One valuable object that many people carry on a day-to-day basis is a wallet. The wallet contains items of financial value, such as cash, credit cards and other payment instruments. It additionally may include personal information, such as identification cards, which people use every day to verify their identities at various locations and/or establishments. However, the wallet has not caught up to the digital age. In particular, digital replacements of identification cards may in some cases be more susceptible to fraud if they are easy to counterfeit, copy, or duplicate, or may otherwise be more difficult to verify as authentic.
Validated identification (“ID”) systems and methods as discussed in the present disclosure provide individuals with the ability to carry and present a validated digital ID for everyday use, for example as part of a digital wallet, much as one uses a driver's license or other form of ID in a physical wallet. In one embodiment, the validated ID system validates a digital form of ID (such as a scanned driver's license) for an individual, and provides a validated ID token to the individual for use, for example, with a mobile computing device (such as a smartphone). Thus, the digital form of ID, representing the actual ID of the individual, may be associated with the validated ID token, which indicates that the digital form of ID is validated (e.g., the digital form of ID is a validated digital ID). The validated ID token may then be provided or presented by the individual at various service providers/locations (such as retailers, restaurants, etc.) as a form of identification. The service providers/locations can request verification by the validated ID system of the individual's identity through use of the provided validated ID token. In some embodiments, the validated ID token may be refreshed, automatically or manually by request, on a periodic basis to increase security, prevent fraudulent use, and/or assure service providers of the validity of the individual's digital ID. In some embodiments, to provide greater security and trust, the validated ID system may provide the validated ID token to the individual over a first network, while providing verification of the validated ID token to the service provider/location over a second network (e.g., “out-of-band” verification or authentication).
An individual may find having a digital identification that is accepted at various participating service providers, establishments, and locations a convenient way to provide proof of her identity when asked or required. As an example, consider an individual asked to present a valid form of ID (e.g., to show proof of age) to gain entry into a nightclub with a minimum age requirement. The individual might carry, for example on a smartphone or other mobile computing device which the individual typically carries everywhere, a digital ID that has been validated by the validated ID system. The bouncer may have a computing device (such as a smartphone or a computer) available at the nightclub entry point, configured to read an ID token, and request verification of the ID token from the validated ID system. Thus, the individual can present her digital ID to the bouncer at the nightclub instead of a physical ID card (such as a driver's license). In some cases, the bouncer may visually inspect the digital ID and determine that the ID token is trustworthy (as might be indicated, for example, by a verification badge) and allow the individual to enter. However, for added security, the bouncer may use his computing device to read the individual's ID token, for example by scanning an image associated with the ID token or by wirelessly receiving some or all of the ID token (such as a unique code or digital certificate) from the individual's smartphone. The bouncer's computing device may then submit the ID token to the validated ID system for verification. In this example, the validated ID system may then determine whether the ID token is a validly issued and/or non-expired validated ID token, and provides a verification status to the bouncer's computing device. Depending on the verification status the bouncer may decide whether to allow the individual to enter.
As part of the “out-of-band” authentication process for even greater security, the validated ID system may communicate with (e.g. provide the validated ID token to) the individual's smartphone over a first network, and the bouncer's computing device may be configured to communicate with (e.g. send the validated ID token to and receive verification status from) the validated ID system over a second network distinct from the first network. Thus, among other benefits, a potential fraudster's attempt to commit fraud may be frustrated because the fraudster would have to intercept the validated ID token across two networks in communication with two separate computing devices.
One embodiment may include one or more computer processors and a storage device storing software instructions configured for execution by the one or more computer processors. In one embodiment, the software instructions are configured to cause the computing system to access an image of a driver license of a consumer, extract information regarding the consumer from the driver license image, the information including at least a name of the consumer and a photograph of the consumer, transmit the driver license image to a document authentication service with a request to validate authenticity of the driver license, receive from the document authentication service an indication of whether the driver license is valid, provide one or more authentication questions to the consumer, wherein responses to the one or more authentication questions are usable to determine whether the consumer is the consumer named in the driver license image, receive responses to the one or more authentication questions, and determine, based on the responses, whether the consumer is the consumer named in the driver license image. In one embodiment, in response to determining that both the driver license is valid and that the consumer is the consumer named in the driver license image, the computing system generates a digital identity including one or more images and/or user interfaces configured for display on a mobile computing device, the digital identity including the photograph of the consumer or another photograph of the consumer, at least some of the information extracted from the driver license image, an indication that the at least some of the information extracted from the driver license image was extracted from a validly issued driver license, and an indication that the identity of the consumer has been validated.
