Abstract:
The longstanding problem of providing efficient and rapid online user services while maintaining user privacy is addressed. Disclosed is a system and method for providing unverified users an ability to act upon private records known to them while protecting user privacy by not reflecting private information back to the unverified user. As an unverified user inputs information related to their identity into an interface, the system searches an indexed database which may include both registered users and/or unregistered customers indexed from a single data source or from disparate data sources.

Description:
RELATED APPLICATIONS 
       [0001]    This application for patent claims the benefit of provisional application 61/801,485 filed on Mar. 15, 2013, and is a continuation of non-provisional applications Ser. No. 14/216,795 filed on Mar. 17, 2014 and Ser. No. 14/925,133 filed on Oct. 28, 2015. These applications are incorporated herein in their entirety. 
     
    
     FIELD OF THE INVENTION 
       [0002]    The present invention generally relates to the field of identity authentication, specifically the authentication of users for online and other application account access and registration. 
       BACKGROUND OF THE INVENTION 
       [0003]    The identification and authentication of users by a combination of a username or username and password (or knowledge) has been a consistent aspect of multi-user computing systems since at least the early 1960&#39;s. This likely original use was to identify and authenticate system users and the amount of expensive computation time used on these shared systems. Ironically, it has been reported that one of these original users also hacked the password authentication on these early systems to steal computing resources for his graduate school project. 
         [0004]    Nearly 50 years later, although implemented with a variety of cryptography technologies and for an increasingly wide variety of applications, the user experience has remained the same, or worsened. Unlike in 1962, today&#39;s users have a multitude of accounts and passwords to remember. According to a large scale study done by Microsoft in 2007, within the controlled group of users, the average user accessed roughly 25 different systems online which require passwords. The study reported that the average number of actual distinct passwords used by the participants was 6.5, however, across only 3.9 sites each. Average participant users each typed on average 8 passwords every day. Other studies report both higher numbers of average accounts and lower numbers of user-generated passwords. 
         [0005]    Already overwhelmed by the mental gymnastics that mere routine online usage was asking of them, the burden appears to be unbounded. Web account and resource users are increasingly asked or required to use more complex passwords, with restrictions such as a minimum length, a combinations of letters, numbers, non-alphanumeric characters, and/or a mix of upper and lower case characters. 
         [0006]    In order to cope with this increasingly daunting memorization task, users have developed various strategies, from keeping lists of passwords, or using just one or two easily memorized passwords, to the liberal use of post-it notes attached to their monitor. 
         [0007]    The typical user password memory assistance strategies such as 1) repeated user entry of a password during the day, perhaps from multiple locations, 2) the usage of a password for multiple authentications, and 3) the physically vulnerable use of password lists and post-it notes in shared office space, each pose security risks. For example, the more times and locations a user is required to enter passwords during the day, the more frequently they become vulnerable to attacks such as malicious key-logging Trojans, password phishing, or man-in-the-middle attacks over shared or wireless networks, among many others. And when users access multiple secure sites using the same password, a stolen password for one site is stolen for all of them. 
         [0008]    Real world examples of password security breaches and malicious password threats are everywhere. In a single notorious password data breach in 2007, on Rockstar.com, a gaming site, 32 million user passwords were stolen and posted online publically the same day. Another style of attack, phishing, where the attacker impersonates a known web site or entity identity known to the target, seems to be proliferating virtually unabated, despite well publicized warnings. According to Fraudwatch International, between just Feb. 15 and Mar. 15 of 2013, no less than 25 widespread online banking password phishing attacks were launched, with the attackers posing as major international banks. In an elaborate attack on PayPal users, the website address and even security certificate were spoofed for the fake site, and many users unsuspectingly entered their credentials into the spoofed interface. 
         [0009]    Of course these problems are well known and considerable efforts have been made to improve either the username/password authentication model, or the technical implementation security. Technical improvements in cryptography have improved the ability to withstand brute force attacks, and the use of certificate authorities has made phishing attacks and man-in-the middle attacks more difficult. Unfortunately, few solutions have been adopted to address the high volume of passwords and use of repeated passwords as they are generally more cumbersome for users. Thus the convenience for the user must be considered carefully when developing identity authentication methods. 
