System and method for protecting the privacy of identity and financial information of the consumer conducting online business
View Patent ↗The migration of identity documents, such as driving licenses, from physical documents to electronic documents creates new problems for those seeking to verify the identity of an individual based upon the electronic document they provide. However, the inventors have established a means of binding electronic documents and electronic representations of physical documents to individuals at issuance of the document(s). Accordingly, the inventors address identity verification by providing to those seeking to verify the individual's identity data allowing them to verify the presented electronic ID document. For example, a police officer requesting a driving license can obtain on their own electronic device through the methods of the invention the issued driving license associated with identifier information on the license provided by the individual. As such tampering with the license to change a name, date of birth, photo etc. will result in a visible mismatch to the police officer in comparing them.
1. A method of providing verification of an individual to a third party by providing to the third party a representation of an originally issued identity document associated with information provided by the individual during the verification process comprising:
providing to a first electronic device first credential information relating to the individual associated with the first electronic device; the first credential information authorizing submission of a first message to a remote server;
transmitting first data from the first electronic device to the remote server, the first data comprising an authorization to submit information derived from the originally issued identity document to a second device associated with the third party;
transmitting second data from the first electronic device to the remote server, the second data comprising second credential information needed to complete independent verification of the first data by the remote server;
the remote server cryptographically combining the first data and the second data to generate a result and using the result to locate a matching verification entry in a database or similar data storage entity;
in response to locating the match of verification entry, delivering third data by the remote server to a second electronic device associated with the third party, the third data consisting of the information derived from the originally issued identity document required by the third party; and
denying delivering the third data when the matching verification entry cannot be located.
2. The method according to claim 1 wherein:
the first data is comprised of at least one of:
an image of the originally issued identity document;
a digital representation of the originally issued identity document;
a privacy policy compliant redacted image of the originally issued identity document;
a privacy policy compliant redacted digital representation of an originally issued identity document; and
a predetermined portion of data stored by the issuer of the originally issued identity document.
3. The method according to claim 1 wherein:
The second data is at least one of:
cipher data stored within one or more identity modules on the first device; and
a unique cipher key stored on the first device.
4. The method according to claim 1 wherein:
the third data is at least one of:
an image of the originally issued identity document;
a digital representation of the originally issued identity document;
a privacy policy compliant redacted image of the originally issued identity document;
a privacy policy compliant redacted digital representation of an originally issued identity document
a predetermined portion of data stored by the issuer of the originally issued identity document;
a reformatted version of a predetermined portion of data obtained from an image of the originally issued identity document,
a reformatted version of a predetermined portion of data obtained from a digital representation of the originally issued identity document; and
a reformatted version of a predetermined portion of data stored by the issuer of the originally issued identity document.
5. The method according to claim 1 wherein:
the method terminates upon the occurrence of one of:
the remote server does not acknowledge receipt of the first data within a predetermined time period after the first electronic device transmits the first data; and
the remote server fails to find a matching verification entry in the database or similar data storage entity.
6. The method according to claim 1 wherein:
communication to the remote server from the first electronic device associated with the individual and from the remote server to the second device associated with the third party are encrypted with ciphering processes exploiting cipher data stored within subscriber identity modules on the first or second devices.
7. The method according to claim 1 wherein:
the verification entries stored in the database or similar data storage entity consist of at least one of:
information stored by an issuer of the first data in a corresponding database;
cryptographically secured representations of the first data verified by the issuer of the originally issued identity document; and
cryptographically secured representations of the first data verified by another authority.
8. The method according to claim 1 wherein:
the database or similar storage entity consists of at least one of:
a public or private blockchain, public or private asset chain, or other public or private immutable distributed ledger technology;
a set of public or private asset chains; and
any other public or private immutable distributed ledger technology.
