IP Library Granted Patent US 11,297,056
Granted Patent B1
US 11,297,056 · App. 16/529,507 · Granted Apr 5, 2022

Systems and methods for electronic enrollment and authentication

Inventors: Michael Wayne Lester (Fair Oaks Ranch, TX); Thomas Bret Buckingham (Fair Oaks Ranch, TX)
Assignee: United Services Automobile Association (USAA)
H04L63/0861G06F9/451H04L63/083G06F3/0484
View Patent ↗
Loading inventors, assignments & file history…
Monitor This Case
Get email alerts when status or documents change.
Order Certified Copies
Most orders are placed with the USPTO same day — all within 24 business hours.
Order via The Patent Place →
Pre-filled with this patent's details
Quick Facts
Patent No.
US 11,297,056
App. No.
16/529,507
Granted
Apr 5, 2022
Kind
B1
Abstract

Current embodiments relate to proofing and authenticating digital access and/or control requests. By communicating with various service providers, automatic proofing and/or enrollment for authentication of digital access and/or control services may be provided.

Claims (99)

1. A processor-implemented method, comprising:

receiving a request for enrollment via an application running on a mobile device;

providing a graphical user interface (GUI) requesting only one or more photographs of a photo identification of a user requesting enrollment and the last four digits of a social security number of the user;

receiving enrollment data comprising:

the one or more photographs of the photo identification of the user requesting the enrollment from the mobile device; and

the last four digits of the social security number of the user;

validating the photo identification of the user via digital image processing;

validating that the user requesting the enrollment from the mobile device is associated with the photo identification by:

capturing biometric data of the user; and

comparing the biometric data of the user with known biometric information associated with the photo identification;

providing the enrollment data comprising the one or more photographs of the validated photo identification and the last four digits of the social security number to a first service provider to obtain a first set of relevant enrollment data associated with the enrollment data;

in response to providing the enrollment data, receiving, independent of additional user input, the first set of relevant enrollment data from the first service provider;

in response to receiving the first set of relevant enrollment data, providing the enrollment data, at least a portion of the first set of relevant enrollment data, or both, to a second service provider to obtain a second set of relevant enrollment data associated with the enrollment data, the first set of relevant enrollment data, or both;

in response to providing the enrollment data, the at least a portion of the first set of relevant enrollment data, or both, obtaining, independent of additional user input, a second set of relevant enrollment data associated with the enrollment data, the first set of relevant enrollment data, or both from a second service provider;

calculating a confidence level of the first set of relevant enrollment data and the second set of relevant enrollment data pertaining to the user based upon identifying an amount of data matching, mismatching, or both, data field values between the first set of relevant enrollment data and the second set of relevant enrollment data;

performing data validation by comparing the confidence level with a confidence threshold to determine whether there is sufficient confidence in the first set of relevant enrollment data and the second set of relevant enrollment data; and

enrolling the user in an electronic service based upon the first set of relevant enrollment data and the second set of relevant enrollment data, when the confidence level exceeds a predetermined confidence threshold.

2. The processor-implemented method of claim 1 , comprising:

performing authentication that the mobile device is associated with the user when the confidence level does not exceed the predetermined threshold; and

upon passing the authentication, increasing the confidence level.

3. The processor-implemented method of claim 1 , comprising:

validating ownership of the mobile device by the user, by:

providing a validation request to a mobile device usage service that identifies an owner, user, or both of a particular mobile device; and

receiving a response to the validation request, the response indicating whether the user is an owner, user, or both of the mobile device.

4. The processor-implemented method of claim 1 , comprising:

during the data validation, generating a blockchain ID, wherein the blockchain ID may be used to provide validation that the user is who they say they are.

5. The processor-implemented method of claim 1 , comprising:

defining a subset of the first set of relevant enrollment data and the second set of relevant enrollment data as authentication criteria used to authenticate a requestor.

6. The processor-implemented method of claim 5 , wherein the authentication criteria comprises a combination of at least two of:

authentication criteria that identifies what the requestor knows;

authentication criteria that identifies one or more items the requestor possesses; and

authentication criteria that identifies who the requestor is.

7. The processor-implemented method of claim 6 , wherein the authentication criteria comprises the authentication criteria that identifies who the requestor is and the authentication criteria that identifies who the requestor is comprises an observed pattern of the requestor.

8. The processor-implemented method of claim 5 , comprising:

authenticating the requestor using the authentication criteria; and

upon authenticating the requestor, providing control, access, or both to one or more Internet of Things (IoT) devices.

9. The processor-implemented method of claim 5 , comprising:

providing the authentication criteria to a security to be used in network security rules for access to a network.

10. The processor-implemented method of claim 1 , comprising, in response to determining that the first set of relevant enrollment data and the second set of relevant enrollment data have mismatching data, providing a validation GUI to the user, wherein the user confirms whether the first set of relevant enrollment data, the second set of relevant enrollment data, or neither provide the accurate information relating to the user.