Embodiments of the disclosure will now be described with reference to the accompanying figures, wherein like numerals refer to like elements throughout. The terminology used in the description presented herein is not intended to be interpreted in any limited or restrictive manner, simply because it is being utilized in conjunction with a detailed description of certain specific embodiments of the disclosure. Furthermore, embodiments of the disclosure may include several novel features, no single one of which is solely responsible for its desirable attributes or which is essential to practicing the embodiments of the disclosure herein described.
Beginning at step (1), the individual can request validation of a digital ID, for example by providing the digital ID to the validated ID system. The digital ID may be provided in many different forms. For example, according to one embodiment, the individual may scan a physical form of identification (e.g., a driver's license, a passport, a government-issued form of ID, an identification card, or any other form of ID) into a digital data format (e.g., an image file, a document, etc.). Such scanning may be performed, for example, by a camera on the individual's computing device (e.g., a smartphone camera), or by any type of image scanning device capable of scanning the image of an object into a digital format. In other embodiments, the digital ID may comprise a form of ID already in a digital format (e.g., a form of ID issued or provided to the individual originally and/or only issued in digital format) or the individual may manually provide the digital ID information, such as by typing in a driver's license number and related information.
At step (2), the validated ID system validates the digital ID. The validated ID system may validate the digital ID by, for example, accessing one or more data sources (such as the data sources 166 as shown in
In some embodiments, the validated ID system may validate information regarding the individual, such as the individual's date of birth (“DOB”), by referencing data such as the individual's credit report and/or public records, such as a birth certificate. Such age validation or authentication may be performed as part of the digital ID validation process, or as a separate process. Age validation may also be performed by the validated ID system as part of the verification process(es) described herein.
If the validated ID system determines that a validated ID token has already been generated and associated with the consumer profile data, the validated ID system may generate a new validated ID token (e.g. refresh the existing or previous validated ID token). Once generated and/or refreshed, the validated ID token may be associated with the consumer profile data associated with the individual, and stored, for example, in a validated identification data store for later use in the identity verification processes described herein.
The validated ID token may be provided by the validated ID system in myriad formats. In one embodiment, the validated ID token comprises a verification badge, such as a unique image generated dynamically and/or randomly by the validated ID system for the individual. In some embodiments, the validated ID token comprises an alphanumeric code (e.g., a data text string of characters). In some embodiments, the validated ID token comprises a cookie, a “super cookie,” a digital certificate, or other form of digital authentication which may be used to uniquely and securely identify and/or verify the individual's digital ID. In some embodiments, the validated ID token comprises a time stamp (e.g., a date and/or time) indicating when the validated ID token was issued and/or last validated. In some embodiments, the validated ID token comprises a geographic location indicator (e.g., Global Positioning System (“GPS”) coordinates, street, city, state, and/or any other information which provides an indication of geographic location) indicating a location from which the validated ID token was last validated. Such location information may reduce risk of a fraudster copying a digital ID (e.g., photographing or taking a screen shot of a digital ID on another user's device) since the fraudster likely isn't at the location at which the validated ID token was authenticated by the consumer (and which would be included in the photograph or screen shot of the consumers digital ID).
The validated ID token may also comprise any combination of the examples described herein (e.g., a verification badge and a digital certificate; or a verification badge and GPS coordinates; etc.). The validated ID token may also be encrypted. In some embodiments, some or all portions of the validated ID token (e.g., a verification badge) are configured for display via a user interface on the individual's computing device. In some embodiments, some or all portions of the validated ID token (e.g., a digital certificate) may additionally, or alternatively, be configured for digital transmission between one or more computing devices (e.g., via a wired or wireless connection including Ethernet connections, radio, infrared, Bluetooth, Wi-Fi, near field communication (“NFC”), text messaging, short message service (“SMS”), cellular networks, etc.). In some embodiments the validated ID token is refreshed or updated automatically on a periodic basis by the validated ID system, and the refreshed validated ID token is pushed to the individual's computing device. Alternatively or in combination with the above, the individual may manually trigger a refresh of the validated ID token.
