Unified identity verification
Apparatus, systems, and methods are disclosed that operate to receiving an authentication request at a server associated with an authenticating entity from a requesting party responsive to a request being provided to the requesting party by a client terminal associated with an unauthenticated individual purporting to be an individual account owner previously authenticated with the authenticating entity. A token from the client terminal associated with the unauthenticated individual is received, and the token includes information associated with the unauthenticated individual and a user permission authorizing the authenticating entity to share a selected portion of the information with a plurality of selected requesting parties. The server associated with the authenticating entity authenticates the unauthenticated individual as the individual account owner based on, inter alia, matching the token to a pre-registered identity uniquely associated with the individual account owner. Additional apparatus, systems, and methods are disclosed.
1 . A token-based authentication method, the method comprising:
receiving, by a server from a requesting computing system, a request for processing a certain transaction initiated by a user at a client device, the transaction between the user and the requesting computer system, the request comprising an encrypted authentication token, the request indicating that the requesting computing system received the authentication token from the client device, the encrypted authentication token associated with the user;
decrypting the encrypted authentication token;
verifying that the decrypted authentication token matches an expected token value for the user; and
responsive to the verifying of the decrypted authentication token, sending, by the server to the requesting computing system, certain user information authorized to be shared with one or more entities including the requesting computing system, the sending of the certain user information causing the requesting computing system to initiate processing of the transaction based on the certain user information, without communication of the certain user information between the client device and the requesting computing system.
2 . The method of claim 1 , wherein the authentication token indicates that the user of the client device is authenticated to initiate the transaction with the requesting computing system; and wherein the authentication token is provided to the client device prior to receiving the request from the requesting computing system.
3 . The method of claim 1 , wherein the sending of the certain user information causing the requesting computing system to initiate processing of the transaction comprises further causing the requesting computing system to perform the authentication of the user independent of communication of security credentials of the user between the computing system and the client device.
4 . The method of claim 1 , wherein the authentication token is associated with a time interval over which the authentication token is valid; and wherein the verifying of the authentication token comprises determining that the request was received during the time interval.
5 . The method of claim 1 , wherein the authentication token is associated with a number of uses for the authentication token for initiating transactions; wherein the verifying of the authentication token comprises determining that the authentication token has not been used more than the number of uses to initiate transactions.
6 . The method of claim 1 , wherein the server is configured to transfer funds, associated with the transaction, from a user account of the user in response to the authentication of the client device.
7 . The method of claim 1 , further comprising:
verifying information in the request to determine that the requesting computing system is authorized to receive the authentication token.
8 . The method of claim 1 , further comprising: updating, by the computing system based on communication with the client device, user information to specify additional information that the computing system is authorized to share.
9 . A server configured to perform token-based authentication, the server comprising:
a non-transitory memory storing instructions; and
a processor configured to execute the instructions to cause the server to:
receive, from a requesting computing system, a request for processing a certain transaction initiated by a user of a client device, the transaction between the user and the requesting computing system, the request comprising an encrypted authentication token associated with the user, the request indicating that the requesting computing system received the authentication token from the client device;
decrypting the encrypted authentication token;
determine, based at least on a verification that the decrypted authentication token matches an expected token value for the user, that the user is authenticated to initiate transactions with a user account of the user; and
in response to the determination that the user of the client device is authenticated to initiate transactions, communicate to the requesting computing system certain user information authorized to be shared with one or more entities including the requesting computing system, the communicating of the certain user information causing the requesting computing system initiate the transaction with the server, independent of communication of any user information between the client device and the requesting computing system.
10 . The server of claim 9 , wherein the authentication token is provided to the client device prior to receiving the request from the requesting computing system.
11 . The server of claim 9 , wherein the communicating of the certain user information causing the requesting computing system to initiate the transaction comprises further causing the requesting computing system to perform the authentication of the user independent of communication of security credentials of the user account between the computing system and the client device.
12 . The server of claim 9 , wherein the authentication token is associated with a time interval over which the authentication token is valid; and wherein the verification of the authentication token comprises determining that the request was received during the time interval.
13 . The server of claim 9 , wherein executing the instructions further causes the server to update, based on at least on communication with the client device, user information to specify additional information that the server is authorized to share.
14 . A non-transitory machine-readable medium having instructions stored thereon, the instructions executable to cause performance of operations comprising:
accessing a request for initiating a transaction from a user at a client device, the request comprising an encrypted authentication token, the request indicating that a requesting computing system received the authentication token from the client device;
decrypting the encrypted authentication token;
determining, based at least on a verification that the decrypted authentication token matches an expected token value for the user, that the user is authenticated for initiating transaction involving a user account of a user; and
in response to the determination that the user of the client device is authenticated to initiate transactions, communicating to the requesting computing system certain user information authorized to be shared with one or more entities including the requesting computing system, the communicating of the certain user information causing the requesting computing system to initiate the transaction, without the requesting computing system receiving the certain user information.
15 . The non-transitory machine-readable medium of claim 14 , wherein the authentication token is provided to the client device prior to receiving the request from the requesting computing system.
16 . The non-transitory machine-readable medium of claim 14 , wherein the communicating of the certain user permission information causing the requesting computing system to initiate the transaction comprises further causing the requesting computing system to perform the authentication of the user independent of communication of security credentials of the user account between the computing system and the client device.
17 . The non-transitory machine-readable medium of claim 14 , wherein the authentication token is associated with a time interval over which the authentication token is valid; and wherein the verification of the authentication token comprises determining that the request was received during the time interval.