Systems and methods for online third-party authentication of credentials

1. A computer-implemented method for online authentication of online attributes, the method including:

receiving, at a server over an electronic network, an authentication request from a relying party, the authentication request including identity information to be authenticated and credential information to be authenticated;

determining, by the server, whether a user account is associated with the received identity information by accessing an internal database;

transmitting, by the server over the electronic network to a user associated with the user account, a request for authentication data;

receiving, at the server over the electronic network, authentication data associated with the user, wherein the authentication data includes a status identifier indicating a current status of an assurance level associated with the identity information and the credential information of the user, wherein the assurance level relates to a degree of confidence that the identity information and the credential information associated with the user are accurate, wherein different assurance levels have different authentication requirements, and wherein the status identifier is selected from a group including pending, active, suspended, and revoked, wherein the status identifier is (i) set to suspended while a revocation request is being evaluated for authenticity, and (ii) set to either active or revoked based on whether the revocation request is determined to be authentic or not, based on the evaluation;

transmitting, by the server over the electronic network to a verification data source server, authentication data associated with the user; and

receiving, at the server over the electronic network, an authentication result from the verification data source server for the user associated with authentication data.

2. The method of claim 1 , further comprising:

storing, by the server, the authentication data in the user data of the user account associated with the user.

3. The method of claim 1 , further comprising:

encrypting, by the server, the authentication data in the user data of the user account associated with the user.

4. The method of claim 1 , further comprising:

transmitting, by the server, the authentication result of the authentication request to the relying party.

5. The method of claim 1 , further wherein the authentication data further includes a lifetime value, wherein the lifetime value identifies a length of time the authentication data is valid.

6. The method of claim 1 , further comprising:

transmitting, by the server, an assurance level request for a one-time-password (“OTP”) when the determined assurance level is greater than or equal to a predetermined threshold.

7. The method of claim 6 , wherein the OTP request is conducted by at least one of an interactive voice response (“IVR”) method and a short message service (“SMS”) method.

8. A system for online authentication of online attributes, the system including:

a data storage device that stores instructions system for online authentication of online attributes; and

a processor configured to execute the instructions to perform a method including:

receiving, over an electronic network, an authentication request from a relying party, the authentication request including identity information to be authenticated and credential information to be authenticated;

determining whether a user account is associated with the received identity information by accessing an internal database;

transmitting, over the electronic network to a user associated with the user account, a request for authentication data;

receiving, over the electronic network, authentication data associated with the user, wherein the authentication data includes a status identifier indicating a current status of an assurance level associated with the identity information and the credential information of the user, wherein the assurance level relates to a degree of confidence that the identity information and the credential information associated with the user are accurate, wherein different assurance levels have different authentication requirements, and wherein the status identifier is selected from a group including pending, active, suspended, and revoked, wherein the status identifier is (i) set to suspended while a revocation request is being evaluated for authenticity, and (ii) set to either active or revoked based on whether the revocation request is determined to be authentic or not, based on the evaluation;

transmitting, over the electronic network to a verification data source server, authentication data associated with the user; and

receiving, over the electronic network, an authentication result from the verification data source server for the user associated with authentication data.

9. The system according to claim 8 , wherein the processor is further configured to execute the instructions to perform the method including:

storing the authentication data in the user data of the user account associated with the user.

10. The system according to claim 8 , wherein the processor is further configured to execute the instructions to perform the method including:

encrypting the authentication data in the user data of the user account associated with the user.

11. The system according to claim 8 , wherein the processor is further configured to execute the instructions to perform the method including:

transmitting the authentication result of the authentication request to the relying party.

12. The system according to claim 8 , further wherein the authentication data further includes a lifetime value, wherein the lifetime value identifies a length of time the authentication data is valid.

13. The system according to claim 8 , wherein the processor is further configured to execute the instructions to perform the method including:

transmitting an assurance level request for a one-time-password (“OTP”) when the determined assurance level is greater than or equal to a predetermined threshold.

14. The system according to claim 13 , wherein the OTP request is conducted by at least one of an interactive voice response (“IVR”) method and a short message service (“SMS”) method.

15. A non-transitory computer-readable medium storing instructions that, when executed by a computer, cause the computer to perform a method for online authentication of online attributes, the method including:

receiving, at a server over an electronic network, an authentication request from a relying party, the authentication request including identity information to be authenticated and credential information to be authenticated;

determining, by the server, whether a user account is associated with the received identity information by accessing an internal database;

transmitting, by the server over the electronic network to a user associated with the user account, a request for authentication data;

receiving, at the server over the electronic network, authentication data associated with the user, wherein the authentication data includes a status identifier indicating a current status of an assurance level associated with the identity information and the credential information of the user, wherein the assurance level relates to a degree of confidence that the identity information and the credential information associated with the user are accurate, wherein different assurance levels have different authentication requirements, and wherein the status identifier is selected from a group including pending, active, suspended, and revoked, wherein the status identifier is (i) set to suspended while a revocation request is being evaluated for authenticity, and (ii) set to either active or revoked based on whether the revocation request is determined to be authentic or not, based on the evaluation;

transmitting, by the server over the electronic network to a verification data source server, authentication data associated with the user; and

receiving, at the server over the electronic network, an authentication result from the verification data source server for the user associated with authentication data.

16. The computer-readable medium according to claim 15 , further comprising:

storing, by the server, the authentication data in the user data of the user account associated with the user.

17. The computer-readable medium according to claim 15 , further comprising:

encrypting, by the server, the authentication data in the user data of the user account associated with the user.

18. The computer-readable medium according to claim 15 , further comprising:

transmitting, by the server, the authentication result of the authentication request to the relying party.

19. The computer-readable medium according to claim 15 , further wherein the authentication data further includes a lifetime value, wherein the lifetime value identifies a length of time the authentication data is valid.

20. The computer-readable medium according to claim 15 , further comprising:

transmitting, by the server, an assurance level request for a one-time-password (“OTP”) when the determined assurance level is greater than or equal to a predetermined threshold.