In some embodiments, the validated ID token may be issued to or associated with the individual's computing device(s). The validated ID system may also be configured to track and record usage data related to the validated ID token (e.g. by logging or recording when a request to verify the validated ID token is received by the validated ID system). The usage data may be recorded, for example at the validated identification data store 108, and used by the validated ID system to determine and charge a periodic fee to the individual for use of the digital identification associated with the validated ID token.
Once the digital ID has been validated and the validated ID token has been generated, at step (3) the validated ID system may issue the validated ID token to the individual and/or the individual's computing device. In the event that the validated ID system is unable to determine a match of the personally identifying information of the digital ID to the accessed consumer profile data, the validated ID system may instead provide an indication to the individual that a digital ID could not be validated. In that case, the individual may attempt to submit a different form of digital ID, for example, by scanning a different identification card or rescanning the submitted digital ID and attempt to try again.
Continuing to step (4), the individual may present the validated digital ID at various service providers, retailers, locations, establishments, and the like. The individual may present or provide the validated ID in various different ways. For example, the individual may show an image of the validated digital ID to the service provider which may then visually inspect the validated digital ID to determine whether the digital ID of the individual is valid. For example, the validated digital ID may display a badge, an image, or a logo which provides a visual indication that the digital ID has been validated by the validated ID system. The badge, image, or logo may, for example, be a trusted or recognized image which may only displayed on a trusted device carrying the validated digital ID, or some other form of visual indication which participating service providers may recognize as an indication that the digital ID is valid for the individual. The digital ID may display, for example, a photograph of the individual (as typically shown in an identification card) as well as other personally identifying information in addition to the verification badge, image, or logo. One example of a validated digital ID is shown in an example user interface in
In other embodiments, the individual may provide the validated digital ID to the service provider over a wireless or wired connection such as infrared, radio, Bluetooth, Wi-Fi, NFC, text messaging, SMS, cellular networks, etc., instead of, or in conjunction with, presenting a visual user interface of the digital ID. Thus, for example, the individual may simply digitally transmit the digital ID to a service provider's computing device (e.g., by placing his/her computing device in the proximity of the service provider's computing device, by “bumping” his/her computing device with the service provider's computing device, by docking, connecting, or plugging in his/her computing device to the service provider's computing device, and the like) to transmit some or all portions or components of the validated digital ID and/or validated ID token. The service provider's computing device may be configured to read or receive the validated ID token or a portion of the validated ID token, such as a digital certificate, over the wired or wireless connection. The service provider's computing device may also be configured to request the validated ID token from a nearby computing device, such as to enable the service provider to initiate the verification process manually and/or without further or direct action from the individual. Thus, in this example, the individual may not need to actually show the digital ID, but instead can simply provide the validated ID token to the service provider or retailer by proximity of their computing device which contains their digital wallet and/or validated digital ID.
At step (5), the service provider/retailer requests verification of the identity of the individual by using the ID token provided by the individual. The request may be sent, for example, over a network 170 (which in some embodiments may be separate and distinct from the network 160) to the validated identification system, which may use the ID token to determine whether the digital ID presented by the individual is valid.
At step (6), the validated ID system attempts to verify the identity of the individual using the ID token provided by the service provider/retailer. According to one embodiment, to verify the ID token, the validated ID system may access one or more validated ID tokens stored, for example, in a validated identification data store 108. Using the validated ID tokens, the validated ID system may determine whether the provided ID token is valid. If the provided ID token is determined to be invalid, the validated ID system may provide a verification status to the service provider/retailer indicating that the ID token could not be verified as valid.
If the validated ID system determines that the provided ID token is valid, then the validated ID system may provide a verification status to the service provider/retailer indicating that the ID token has been verified as valid. If the validated ID system determines that the provided ID token is not valid, then the validated ID system may provide an indication to the service provider/retailer that the ID token could not be verified as valid.
Once the service provider/retailer receives the verification status provided by the validated ID system, the service provider/retailer may take the appropriate action depending on the verification status. For example, if the verification status indicates that the identify of the individual could not be verified, the service provider/retailer may deny service or request further identification from the individual in order to verify their identity. In some embodiments, if the service provider/retailer receives a verification status from the validated ID system indicating that the ID token is valid, the service provider/retailer may provide the service accordingly.
