute of the user and to the account; receive the keys at a user device; remove the keys; generate data by a third-party to request the user to perform a transaction; present the PAN to the third-party; receive a transaction request detail; receive the data at a transaction processor based on a unique identifier of the PAN; identify the user using the unique identifier; authenticate the user; request, by the transaction processor, the device to release a key associated with the transaction request detail; decrypt stored information; and send a response, including the decrypted stored information, from the transaction processor to the third-party, thereby identifying the user.
1. A method using a system having a transaction processor, a trusted platform, a partner entity and a user device of a registered user, the method comprising:
generating, by the trusted platform, a primary account number (PAN) for the user, wherein the PAN uniquely identifies the user;
sending, by the trusted platform, the PAN to the partner entity;
assigning, by the partner entity, the PAN to the user;
creating, by the trusted platform, an account associated with the user;
creating, by the trusted platform, a unique cipher having a set of keys for the PAN;
linking, by the trusted platform, using a trusted source of identification, the PAN to an attribute of the user and to the account associated with the user;
storing, by the trusted platform, the attribute in a database;
encrypting, by the trusted platform, the attribute using the unique cipher and the set of keys;
sending, by the trusted platform, the set of keys to the user device;
receiving, by the user device, the set of keys;
removing, by the trusted platform, the set of keys from the trusted platform;
receiving, by the user device from a third-party, transaction data and a transaction request detail;
presenting, by the user device, the PAN to the third-party;
sending, by the user device, the transaction data to the transaction processor using the PAN;
receiving, by the transaction processor, the transaction data;
identifying, by the trusted platform, the user based on the PAN;
authenticating, by the trusted platform, the user using the linked attribute of the user;
sending, by the transaction processor, a request to the user device to release a key associated with the transaction request detail;
releasing, by the user device, the key;
decrypting, by the transaction processor, the encrypted attribute using the released key;
sending, by the transaction processor, a response including the decrypted attribute, to the third-party; and
granting, by the transaction processor, entry of the identified user to an access point.
2. The method of claim 1 , wherein the response further includes an approval message authenticating identity of the user.
3. The method of claim 1 , further comprising the steps of:
storing, in the database, by the trusted platform, identity of the user; and
performing, by the transaction processor, a hash of the identity of the user.
4. The method of claim 1 , wherein the attribute of the user is biometric data associated with the user.
5. The method of claim 1 , wherein the user device is a physical card storing the PAN.
6. The method of claim 5 , wherein the physical card includes readable information selected from the group consisting of embossed indicia, a recorded magnetic strip, and data stored in an electronic chip.
7. The method of claim 1 , wherein the user device is a mobile computing device including a memory storing the PAN, and a transmitter transmitting the PAN to the transaction processor.
8. The method of claim 7 , wherein the mobile computing device is selected from the group consisting of an electronic fob, an electronic dongle, a cellular telephone, and a smartphone.
9. The method of claim 1 , further comprising the step of:
retrieving, by the transaction processor, additional data about the user from the database.
10. A method using a system having a transaction processor, a trusted platform, a partner entity and a user device of a registered user, the method comprising:
generating, by the trusted platform, a primary account number (PAN) for the user, wherein the PAN uniquely identifies the user;
sending, by the trusted platform, the PAN to the partner entity;
assigning, by the partner entity, the PAN to the user;
creating, by the trusted platform, an account associated with the user;
creating, by the trusted platform, a unique cipher with a set of keys for the PAN;
linking, by the trusted platform, using a trusted source of identification, the PAN to an attribute of the user and to the account associated with the user;
storing, by the trusted platform, the attribute in a database;
encrypting, by the trusted platform, the attribute using the unique cipher and the set of keys;
sending, by the trusted platform, the set of keys to the user device;
receiving, by the user device, the set of keys;
removing, by the trusted platform, the set of keys from the trusted platform;
receiving, by the user device from the third-party, transaction data and a transaction request detail;
presenting, by the user device, the PAN to the third-party;
sending, by the user device, the transaction data to the transaction processor using the PAN;
receiving, by the transaction processor, the transaction data;
identifying, by the trusted platform, the user based on the PAN;
authenticating, by the trusted platform, the user using the linked attribute of the user;
sending, by the transaction processor, a request to the user device to release a key associated with the transaction request detail;
releasing, by the user device, the key;
decrypting, by the transaction processor, the encrypted attribute using the released key; and
performing an action, by the transaction processor, to identify the user, the action selected from the group consisting of sending a response to the third-party, sending an approval message, and storing an identity of the user.
11. The method of claim 10 , wherein the approval message includes authenticating identity of the user.
12. The method of claim 10 , further comprising the steps of:
storing, in the database, by the trusted platform, identity of the user; and
performing, by the transaction processor, a hash of the identity of the user.
13. The method of claim 10 , wherein the attribute of the user is biometric data associated with the user.
14. The method of claim 10 , wherein the user device is a physical card storing the PAN.
15. The method of claim 14 , wherein the physical card includes readable information selected from the group consisting of embossed indicia, a recorded magnetic strip, and data stored in an electronic chip.
16. The method of claim 10 , wherein the user device is a mobile computing device including a memory storing the PAN, and a transmitter transmitting the PAN to the transaction processor.
17. The method of claim 16 , wherein the mobile computing device is selected from the group consisting of an electronic fob, an electronic dongle, a cellular telephone, and a smartphone.
18. The method of claim 10 , further comprising the step of retrieving, by the transaction processor, additional data about the user from the database.