         [0010]    The common (special) case where a user wants to securely access web sites from a single, private, presumably secure computer, has presented an opportunity for new technical solutions. One solution utilizes browser cookies and tokenized credentials for users. When users return to these web sites which they have already provided credentials to access, they have the option to not use any credentials for the repeat access, see U.S. Pat. No. 5,727,163 Weiss. An extension of this solution for placing merchant orders online by the so-called I-click ordering, see U.S. Pat. No. 5,960,411 Hartman, et. al. Such credentials could be reasonably kept secret from other users of the computer system by cryptographic tokens however, the user must be logged out of the secure site to preserve any privacy or security. Thus these methods still rely upon the still highly problematic username/password credential model. Also, although unusual, but perhaps not for long, attacks on SSL cryptography, including decrypting these credential tokens, has been documented in the literature. 
         [0011]    Another technical innovation, which assists users in managing the complex use of passwords is known as a password key-ring, or password manager. This utility is a software application and database that store encrypted and tokenized information corresponding to a user&#39;s passwords and associated resources which are to be authenticated, U.S. Pat. No. 5,655,077 Jones, et. al. U.S. Pat. No. 7,076,095 Hahn, US Appl. 2004/0193925 Safriel, and Roboform from Siber Systems (www.roboform.com). Although useful, these solutions utilize complex implementations, require diligence by the user to incorporate infrequently visited secure online resources, and remain vulnerable to a number of attacks such as malicious Trojan key-loggers. 
         [0012]    Not all online resources necessitate the same level of security or privacy. This provides an opportunity for innovative solutions which are currently undeveloped. At present, no system or method is available that utilize the wide variations in online resource privacy needs in order to provide a user identified access without the use of any explicitly entered, tokenized or otherwise transmitted password or other unique authentication factor (biometric, smartcard, etc.). 
       SUMMARY OF THE INVENTION 
       [0013]    The current invention departs in several fundamental ways from the above and other currently available methods for user identification, authenticated login and account registration. Embodiments of the current invention are specifically designed for online resources and application functions which have minimal or no privacy concerns, but are extendable to a range of privacy and security levels. One basic implementation of the current invention is coined “the no password login.” 
         [0014]    In an exemplary embodiment, no local browser cookie or other locally stored user information is needed to confirm a user&#39;s identity. Instead, the identification is provided entirely by user recall and selection of the identified correct account while entering user recalled personal information. The online application utilized for identification/authentication searches the secure server database of registered users, which is in real time to make the process even more natural and immediate for users. No traditional username or password is needed for basic access. Generally, just a few keystrokes need to be typed, until a sufficiently low number of choices are presented that the identification may be selected by the user. Also, to maintain privacy during the process, identification choices are presented to the user in a highly redacted format. Once basic access is granted, no information is sent or shared by the system (through the application interface) unless further authenticated for release. Account feedback and confirmation are sent by email. 
         [0015]    Among many of the utilities of the current invention, the ubiquitous task for retrieving forgotten passwords, which consists of first authenticating a user ID via email, then resetting the password, and finally interacting with secure user services is no longer needed. Instead password retrieval (for access to more secure resources than are available at the basic level) is reduced to: the user request, and the confirmation/authentication email response. 
         [0016]    In accordance with the present invention, the problem of providing an extremely simple and secure method for users to login to secure applications to perform tasks with minimal or no privacy concerns is solved by partitioning privacy levels of access such that a minimum of keystrokes provides access to a basic service level for the identified and authenticated user, without compromising user privacy. The basic level of account access to services is identified and authenticated by a predictive search of user records based on information input by the user with minimum recall effort. As the information is entered by the user, a real-time search of records is performed by the web application and the user is presented choices from a group of potential records. At the basic access level, these choices reveal only a self-identifiable obscured version of personal information. Once self-identified, the user is considered authenticated for this basic level. The user can only perform those tasks which do not compromise security or reveal un-redacted personal or other private information. 
         [0017]    Other embodiments of the invention can be extended to multiple levels of user access depending on the sensitivity of the information and privacy concerns inherent in the use of the online resources. The dimension of secure access coincides with two dynamic and configurable user input query dimensions, the complexity or secrecy of the required identification information input by the user, and the number of identification challenge-response pairings. Such dimensions are configurable by either the resource administration according to their information security concerns, or by the users themselves according to their privacy concerns. 
         [0018]    In other embodiments, customer identification information is compiled and indexed from disparate available resources in addition to previously registered users for an account. During real-time searching for user identification, unregistered customers are also identified. In various embodiments, identified customers are automatically registered to an account, and assigned credentials. In various embodiments auto-registered new account users are notified of the new account registration and provided immediate access limited initially to an assigned privacy level. In other embodiments, no account is created, but the identified user is allowed to perform certain functions. 