The user interface shown in
As described herein, in some embodiments, the various components of the validated ID token may be refreshed automatically by the validated ID system and provided or pushed to the individual's computing device on a periodic basis. Thus, for example, the code 215 and/or the image 235 may be randomly and dynamically updated, for example, every 30 seconds, so that at any given time the validated ID token represents a current status that the digital ID is valid. This auto-refresh feature may, for example, increase the security and/or trust associated with the validated digital ID, and help to prevent fraudulent use or copying by ensuring that the digital ID is validated on a recurring basis. Thus, for example, if an individual loses his/her computing device, he/she may be able to provide notice to the validated ID system that the computing device was lost or stolen. In response, the validated ID system may stop refreshing and/or pushing the validated ID token to the computing device, as a consequence, the validated ID token associated with the digital ID on the computing device may no longer be valid. This would prevent, for example, fraudulent use of the individual's computing device to verify their identity at various locations. It may also prevent a fraudster from intercepting or otherwise obtaining a copy of a validated ID token for use on another computing device, such as by taking a picture or screenshot of the validated ID token for use on the fraudster's own computing device. Thus, a validated ID token may only remain valid for a short, limited amount of time to reduce the possibility of fraudulent use. By the time the fraudster attempts to use the compromised or stolen validated ID token, the validated ID token most likely will have expired and the fraudster's attempt will be denied.
Although not shown in
Beginning at block 305, the validated ID system receives a request to validate the digital ID of an individual. The request may be received from an individual wishing to validate their digital ID for use in, for example, a digital wallet. The request may include, for example, a digitized form of a physical ID card (such as a scanned image of a driver's license). In some embodiments the request may also include additional personally identifying information or “out-of-wallet” information that may only be known by the individual (such as the individual's make and model of their first car, the name of their first boy/girlfriend, where they were born, where they went to high school, the name of their favorite teacher in high school, and other types of personally identifying information.) Such out-of-wallet information may be extracted from credit data or other public/private data associated with the individual, or may have been previously provided by the individual to the validated ID system, such that the validated ID system can use the out-of-wallet information to further verify the individual's digital identification. This information may also be useful to, for example, prevent a fraudster from stealing a physical ID card and attempting to validate the stolen physical ID card for fraudulent purposes, as the fraudster is less likely to have the out-of-wallet information necessary to validate the ID.
At block 310, the validated ID system may access consumer profile data, for example from data sources 166 storing, e.g., credit bureau and/or consumer data as shown in
At block 315, the validated ID system determines if there is a validated ID token associated with the consumer profile data. In response to a determination that that no validated ID token is associated with the consumer profile data associated with the individual, the process 300 may proceed to block 320. At block 320, the validated ID system extracts personally identifying information (“PII”) from the received digital identification of the individual. At block 325, the validated ID system compares the extracted PII and/or out-of-wallet information provided by the individual (e.g., in response to questions asked by the validated ID system) to the accessed consumer profile data. For example, the PII may include a last name, first name, and an address which may be compared to the name and address information associated with the consumer profile data to determine if the PII is a match.
At block 330, the validated ID system determines whether the PII matches the consumer profile data. In response to a determination that the PII does match consumer profile data associated with the individual, the process 300 may proceed to block 335.
At block 335, the validated ID system may generate a validated ID token for the digital ID of the individual. Once the validated ID token has been generated, the process 300 may proceed to block 340 where the validated ID token may be associated with the consumer profile data associated with the individual. For example, the validated ID token may be stored in the validated identification data store 108 for retrieval in a later process for verifying the identity of the individual. Finally, moving to block 345, the validated ID system may push or provide the validated ID token for the digital ID of the individual to the requesting entity.
Returning to block 330, if the validated ID system determines that the PII does not match the consumer profile data (e.g., if the address on the digital ID does not match any address(es) in the consumer profile data for the individual, or the individual-provided out-of-wallet information does not match out-of-wallet information in the consumer profile data for the individual, etc.), the process 300 can proceed to block 350 where the validated ID system may provide an indication that the digital identification could not be validated. In some embodiments, along with the indication that the digital ID could not be validated, the validated ID system may provide information indicating one or more reasons why the digital ID could not be validated. For example, the validated ID system may suggest that the digital ID could not be validated because the address did not match an address known in the consumer profile data, or the digital ID could not be validated because the name or other personally identifying information, such as the individual's physical information, could not be matched, or that the out-of-wallet information provided was incorrect, etc.
Returning to block 315, if the validated ID system determines that a validated ID token has already been associated with the consumer profile associated with the individual, then the process may proceed directly to block 335 where the validated ID system may refresh the validated ID token associated with the individual's digital ID. For example, this process may be performed as part of an automatic or periodic batch process for refreshing the validated ID associated with an individual's digital ID which may be performed as described herein automatically or manually in response to a request from the individual to refresh the validated ID token. From block 335 the process 300 may proceed to blocks 340-345 as described above, and the process 300 may then end.
