Method and system for online third-party authentication of identity attributes
A method for online authentication includes receiving membership authenticating information specific to members of a particular affiliation from the members and from one or more remote databases. The information is aggregated and stored in an aggregate database. An individual is authenticated, via a widget at least one of integrated into, and accessible by, at least one of a mobile application and a website of a provider of at least one of a particular program and a particular service, as a member of the particular affiliation based on a comparison of authenticating indicia provided online by the individual and the information stored in at least one of the aggregate database and the remote databases. Digital credentials are provided to the individual for access to the at least one of the particular program and the particular service when the individual is authenticated. The credentials include a unique identifier, a login and password.
1. A method for online authentication, comprising:
providing a digital credential to a device of a user, authenticated as a member of a particular affiliation, for access to at least one of a particular program and a particular service of a first relying party of a network of relying parties, and for access, to at least one of a particular program and a particular service of a second relying party of the network of relying parties, wherein the digital credential is usable with respect to any and all participating parties in the network of relying parties from a single session during which the digital credential is received,
wherein the user was authenticated as a member of the particular affiliation based on one or more of user authenticating information for authenticating an identity of the user, membership authenticating information specific to members of the particular affiliation, or device authenticating information regarding the device associated with the user.
2. The method of claim 1 ,
wherein the digital credential includes a credential level, wherein the credential level is associated with a permitted value and/or a permitted risk for a specific transaction by the user, and
wherein the method further comprises:
receiving additional information, including one or more of additional user authenticating information, additional membership authenticating information, or additional device authenticating information, from the user; and
modifying, based on a verification of the received additional information, the credential level of the digital credential of the user to allow a requested transaction by the user with a higher value and/or risk.
3. The method of claim 1 , further comprising:
authenticating the first relying party associated with the at least one of a particular program and the particular service via at least one widget that is at least one of integrated into, and accessible by, at least one of a mobile application and a website of the first relying party, wherein the at least one widget comprises at least one of a desktop widget, a mobile widget, a web widget, a television set widget, and a hybrid widget.
4. The method of claim 1 , wherein the user was further authenticated using a white list and a black list, the white list specifying users to be provided further consideration by the authenticating, and the black list specifying users to be denied further consideration by the authenticating.
5. The method of claim 4 , wherein the black list comprises identities of previously denied users and users known to have perpetrated a previous fraud.
6. The method of claim 4 , wherein the black list comprises identities of users who have been convicted of a particular list of crimes.
7. The method of claim 4 , wherein a user is denied the digital credential when the user is named on the black list, irrespective of whether the user is the member of the particular affiliation, based on a merchant provided preference.
8. The method of claim 4 , wherein the white list comprises known members of the affiliation that are in good standing based on certain criteria.
9. The method of claim 3 , further comprising allowing monetary transactions to be performed through the at least one widget and between the user and any one of the network of two or more relying parties providing the at least one of the particular program and the particular service using the digital credential.
10. A system for online authentication, the system comprising:
a data storage device that stores instructions for online authentication; and
one or more processors configured to execute the instructions to perform a method including:
providing a digital credential to a device of a user, authenticated as a member of a particular affiliation, for access to at least one of a particular program and a particular service of a first relying party of a network of relying parties, and for access, to at least one of a particular program and a particular service of a second relying party of the network of relying parties, wherein the digital credential is usable with respect to any and all participating parties in the network of relying parties from a single session during which the digital credential is received,
wherein the user was authenticated as a member of the particular affiliation based on one or more of user authenticating information for authenticating an identity of the user, membership authenticating information specific to members of the particular affiliation, or device authenticating information regarding the device associated with the user.
11. The system of claim 10 , wherein the user was further authenticated as a member of the particular affiliation by comparing the user authenticating information against a list of pre-approved authenticating indicia.
12. The system of claim 10 ,
wherein the digital credential includes a credential level, wherein the credential level is associated with a permitted value and/or a permitted risk for a specific transaction by the user, and
wherein the method further comprises:
receiving additional information, including one or more of additional user authenticating information, additional membership authenticating information, or additional device authenticating information, from the user; and
modifying, based on a verification of the received additional information, the credential level of the digital credential of the user to allow a requested transaction by the user with a higher value and/or risk.
13. The system of claim 10 , wherein the method further includes:
authenticating the first relying party associated with the at least one of a particular program and the particular service via at least one widget that is at least one of integrated into, and accessible by, at least one of a mobile application and a website of the first relying party, wherein the at least one widget comprises at least one of a desktop widget, a mobile widget, a web widget, a television set widget, and a hybrid widget.
14. The system of claim 10 , wherein the user was further authenticated as a member of the particular affiliation by authenticating the user using a white list and a black list, the white list specifying users to be further considered for authentication, and the black list specifying users to be denied further consideration for authentication.
15. The system of claim 14 , wherein the black list comprises identities of previously denied users and users known to have perpetrated a previous fraud.
16. The system of claim 14 , wherein the black list comprise identities of users who have been convicted of a particular list of crimes.
17. The system of claim 14 , wherein a user is denied the digital credential when the user is named on the black list, irrespective of whether the user is the member of the particular affiliation, based on a merchant provided preference.
18. The system of claim 14 , wherein the white list comprises known members of the affiliation that are in good standing based on certain criteria.
19. The system of claim 13 , wherein the at least one widget allows monetary transactions to be performed between the user and any one of the network of two or more relying parties providing the at least one of the particular program and the particular service using the digital credential.
20. A non-transitory computer-readable storage medium having computer-executable program code embodied therein that causes a computer system to perform a method comprising:
providing a digital credential to a device of a user, authenticated as a member of a particular affiliation, for access to at least one of a particular program and a particular service of a first relying party of a network of relying parties, and for access, to at least one of a particular program and a particular service of a second relying party of the network of relying parties, wherein the digital credential is usable with respect to any and all participating parties in the network of relying parties from a single session during which the digital credential is received,
wherein the user was authenticated as a member of the particular affiliation based on one or more of user authenticating information for authenticating an identity of the user, membership authenticating information specific to members of the particular affiliation, or device authenticating information regarding the device associated with the user.