     
    
     
       BRIEF DESCRIPTION OF THE DRAWINGS 
         [0019]      FIG. 1  shows a flow chart depicting an embodiment for a basic “no password” login, allowing the user basic privileges without revealing or reflecting any personal or private information back to the user. In this embodiment, users may choose to register an account or not, but in both cases may proceed according to the chosen identity. 
           [0020]      FIG. 2  shows a block diagram depicting the component modules of a basic embodiment. 
           [0021]      FIG. 2A  shows a block diagram depicting the component modules of an embodiment which includes incorporation of customer identification resources from multiple sources. 
           [0022]      FIG. 3  shows a flow chart depicting an embodiment of the detailed process of interaction between the client browser, application server, and user information and configuration database. An embodiment which incorporates identification of unregistered identities and automated registration is also shown. 
           [0023]      FIG. 3A  shows an embodiment for authenticated user interaction without creating an account for the user. 
           [0024]      FIG. 4  shows an embodiment with an online application browser interface which includes the “find yourself” or “instant access” user input field for initiating the “no password” login. 
           [0025]      FIG. 5  shows an embodiment with an online application browser interface for user information registration. 
           [0026]      FIG. 6  shows an embodiment with an online application interface, where the user identification information (email address) is being input but prior to a threshold for the defined maximum number of choices is low enough for display to the user. 
           [0027]      FIG. 7  shows an online application interface, where the user identification information (email) is being input and identity choices available from the user information database. Identity choices available from the user information index are presented with personal identifying information obscured for privacy and security. In this embodiment, users with multiple true identifications (i.e. an individual with different cars, email accounts, etc.) may select the relevant choice among their own identified information. 
           [0028]      FIG. 8  shows an online application interface depicting a confirmation or verification screen after a “no password” login user including the result of the user interaction (appointment date/time) but obscuring the personal identifying information. 
       
    
    
     DETAILED DESCRIPTION OF THE INVENTION 
       [0029]    In an exemplary embodiment of the invention, an online application for scheduling service appointments is used for identifying a registered user and rapidly scheduling a service appointment with just a few strokes from a user, and without requiring the use of a traditional username and password. The process reveals no sensitive or personal information to the identified user while using this level of authentication. The process may be securely performed from any device since at no time does the user enter his or her username or password credentials, and neither are stored or transmitted in clear text, encrypted or token form. 
         [0030]    In this embodiment, two levels of authentication are implemented for identified/authenticated users. At the basic level, users may identify themselves by entering the beginning portion of virtually any personal information into the “find yourself’ or “instant access” field. In this embodiment the secondary, or higher level of user access requires a traditional username and password to be entered by the user for such access. 
         [0031]    In this embodiment, the basic authentication level allows the user to schedule a service appointment with a minimal amount of keystrokes and reveals only obscured personal information for selecting the identity ( FIG. 6 ,  FIG. 7 ), and the make/model of the previously registered vehicle intended for the service appointment. Similarly, when confirming the appointment, only obscured personal information is shown to the user ( FIG. 8 ). An alternate version of this embodiment provides a higher level of privacy, the “instant access” or “find yourself” field of the online application requiring the user to input lesser known personal information, such as the vehicle VIN ( FIG. 6 ). 
         [0032]    In other embodiments, these different levels of privacy/security provided for the partitioned user levels (the basic level, in the previous embodiment) can be extended to many levels of protection while maintaining the very simple and rapid usage and eliminating traditional password entry. These various levels, from basic upwards, utilize increasingly esoteric personal information which would be known at the highest level to only the intended user. 
         [0033]    An additional dimension of security in other embodiments of the invention may be provided by requiring additional challenge-response information entry in the same manner as the first “find me” field information entry. For example, the initial challenge response asks for entry of one the user&#39;s identifying information from the choice of, for example, vehicle license plate or driver&#39;s license number, and a second information challenge-response asks for the other information from the same set. 
         [0034]    In another embodiment, a CAPTCHA challenge-response mechanism is employed to eliminate robot access employed either for data mining or malicious purposes. As with the above embodiments, no entry, storage or transmission of the user&#39;s traditional username or password is needed for security levels employing the invention. 
         [0035]    In these and other embodiments, the information needed for the challenge-response identity queries, as well as the obscuring of information reflected in the identity choices presented to the user, are configurable by the user and/or the online application administration. Thus the safeguards for user information privacy and safeguards for sensitive information are fully configurable according to individual needs. 