Beginning at block 405, the validated ID system receives a request to verify the identity of an individual using an ID token. For example, the request may be received from a service provider/retailer wishing to verify the identity of the individual using an ID token provided by the individual. The request may include, for example, some or all portions, in any combination, of the ID token to be verified. Thus, for example, in some embodiments, the request may include a digital certificate associated with the ID token; or the request may include a validation code, such as text-based alphanumeric code or a code read from a QR image or bar code, associated with the ID token; and/or the request may include any other data element associated with the ID token.
At block 410, the validated ID system accesses validated identification data for example, from the validated identification data store 108. At block 415, the validated ID system uses the validated identification data to determine if the provided ID token is a valid ID token, e.g. based on data included in the validated identification data. For example, in some embodiments, the validated ID system may attempt to match the provided ID token (or an element of the provided ID token, such as a code) to one or more known validated ID tokens (or an element of the validated ID tokens, such as a code) included in the validated identification data. If the provided ID token does not match any known validated ID tokens, the validated ID system may determine that the provided ID token is not valid. In another example, the validated ID system may find a match of the provided ID token to one of the known validated ID tokens, but determine that the known validated ID token has expired or is otherwise no longer valid.
If the validated ID system determines that the provided ID token is not valid, then the process 400 may proceed to block 420, where the validated ID system may provide to the requesting party a verification status indicating that the ID token is not valid. In some embodiments the validated ID system may also provide with the verification status additional information related to why the ID token is not valid. For example, the verification status may indicate that the provided ID token has expired, or that the provided ID token did not match any known validated ID tokens, etc.
In some embodiments, along with the verification status, the validated ID system may also provide out-of-wallet information (e.g. questions and answers) which the requesting party (e.g. service provider/retailer) may use to further verify the individual's identity, where the out-of-wallet information is information typically only known to the individual. For example, after scanning an individual's digital ID and/or ID token and sending a request for verification to the validated ID system, the nightclub bouncer may receive a response indicating that the digital ID and/or ID token is valid along with an additional out-of-wallet question and answer which the nightclub bouncer may ask the individual for further verification. In some embodiments of the validated ID system, when the individual initially validates her digital ID, she may have be given an option, or preference, to enable or disable this type of extra “out-of-wallet” verification when the digital ID is used. The individual may also be given options to decide where (e.g. particular service providers/retailers) and/or when (e.g. particular time, day, or period of time, such as for example when the individual may be traveling) out-of-wallet type verification may be used. For example, the individual may desire out-of-wallet verification as an added security measure when using the digital ID at a financial institution such as bank (where) or during a trip abroad (when), but may not want out-of-wallet verification enabled at other locations such as supermarkets or restaurants (where) or during everyday use (when). Some of all of these features may also be provided or enabled in some embodiments via one or more user interfaces provided by the validated ID system.
As mentioned above, the validated ID system may also validate the individual's date of birth (and/or other data associated with the individual), separately as a standalone process or as part of the process 400. Thus, in some embodiments the provided ID token may include age or date or birth information, which the validated ID system may compare to accessed consumer profile data (e.g. credit report or public records, such as a birth certificate) to validate the individual's age or date of birth. The validated ID system may then provide this information to the requesting party with the verification status. This information may be useful, for example, to ensure that the individual meets a certain age requirement, such as to enter an age-prohibitive establishment (e.g. a bar or a nightclub) or to purchase age-prohibitive products (e.g. alcohol, cigarettes).
If the validated ID system determines that the provided ID token is valid, then the process 400 may proceed to block 425, where the validated ID system may provide to the requesting party a verification status indicating that the ID token is valid.
Once the validated ID system has determined whether the provided ID token is valid and provided the verification status at block 440 or block 435, the process 400 may end.
