Identity Verification via Third-Party IP Matching
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Conventional identity verification methods, such as two-factor authentication, are vulnerable to security risks when users share passwords and usernames across multiple accounts, as intercepted verification codes can authenticate unauthorized users, and existing fraud detection methodologies fail to effectively verify user identities in real-time communications.
Innovation Solution
A system and method that utilize HTTP requests to extract user names and IP addresses, verify personal identification information with third-party service providers or internet service providers, and increase confidence in the identification process by matching IP addresses and personal data, thereby enhancing security without requiring additional user interaction.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If two-factor authentication is used, then user identity verification is improved, but security vulnerability increases when users share credentials across multiple accounts
Solution Approach 1:
The patent introduces an intermediary verification process that queries third-party service providers (such as internet service providers or credit bureaus) to independently confirm user identity information. This intermediary step decouples the authentication system from direct reliance on user-provided credentials, allowing verification without exposing the system to risks of credential sharing or interception across multiple accounts.
2Measurement precision
If conventional fraud detection methodologies are used, then basic identity screening is improved, but real-time verification capability deteriorates
Solution Approach 1:
The patent performs preliminary actions by pre-collecting and storing verified identity information from third-party service providers during initial account setup. This preliminary verification creates a database of authenticated user data that can be quickly referenced during real-time transactions, eliminating the need for lengthy verification processes during each interaction while maintaining high measurement precision.
Solution Approach 2:
The system implements feedback mechanisms where verification results from third-party queries are stored and used to inform subsequent authentication decisions. The system learns from previous verification outcomes and adjusts its verification strategies, enabling faster real-time decisions while maintaining accurate identity screening through continuous refinement of verification criteria.
3Reliability
If additional verification steps are implemented, then security is improved, but user interaction requirements increase
Solution Approach 1:
The patent implements self-service verification by automatically querying third-party service providers and matching user information without requiring additional user actions. The system autonomously performs background checks against external databases, comparing provided credentials with independently verified data, thereby enhancing security while maintaining ease of operation as users simply proceed with normal authentication flows.
Data Source
AI summary
Embodiments disclosed herein generally relate to a system and method of verifying an identity of user. A computing system receives a HTTP request. The HTTP request includes at least a user name and an IP address associated with a router accessed by the remote client device. The computing system parses the HTTP request to extract the user name and the IP address contained therein. The computing system identifies a user account associated with the extracted user name. The computing system identifies an internet service provider associated with the IP address. The computing system transmits a verification message to the third party service provider. The computing system receives a confirmation message from the third party service provider. The computing system increases a level of confidence in an identification verification process based on the confirmation.