11. A tangible, non-transitory, machine-readable medium,

comprising machine-readable instructions that, when executed by one or more processors of the machine, cause the machine to:

receive a request for enrollment via an application running on a mobile device;

provide a graphical user interface (GUI) requesting enrollment data comprising one or more photographs of a photo identification of a user requesting enrollment and the last four digits of a social security number of the user;

receive the enrollment data comprising the one or more photographs of the photo identification of the user requesting the enrollment from the mobile device and the last four digits of the social security number of the user;

validate the photo identification of the user via digital image processing;

validate that the user requesting the enrollment from the mobile device is associated with the photo identification by:

capturing biometric data of the user; and

comparing the biometric data of the user with known biometric information associated with the photo identification;

provide the enrollment data to a first service provider to obtain a first set of relevant enrollment data associated with the enrollment data;

in response to providing the enrollment data, receive the first set of relevant enrollment data from the first service provider, wherein the first service provider is a provider other than the user;

in response to receiving the first set of relevant enrollment data, provide the enrollment data, at least a portion of the first set of relevant enrollment data, or both, to a second service provider to obtain a second set of relevant enrollment data associated with the enrollment data, the first set of relevant enrollment data, or both;

in response to providing the enrollment data, the at least a portion of the first set of relevant enrollment data, or both, obtain the second set of relevant enrollment data associated with the enrollment data, the first set of relevant enrollment data, or both from the second service provider, wherein the second service provider is a provider other than the user;

calculate a confidence level of the first set of relevant enrollment data and the second set of relevant enrollment data based upon determining an amount of data matching, mismatching, or both, data field values between the first set of relevant enrollment data and the second set of relevant enrollment data;

perform data validation by comparing the confidence level with a confidence threshold to determine whether there is sufficient confidence in the first set of relevant enrollment data and the second set of relevant enrollment data; and

enroll the user in an electronic service based upon the first set of relevant enrollment data and the second set of relevant enrollment data, when the confidence level exceeds a predetermined confidence threshold.

12. The machine-readable medium of claim 11 , comprising machine-readable instructions that, when executed by the one or more processors, cause the machine to:

perform authentication that the mobile device is associated with the user when the confidence level does not exceed the predetermined threshold; and

upon passing the authentication, increase the confidence level.

13. The machine-readable medium of claim 11 , comprising machine-readable instructions that, when executed by the one or more processors, cause the machine to:

identify a location of the mobile device using a global positioning system of the mobile device;

perform authentication that the location of the mobile device is associated with the user when the confidence level does not exceed the predetermined threshold; and

upon passing the authentication, increase the confidence level.

14. The machine-readable medium of claim 11 , comprising machine-readable instructions that, when executed by the one or more processors, cause the machine to:

validate ownership of the mobile device by the user, by:

providing a validation request to a mobile device usage service that identifies an owner, user, or both of a particular mobile device; and

receiving a response to the validation request, the response indicating whether the user is an owner, user, or both of the mobile device.

15. The machine-readable medium of claim 11 , comprising machine-readable instructions that, when executed by the one or more processors, cause the machine to:

during the data validation, generate a blockchain ID, wherein the blockchain ID may be used to provide validation that the user is who they say they are.

16. The machine-readable medium of claim 11 , comprising machine-readable instructions that, when executed by the one or more processors, cause the machine to:

define a subset of the first set of relevant enrollment data and the second set of relevant enrollment data as authentication criteria used to authenticate a requestor; and

either:

authenticate the requestor using the authentication criteria, and upon authenticating the requestor, provide control, access, or both to one or more Internet of Things (IoT) devices; or

provide the authentication criteria to a security to be used in network security rules for access to a network; or both.

17. The machine-readable medium of claim 11 , comprising machine-readable instructions that, when executed by the one or more processors, cause the machine to:

perform data validation in order to determine whether the first set of relevant enrollment data and the second set of relevant enrollment data pertain to the same user.

18. A system, comprising:

a mobile device;

a platform server;

wherein the platform server is configured to:

receive a request for enrollment via an application running on the mobile device;

provide a graphical user interface (GUI) requesting enrollment data comprising one or more photographs of a photo identification of a user requesting enrollment and the last four digits of a social security number of the user;

receive the enrollment data of the user requesting the enrollment from the mobile device;

validate the photo identification of the user via digital image processing;

validate that the user requesting the enrollment from the mobile device is associated with the photo identification by:

capturing biometric data of the user; and

comparing the biometric data of the user with known biometric information associated with the photo identification;

provide the enrollment data to a first service provider, wherein the first service provider is a provider other than the user;

receive, from the first service provider, a first set of relevant enrollment data pertaining to the user, the first set of relevant enrollment data associated with the enrollment data;

obtain a second set of relevant enrollment data pertaining to the user from a second service provider, wherein the second service provider is a provider other than the user;

calculate a confidence level of the first set of relevant enrollment data and the second set of relevant enrollment data based upon an amount of data matching, mismatching, or both, data field values between the first set of relevant enrollment data and the second set of relevant enrollment data;

perform data validation by comparing the confidence level with a confidence threshold to determine whether there is sufficient confidence that the first set of relevant enrollment data matches the second set of relevant enrollment data; and

enroll the user in an electronic service based upon the first set of relevant enrollment data and the second set of relevant enrollment data, when the confidence level exceeds a predetermined confidence threshold.

19. The system of claim 18 , wherein the platform server is configured to:

define a subset of the first set of relevant enrollment data and the second set of relevant enrollment data as authentication criteria used to authenticate a requestor; and

either:

authenticate the requestor using the authentication criteria, and upon authenticating the requestor, provide control, access, or both to one or more Internet of Things (IoT) devices; or

provide the authentication criteria to a security to be used in network security rules for access to a network; or

both.

20. The system of claim 18 , wherein capturing biometric data of the user comprises face capture.

Assignments (2)
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Feb 22, 2022
From: UIPCO, LLC
To: UNITED SERVICES AUTOMOBILE ASSOCIATION (USAA)
Reel/Frame 059064/0449 →
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Aug 7, 2019
From: LESTER, MICHAEL WAYNE; BUCKINGHAM, THOMAS BRET
To: UIPCO, LLC
Reel/Frame 049984/0076 →
Continuity (1)
Provisional Application 62713331 · Aug 1, 2018
Cited By (3)
US 12,425,384 US 12,470,927 US 12,626,261