The computing system 100 includes, for example, a personal computer that is IBM, Macintosh, or Linux/Unix compatible or a server or workstation. In one embodiment, the computing system 100 comprises a server, a laptop computer, a smart phone, a personal digital assistant, a kiosk, or an media player, for example. In one embodiment, the exemplary computing system 100 includes one or more central processing unit (“CPU”) 105, which may each include a conventional or proprietary microprocessor. The computing system 100 further includes one or more memory 130, such as random access memory (“RAM”) for temporary storage of information, one or more read only memory (“ROM”) for permanent storage of information, and one or more mass storage device 120, such as a hard drive, diskette, solid state drive, or optical media storage device. Typically, the modules of the computing system 100 are connected to the computer using a standard based bus system 180. In different embodiments, the standard based bus system could be implemented in Peripheral Component Interconnect (“PCP”), Microchannel, Small Computer System Interface (“SCSI”), Industrial Standard Architecture (“ISA”) and Extended ISA (“EISA”) architectures, for example. In addition, the functionality provided for in the components and modules of computing system 100 may be combined into fewer components and modules or further separated into additional components and modules.
In the embodiment of
The computing system 100 is generally controlled and coordinated by operating system software, such as Windows XP, Windows Vista, Windows 7, Windows 8, Windows Server, Unix, Linux, SunOS, Solaris, iOS, Blackberry OS, or other compatible operating systems. In Macintosh systems, the operating system may be any available operating system, such as MAC OS X. In other embodiments, the computing system 100 may be controlled by a proprietary operating system. Conventional operating systems control and schedule computer processes for execution, perform memory management, provide file system, networking, I/O services, and provide a user interface, such as a graphical user interface (“GUI”), among other things.
The exemplary computing system 100 may include one or more commonly available input/output (I/O) devices and interfaces 110, such as a keyboard, mouse, touchpad, and printer. In one embodiment, the I/O devices and interfaces 110 include one or more display devices, such as a monitor, that allows the visual presentation of data to a user. More particularly, a display device provides for the presentation of GUIs, application software data, and multimedia presentations, for example. The computing system 100 may also include one or more multimedia devices 140, such as speakers, video cards, graphics accelerators, and microphones, for example.
In the embodiment of
According to
In general, the word “module,” as used herein, refers to logic embodied in hardware or firmware, or to a collection of software instructions, possibly having entry and exit points, written in a programming language, such as, for example, Java, Lua, C or C++. A software module may be compiled and linked into an executable program, installed in a dynamic link library, or may be written in an interpreted programming language such as, for example, BASIC, Perl, or Python. It will be appreciated that software modules may be callable from other modules or from themselves, and/or may be invoked in response to detected events or interrupts. Software modules configured for execution on computing devices may be provided on a computer readable medium, such as a compact disc, digital video disc, flash drive, or any other tangible medium. Such software code may be stored, partially or fully, on a memory device of the executing computing device, such as the computing system 100, for execution by the computing device. Software instructions may be embedded in firmware, such as an EPROM. It will be further appreciated that hardware modules may be comprised of connected logic units, such as gates and flip-flops, and/or may be comprised of programmable units, such as programmable gate arrays or processors. The modules described herein are preferably implemented as software modules, but may be represented in hardware or firmware. Generally, the modules described herein refer to logical modules that may be combined with other modules or divided into sub-modules despite their physical organization or storage.
A digital identity service may be configured to compile digital identity information regarding a consumer and to make that digital identity information available to multiple data sources. For example, a digital identity service may be configured to obtain information regarding a consumer's identity from a physical ID (e.g., a driver's license, a birth certificate, a Social Security card, etc.), validate the authenticity of the provided physical ID (or more particularly, a photograph of the physical ID), and combine the consumer information from the authenticated physical ID with authentication information of the consumer (e.g., authenticating that the consumer really is who they say they are, such as via one or more out of wallet questions, and/or that the consumer is who is identified in the physical ID). Thus, the digital identity service can generate a digital identity of the consumer that is populated with information with minimal effort from the consumer, but that is validated in multiple ways so that the information can be trusted by various entities, including the various validation methods discussed above with reference to
Beginning at block 810, a consumer accesses a registration site or application on a mobile device (or a non-mobile device). For example, a consumer may access a sign-up page for a free (or paid) credit monitoring service, which requires personal identification information of the consumer in order to register for the credit monitoring service. In other embodiments, the consumer may visit a site or app of the digital identity service directly, such that the process begins with a consumer requesting establishment of a digital identity (e.g., without initiating registration with any other service).
Next, at block 820, the consumer provides a photograph of the consumer's driver's license and/or other identification document, such as a passport, birth certificate, Social Security card, school identification, etc. Depending on the embodiment, the consumer may provide images of both a front and back of the identification document because, for example, the back of certain identification documents includes valuable identification information and/or information that is usable to validate the authenticity of the identification document.
