Method and system for determining authentication levels in transactions

Abstract

According to an embodiment of the present invention, a method for determining a transaction authentication level includes receiving transaction information associated with a transaction between a user and a relying party, receiving relying party preferences, and determining a relying party authentication level based on the transaction information and the relying party preferences. The method also includes accessing user preferences, and determining a user authentication level based the transaction information and the user preferences. The method further includes determining the transaction authentication level using the user authentication level and the relying party authentication level.

Description

CROSS-REFERENCES TO RELATED APPLICATIONS[0001]This application claims priority to U.S. Provisional Patent Application No. 61 / 497,865, filed on Jun. 16, 2011, entitled “Secure Transfer of Sensitive Data”, the disclosure of which is hereby incorporated by reference in its entirety for all purposes.[0002]The following three regular U.S. patent applications (including this one) are being filed concurrently, and the entire disclosure of the other applications are incorporated by reference into this application for all purposes:[0003]Application No. ______, filed June ______, 2012, entitled “Method and System for Determining Authentication Levels in Transactions” (Attorney Docket No. 94276-841065(0001210US));[0004]Application No. ______, filed June ______, 2012, entitled “Method and System for a Fully Encrypted Repository” (Attorney Docket No. 94276-842856(0001220US)); and[0005]Application No. ______, filed June ______, 2012, entitled “Method and System for Delayed Authorization of Online...

AI Technical Summary

Benefits of technology

[0011]According to an alternative embodiment of the present invention, an authentication level determination system is provided. The system includes an identity repository coupled to a network and including a data processor and a non-transitory computer-readable storage medium comprising a plurality of computer-readable instructions tangibly embodied on the computer-readable storage medium, which, when executed by a data processor, provide authentication level determination, the plurality of instructions comprising instructions that cause the data processor to receive transaction information associated with a transaction between a user and a relying party. The instructions also cause the data processor to receive relying party preferences, and to determine a relying party authentication level based on the transaction information and the relying party preferences. The instructions also cause the data processor to access user preferences, and to determine a user authentication level based the transaction information and the user preferences. The instructions further cause the data processor to determine the transaction authentication level using the user authentication level and the relying party authentication level.

Problems solved by technology

Users of social networks, online banking, e-commerce, online transactions, and / or email are in constant danger of phishing, malware, and key logging attacks, as well as massive centralized data breaches that expose users' passwords and financial account information.

Images