Risk-Adaptive Identity Proofing for Unified Online Accounts
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing methods for identity verification in creating new online accounts are inefficient, costly, and do not adequately support unified access to multiple backend systems, particularly in domains like Health and Human Services, where customers may lack a financial footprint and privacy regulations complicate access to diverse data systems.
Innovation Solution
A system that determines an identity, calculates a risk score, and executes validation steps based on predefined criteria and machine learning, continuously monitoring access and adapting validation questions to manage credential access throughout the lifecycle of the online account.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If physical verification at service provider office is required, then identity verification reliability is improved, but customer convenience and processing time deteriorate
Solution Approach 1:
The patent replaces physical mechanical verification (in-person office visits) with electronic/digital verification systems including automated identity proofing, risk scoring algorithms, and electronic document validation. This substitution maintains verification reliability while eliminating the need for physical presence, thereby improving customer convenience and reducing processing time.
Solution Approach 2:
The patent introduces intermediary technologies such as third-party identity verification services, electronic document validators, and risk assessment systems that mediate between the customer and service provider. These intermediaries enable reliable identity verification without requiring direct physical interaction, thus resolving the contradiction between verification reliability and operational ease.
2Reliability
If comprehensive identity verification is performed, then security against identity theft is improved, but processing time and operational complexity increase
Solution Approach 1:
The patent implements dynamic verification processes where the depth and type of identity verification adjust based on risk scores calculated from multiple factors including customer history, request patterns, and data consistency. Low-risk requests undergo streamlined verification while high-risk requests receive comprehensive checks, thereby maintaining security while reducing average processing time.
Solution Approach 2:
The patent changes verification parameters dynamically based on risk assessment. The system adjusts verification stringency, required documentation levels, and scrutiny depth according to calculated risk scores. This parameter adaptation ensures comprehensive security for high-risk cases while enabling rapid processing for low-risk cases, resolving the time-security tradeoff.
3Adaptability or versatility
If unified access to multiple backend systems is enabled, then system versatility is improved, but security risk and complexity increase
Solution Approach 1:
The patent creates a universal identity verification and risk management system that serves multiple backend systems (Health and Human Services, financial institutions, etc.) through a single platform. This multi-functional system handles diverse verification requirements across different domains while maintaining consistent security protocols, thereby achieving versatility without proportionally increasing complexity.
Solution Approach 2:
The patent segments the unified access system into modular components including identity proofing modules, risk scoring engines, validation rule sets, and system-specific adapters. This segmentation allows the system to handle multiple backend systems through standardized interfaces while isolating complexity into manageable, reusable modules, thus enabling versatility without uncontrolled complexity growth.
Data Source
AI summary
A computer-implemented method includes: receiving, by a computer device, a request for a new online account for accessing data stored in an enterprise system; determining, by the computer device, an identity associated with the request; determining, by the computer device, a risk score for the request; determining, by the computer device, validation steps based on the risk score; and executing, by the computer device, the validation steps.