Moving to block 830, the digital identity service scans the driver's license for identification information of the consumer. For example, the digital identity service may perform OCR on the driver's license and then parse information on the driver's license according to regular expression logic configured to identify various pieces of identification information. In one embodiment, the digital identity service uses technology provided by another party to extract information from the identification document. Alternatively, the digital identity service may forward the driver's license images to another entity so that the information extraction may be performed by that other entity and returned to the digital identity service.
In block 840, the consumer information extracted from the driver's license is provided to the enrollment service. For example, the consumer information may be used to pre-populate registration fields provided by the enrollment service so that the consumer is not required to manually provide such information. In some embodiments, the consumer information is provided later in the process, such as after the authenticity of the identification document is validated. In some embodiments, such as where the consumer is not enrolling in a service, block 840 may not be performed.
Next, at block 850, authenticity of the driver's license (or other form of identification) is validated, either using technology provided by the digital identity service itself and/or using document validation technology of one or more other entities. For example, in one embodiment the digital identity service provides the identification document images to a company such as 192Business to perform a document validity check. In such an embodiment, the results of a validity check (e.g., a confirmation that the document is valid or an indication that the document may be invalid, and/or a confidence level of authenticity) may be returned to the digital identity service. In some embodiments, the information extraction at block 830 and/or the authenticity validation of block 850 are performed by a single entity, such as the digital identity service or another entity.
Moving to block 860, the identity of the individual is authenticated, such as to obtain a confidence level that the consumer really is the consumer identified in the driver's license information. Depending on the embodiment, various authentication techniques may be performed, such as by using out of wallet questions that are obtained from a consumer's credit data (e.g. questions regarding previous mortgage accounts, residence addresses, etc., that it is unlikely know by others besides the consumer). In some embodiments, the authentication is performed by a separate service, such as Experian's PreciseID service, and results of the authentication are provided back to the digital identity service.
At block 870, the consumer receives and responds to out of wallet questions and/or other authentication questions in order to authenticate the identity of the consumer. As noted above, various authentication methods may be used in order to arrive at a confidence level that the consumer is who is identified in the provided identification document photographs.
Moving to block 880, in some embodiments once the consumer is authenticated the consumer is asked to provide a current photograph (and/or other biometric) to be included in the consumer's digital identity. For example, the consumer may obtain a photograph on the consumer's mobile device that is transmitted to the digital identity service. In other embodiments, a photograph is not obtained at block 880 and, instead, an existing photograph of the consumer is used in the digital identity of the consumer (or no photograph of the consumer is used in certain embodiments). For example, the photograph of the consumer from the driver's license (or other ID) may be used in the digital identity service and/or a photograph of the consumer may be obtained from one or more other data sources, such as a social network that has a profile picture of the consumer.
Next, at block 890 the digital identity service generates a digital identity for the consumer. Depending on the embodiment, the digital identity may include various data, such as a copy of the driver's license photograph(s), extracted information from the driver's license, authenticity information regarding the driver's license, authentication information regarding the individual identified in the driver's license, one or more photographs of the individual, device information associated with one or more devices from which the identification information was received (e.g., a device identifier for the mobile device of the consumer) and/or any other information relevant to the consumer's identity. In some embodiments additional data sources are accessed in order to obtain further information regarding the consumer, such as demographic data sources, publicly available data sources, marketing data sources, etc.
At block 895, the digital identity is made available for various applications. For example, with reference to the example registration process noted above, the digital identity may be provided to the registration site and used in registration of the consumer for the associated service. In some embodiments, the digital identity may be stored on a server of the digital identity service and made available to third parties (e.g., online websites) via an API and/or other exchange protocol. In some embodiments, the digital identity may be stored on the consumers device, e.g., a mobile device of the consumer, such that information from the digital identity may be provided directly to requesting entities (e.g. a financial institution that requires the identity information) from the consumers mobile device, such as using one or more of the methods discussed above, for example.
In the embodiment of
The example digital entity is in the form of a user interface that may be provided to any interested party to provide consumer information, as well as information regarding the validity of the information and authentication of the individual. In other embodiments, the information may be in any other format, such as in a database or other data structure. The example digital identity of
In one embodiment, a digital identity may be used in conjunction with other services, such as a payment service, to streamline a payment process by providing identification and payment information concurrently, for example. In some embodiments, the digital identity may be used in conjunction with alerts that are provided to consumers. For example, a consumer may be provided an alert when the consumer approaches a business establishment of interest in view of a portion of the digital identity of the consumer being accessible to the business.
