IP Library › Granted Patent US 11,425,119
Granted Patent B2
US 11,425,119 · App. 16/494,469 · Granted Aug 23, 2022

Secure age verification system

Inventors: Alastair Graham (London, GB); Charles Grech (Birkirkara, MT); Conrad Micallef (Triq il-Hagar, MT)
Assignee: Age Checked Limited
H04L63/0861G06F21/6254G06Q20/02G06Q20/385G06Q20/3821G06Q20/40G06Q20/4014H04L9/3213H04L63/0807G06Q2220/00
View Patent ↗
Loading inventors, assignments & file history…
Monitor This Case
Get email alerts when status or documents change.
Order Certified Copies
Most orders are placed with the USPTO same day — all within 24 business hours.
Order via The Patent Place →
Pre-filled with this patent's details
Quick Facts
Patent No.
US 11,425,119
App. No.
16/494,469
Filed
Sep 16, 2019
Granted
Aug 23, 2022
Kind
B2
Art Unit
2438
USPC
713/186
Abstract

A computerized method for securely verifying age of users of remote devices interacting with provider resources includes receiving a request for age verification of the user; providing directly to the user device an interface for input of identifying data; receiving, from the user device, identifying data; providing, to a third party verification source, the identifying data; receiving, from the third party verification source, an indication of confirmation of the identifying data; determining, based on the received indication, whether a confidence level has been met; responsive to determining that a confidence level as been met, causing a token indicative of age verification to be generated; providing the token to the user device; providing a positive indication to the provider system, including identification of the token, and anonymizing user-identifiable data.

Claims (68)

1. A computerized method for verifying age of a user communicating from a remote device with a provider system, comprising:

receiving, by a central computer system, from the provider system, data including a request for verification of the user;

determining, based on at least one of the data received from the provider system and data on the remote device, whether the user is age verified;

responsive to determining that the user is age verified, providing an affirmative indication to the provider system;

responsive to determining that the user is not age verified, providing directly to the user device an interface for input of identifying data;

receiving, from the user device, identifying data;

providing, to a third party verification source, the identifying data;

receiving, from the third party verification source, an indication of verification of age based on the identifying data;

causing a token indicative of age verification to be generated;

providing the token to the user device;

providing a positive indication to the provider system, including identification of the token;

filtering identifiable data relating to the user age verification from non-identifiable data relating to the user age verification;

storing the non-identifiable data in a database;

anonymizing the filtered identifiable data; and

storing the anonymized data in the database.

2. The method of claim 1 , further comprising:

generating a transaction identifier associated with the user age verification;

providing the transaction identifier to the third party verification source; and

storing the transaction identifier in association with stored data relating to the user age verification.

3. The computerized method of claim 1 , wherein the providing directly to the user device an interface for input of identifying data comprises generating a modal on a browser of the user device.

4. The method of claim 1 , wherein anonymizing the filtered identifiable data comprises performing a one way hash of the identifiable data.

5. The method of claim 1 , wherein the determining whether the user is age verified further comprises checking for a pre-existing authentication token stored on a browser of the user device.

6. The method of claim 5 , wherein, responsive to a determination that no such pre-existing token exists on the user device, determining at the central computer system, the geo-location of the user device based on IP address.

7. The method of claim 1 , wherein the method further comprises:

receiving data indicative of user identification, including at least a payment card number comprising a predetermined number of digits in sequence;

accessing, by the central computer system, data indicative of ranges of values for selected sub-sequences of digits, each of the ranges of values indicative of a range of values corresponding to ranges designated by one or more card issuers for issue of payment cards;

applying, by the central computer system, the payment card number data to the data indicative of ranges of values, to determine whether or not the payment card data corresponds to one of the designated ranges; and

performing one of the following steps:

responsive to determining, by the central computer system, that the payment card data does not correspond to any one of the designated ranges, returning an indication that age is not verified; and

responsive to determining, by the central computer system, that the payment card data corresponds to one of the designated ranges, returning an indication that age is verified.

8. The method of claim 7 , wherein the accessing comprises accessing locally stored data indicative of valid ranges of sub-sequences.

9. The method of claim 1 , further comprising, responsive to receiving data including identifiable user data, anonymizing the received identifiable data, and comparing the anonymized received identifiable data to the stored anonymized identifiable data to determine whether the received identifiable data was previously received.