9. A method of providing identity payment authorization information by an individual to a third party comprising:
providing to a first electronic device first credential information relating to the individual associated with the first electronic device; the first credential information authorizing submission of a first message to a remote server;
the first electronic device cryptographically creating one or more randomly generated representations of financial account information that represent actual financial account numbers and other financial account identifying information required for transaction in progress;
transmitting first data from the first electronic device to the remote server, the first data comprising an authorization to submit information derived from the originally issued identity document and financial account information to both a server operated by payment provider with which the individual has an account and to a second device associated with a third party that requires payment and/or, identity information;
transmitting second data from the first electronic device to the remote server, the second data comprising second credential information needed to complete independent verification of the first data by the remote server;
the remote server cryptographically combining first data and second data to generate a result and using the result to locate a matching verification entry in a database or similar data storage entity;
in response to locating the matching verification entry, delivering third data from the remote server to the server operated by a the payment provider, third data consisting of identification information, information to identify the selected payment account, and the one or more randomly generated representations of account information as actual account numbers or other account related details for the duration of the transaction;
transmitting fourth data from the first device associated with the individual to a second electronic device associated with the third party, the fourth data consisting of the information derived from the originally issued identity document required by the third party and the one or more randomly generated representations of account information as actual account numbers or other account related details;
denying delivering the third data and the fourth data when the matching verification entry cannot be located;
upon completion of the transaction, transmitting fifth data from the remote server to the first electronic device associated with the individual, the second electronic device associated with the third party, and the server associated with the payment processor, the fifth data consisting of a record of the completed transaction; and
the remote server cryptographically combining fifth data and second data to generate a sixth data and using the sixth data to write an entry in the database or similar data storage entity;
wherein the payment provider comprises at least one of: a financial institution, a payment service, a payment facilitator that interacts with such financial institution or payment service on behalf of the individual.
10. The method according to claim 9 wherein:
the first data consists of:
information identifying the financial account to be used for this transactions along with the randomly generated representations of financial account information that will represent the actual financial information for this transaction;
and also includes at least one of:
an image of the originally issued identity document;
a digital representation of the originally issued identity document;
a privacy policy compliant redacted image of the originally issued identity document;
a privacy policy compliant redacted digital representation of an originally issued identity document; and
a predetermined portion of data stored by the issuer of the originally issued identity document.
11. The method according to claim 9 wherein:
The second data is at least one of:
cipher data stored within one or more identity modules on the first device; and
a unique cipher key stored on the first device.
12. The method according to claim 9 wherein:
the third data consists of:
evidence that the individual requesting access to a financial account has presented authentic identity information to satisfy the financial institution's requirements for identity verification;
and also includes:
information identifying the financial account used for transactions along with the randomly generated representations of financial account information representing the actual financial information for this transaction;
and also includes at least one of:
an image of the originally issued identity document;
a digital representation of the originally issued identity document;
a privacy policy compliant redacted image of the originally issued identity document;
a privacy policy compliant redacted digital representation of an originally issued identity document; and
a predetermined portion of data stored by the issuer of the originally issued identity document.
13. The method according to claim 9 wherein:
the fourth data consists of:
the randomly generated representations of financial account information used for the transaction; and
at least one of:
an image of the originally issued identity document;
a digital representation of the originally issued identity document;
a privacy policy compliant redacted image of the originally issued identity document;
a privacy policy compliant redacted digital representation of an originally issued identity document; and
a predetermined portion of data stored by the issuer of the originally issued identity document.
14. The method according to claim 9 wherein:
the fifth data consists of:
a transaction identifier generated by the remote server uniquely representing the transaction;
and at least one of:
an image of the originally issued identity document;
a digital representation of an originally issued identity document;
a privacy policy compliant redacted image of the originally issued identity document;
a privacy policy compliant redacted digital representation of an originally issued identity document;
a predetermined portion of data stored by the issuer of the originally issued identity document;
information delivered in the third data identifying the financial account used in this transaction; and
the randomly generated representations of financial account information used for the transaction.
15. The method according to claim 9 wherein:
the method terminates upon the occurrence of one of:
the remote server does not acknowledge receipt of first data within a predetermined time period after first device transmits the first data;
the remote server fails to find a matching verification entry in the database or similar data storage entity;
the payment provider does not acknowledge receipt of third data within a predetermined time period after the remote server transmits the third data; or
the payment provider rejects the request represented by third data for any reason.
16. The method according to claim 9 wherein:
communications to the remote server from the first device associated with the individual and/or from the remote server to the second device associated with the third party and/or from the remote server to the payment provider are encrypted with ciphering processes exploiting cipher data stored within subscriber identity modules on the first or second devices.
17. The method according to claim 9 wherein:
the verification entries stored in the database or similar data storage entity consist of at least one of:
information stored by an issuer of the information represented in the first data in its own database;
cryptographically secured representations of the information represented in the first data verified by the issuer of the originally issued identity document; and
cryptographically secured representations of the information represented in the first data verified by another authority.
18. The method according to claim 9 wherein:
the database or similar storage entity consists of at least one of:
a public or private blockchain, public or private asset chain, or other public or private immutable distributed ledger technology;
a set of public or private asset chains; and
any other public or private immutable distributed ledger technology.