Each of the processes, methods, and algorithms described in the preceding sections may be embodied in, and fully or partially automated by, code modules executed by one or more computer systems or computer processors comprising computer hardware. The code modules may be stored on any type of non-transitory computer-readable medium or computer storage device, such as hard drives, solid state memory, optical disc, and/or the like. The systems and modules may also be transmitted as generated data signals (for example, as part of a carrier wave or other analog or digital propagated signal) on a variety of computer-readable transmission mediums, including wireless-based and wired/cable-based mediums, and may take a variety of forms (for example, as part of a single or multiplexed analog signal, or as multiple discrete digital packets or frames). The processes and algorithms may be implemented partially or wholly in application-specific circuitry. The results of the disclosed processes and process steps may be stored, persistently or otherwise, in any type of non-transitory computer storage such as, for example, volatile or non-volatile storage.
The various features and processes described above may be used independently of one another, or may be combined in various ways. All possible combinations and subcombinations are intended to fall within the scope of this disclosure. In addition, certain method or process blocks may be omitted in some implementations. The methods and processes described herein are also not limited to any particular sequence, and the blocks or states relating thereto can be performed in other sequences that are appropriate. For example, described blocks or states may be performed in an order other than that specifically disclosed, or multiple blocks or states may be combined in a single block or state. The example blocks or states may be performed in serial, in parallel, or in some other manner. Blocks or states may be added to or removed from the disclosed example embodiments. The example systems and components described herein may be configured differently than described. For example, elements may be added to, removed from, or rearranged compared to the disclosed example embodiments.
Conditional language, such as, among others, “can,” “could,” “might,” or “may,” unless specifically stated otherwise, or otherwise understood within the context as used, is generally intended to convey that certain embodiments include, while other embodiments do not include, certain features, elements and/or steps. Thus, such conditional language is not generally intended to imply that features, elements and/or steps are in any way required for one or more embodiments or that one or more embodiments necessarily include logic for deciding, with or without user input or prompting, whether these features, elements and/or steps are included or are to be performed in any particular embodiment.
Any process descriptions, elements, or blocks in the flow diagrams described herein and/or depicted in the attached figures should be understood as potentially representing modules, segments, or portions of code which include one or more executable instructions for implementing specific logical functions or steps in the process. Alternate implementations are included within the scope of the embodiments described herein in which elements or functions may be deleted, executed out of order from that shown or discussed, including substantially concurrently or in reverse order, depending on the functionality involved, as would be understood by those skilled in the art.
All of the methods and processes described above may be embodied in, and partially or fully automated via, software code modules executed by one or more general purpose computers. For example, the methods described herein may be performed by the address verification computing system 100 and/or any other suitable computing device. The methods may be executed on the computing devices in response to execution of software instructions or other executable code read from a tangible computer readable medium. A tangible computer readable medium is a data storage device that can store data that is readable by a computer system. Examples of computer readable mediums include read-only memory, random-access memory, other volatile or non-volatile memory devices, CD-ROMs, magnetic tape, flash drives, and optical data storage devices.
It should be emphasized that many variations and modifications may be made to the above-described embodiments, the elements of which are to be understood as being among other acceptable examples. All such modifications and variations are intended to be included herein within the scope of this disclosure. The foregoing description details certain embodiments of the invention. It will be appreciated, however, that no matter how detailed the foregoing appears in text, the invention can be practiced in many ways. As is also stated above, it should be noted that the use of particular terminology when describing certain features or aspects of the invention should not be taken to imply that the terminology is being re-defined herein to be restricted to including any specific characteristics of the features or aspects of the invention with which that terminology is associated. The scope of the invention should therefore be construed in accordance with the appended claims and any equivalents thereof.
This application is a continuation of U.S. patent application Ser. No. 14/276,540, filed on May 13, 2014, which claims the benefit under 35 U.S.C. §119(e) to U.S. Provisional Application No. 61/826,925, titled “DIGITAL IDENTITY”, filed on May 23, 2013, which is hereby incorporated by reference in its entirety herein.
Number | Date | Country | |
---|---|---|---|
61826925 | May 2013 | US |
Number | Date | Country | |
---|---|---|---|
Parent | 14276540 | May 2014 | US |
Child | 15662712 | US |