10. The method of claim 9 , wherein the anonymizing the identifiable data prior to storage of the identifiable data comprises one-way hashing the identifiable data, and the anonymizing the received identifiable data comprises one-way hashing the received identifiable data, whereby the comparing comprises comparing the hashed received identifiable data to the stored hashed identifiable data.

11. A computer system for verifying age of a user communicating from a remote device with a provider system, comprising:

a central system memory, storing processor-executable instructions; and

one or more central system computer processors in communication with the central system memory, the processor-executable instructions causing the one or more central system computer processors to:

receive from the provider system, data including a request for age verification of the user communicating with the provider system from the remote device;

determine, based on at least one of the data received from the provider system and data on the remote device, whether the user is age verified;

responsive to determining that the user is age verified, provide an affirmative indication to the provider system;

responsive to determining that the user is not age verified, provide directly to the user device an interface for input of identifying data;

receive, from the user device, identifying data;

provide, to a third party verification source, the identifying data;

receive, from the third party verification source, an indication of verification of age based on the identifying data;

cause a token indicative of age verification to be generated;

provide the token to the user device;

provide a positive indication to the provider system, including identification of the token;

filter identifiable data relating to the user age verification from non-identifiable data relating to the user age verification;

store the non-identifiable data in a database;

anonymize the filtered identifiable data; and

store the anonymized data in the database.

12. The system of claim 11 , wherein the instructions further cause the one or more computer processors to:

generate a transaction identifier associated with the user age verification;

provide the transaction identifier to the third party verification source; and

store the transaction identifier in association with stored data relating to the user age verification.

13. The system of claim 11 , wherein the providing directly to the user device an interface for input of identifying data comprises generating a modal on a browser of the user device.

14. The system of claim 13 , wherein the instructions further cause the one or more computer processors to check for a pre-existing authentication token stored on the browser of the user device.

15. The system of claim 14 , wherein, responsive to a determination that no such pre-existing token exists on the user device, the instructions further cause the one or more computer processors to determine, at the computer system, the geo-location of the user device based on IP address.

16. The system of claim 11 , wherein anonymizing the filtered identifiable data comprises performing a one way hash of the identifiable data.

17. The system of claim 11 , wherein the instructions further cause the one or more computer processors to:

receive data indicative of user identification, including at least a payment card number comprising a predetermined number of digits in sequence;

access, by the central computer system, data indicative of ranges of values for selected sub-sequences of digits, each of the ranges of values indicative of a range of values corresponding to ranges designated by one or more card issuers for issue of payment cards;

apply, by the central computer system, the payment card number data to the data indicative of ranges of values, to determine whether or not the payment card data corresponds to one of the designated ranges; and

perform one of the following steps:

responsive to determining, by the central computer system, that the payment card data does not correspond to any one of the designated ranges, returning an indication that age is not verified; and

responsive to determining, by the central computer system, that the payment card data corresponds to one of the designated ranges, returning an indication that age is verified.

18. The system of claim 17 , wherein access by the central computer system comprises accessing locally stored data indicative of valid ranges of sub-sequences.

19. The system of claim 11 , wherein the processor-executable instructions further cause the one or more central system computer processors to, responsive to receiving data including identifiable user data, anonymize the received identifiable data, and compare the anonymized received identifiable data to the stored anonymized identifiable data to determine whether the received identifiable data was previously received.

20. The system of claim 19 , wherein the processor-executable instructions causing the one or more central system computer processors to anonymize the identifiable data prior to storage of the identifiable data comprises the instructions causing the one or more central system computer processors to one-way hash the identifiable data, and the processor-executable instructions causing the one or more central system computer processors to anonymize the received identifiable data comprises the instructions causing the one or more central system computer processors to one-way hash the received identifiable data, whereby the processor-executable instructions causing the one or more central system computer processors to compare comprises the processor-executable instructions causing the one or more central system computer processors to compare the hashed received identifiable data to the stored hashed identifiable data.

Assignments (1)
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded May 27, 2020
From: GRAHAM, ALASTAIR; GRECH, CHARLES; MICALLEF, CONRAD
To: AGE CHECKED LIMITED
Reel/Frame 052759/0192 →
Continuity (2)
Provisional Application 62472300 · Mar 16, 2017
Related Publication 20200092285A1 · Mar 19, 2020
Cited By (1)
US 12,749,342