         [0036]    In other embodiments, customer data sources other than from registered accounts are aggregated into a single index. Users identified as customers, but without registered accounts may be given an opportunity for automatic registration. In still other embodiments, no online accounts are used and customers are authenticated with one of the described embodiments and allowed to substantively without any account registration, by the utilization of known customer detailed information. 
         [0037]      FIG. 1  depicts a flowchart outlining a typical implementation of the invention. Initially  100 , a user may not recall if they are registered or a customer, and simply begins using the “instant access” or “find yourself”’ personal information input  102 . The system then displays the matching registered user records or indexed unregistered customers  103  (in obscured form) from which the user may or may not find an identifying record  104 . If the user is not registered (or a customer), they may optionally  105  begin the registration process  106  by entering personal information. In various embodiments, the user may also enter site specific information (such as license plate numbers and vehicle make and model for the automobile service appointment exemplary model)  108 . They may optionally then configure privacy settings regarding reflected information and communication with the user  110 . In various embodiments the information is stored and indexed securely on only the remote server  112 . In these embodiments, users are provided full access after optionally registering.  113   
         [0038]    In this embodiment, as data is entered into the field  102 , the application continuously searches the indexed customer data for matching records  104  utilizing a database management system (defined as being inclusive of an operable database), and when limited to a number of records below a threshold value of records, the application filters and obscures information from the records such that they become unrecognizable to anyone other than the identified user  114 . The user then selects the correct choice from the list, authenticating and identifying themselves with just a few keystrokes and a single click  116 . The user is then logged into the application at the partitioned “basic” level, wherein no personal information is reflected back to the user  118 . As previously mentioned, this knowledge based challenge-response pairing may be as simple as providing a user&#39;s real name, email, or phone number ( FIG. 6 ), or be limited to far more esoteric identity information, such as a license plate or driver&#39;s license number, or the last 4 digits of the user&#39;s Social Security Number. 
         [0039]      FIG. 2  depicts an exemplary component breakdown for the system. Shown is the application and database server  200 , and the client browser  202 , which acts as the user interface host. The server  200  components include a module executing the application servlet  204 , such as Apache Tomcat for executing Java or Java Server Pages, a database of indexed user information, privacy and administration business rules  206 , a search module for searching this database  208 , and a module implementing the information redaction and challenge-response business rules  210 . Also included is a user registration module which populates the database  208  with the user&#39;s personal and site relevant information  212 . 
         [0040]      FIG. 2A  depicts an exemplary embodiment which incorporates customer database information in addition to registered users  202 A. The local system  200 A consists of an indexing system and database  204 A which queries registered user data  202 A, and external customer databases such as compiled retailer customer data  208 A and manufacturer customer data  210 A that may have been compiled from warranty registration information. Specialized indexing systems such as Sphinx  204 A are designed for efficient real time searches  206 A. 
         [0041]      FIG. 3  details the interaction between the client browser  300  and the application server  302 . For registered users or other indexed customers, the process begins with the continuous real-time monitoring of the “instant access” or “find yourself” field  304 . Users input digits or characters corresponding to the requested identifying information  306 , and in real-time, the application matches the input against user records  308  or indexed non-registered customer data  309 , according to configured challenge-response business rules and privacy settings  310 . Records matching the input are filtered and obscured  310  and displayed to the user as identity choices  314 . Clicking on the appropriate choice of identity logs the user into the basic operation level for that account  316 , allowing that user to perform limited functions or retrieve limited information  318 . Prior to acting upon a user records or affirmative acting in the name of the identified user  324 , the application may send the user an email for secondary confirmation  320 ,  322 . In various embodiments unregistered customers identified by the user are auto-registered  311  and the customer is sent login credentials by email for confirmation and later authenticated use  320 . 
         [0042]      FIG. 3A  depicts an embodiment providing users an identified access to system capabilities (making an appointment, checking delivery status, etc.) without any account registration of users or customers. In this embodiment, the process steps split between the client browser  300 A and the application server  302 A are a subset of the steps from the process as depicted in the embodiment from  FIG. 3 . After monitoring  304 A user input  306 A this embodiment only matches user input against the indexed customer information  308 A. Filtering of matching results  310 A, display of the obscured matches  314 A, and user selection  312 A are the same as in  FIG. 3 . In this embodiment, self-identified users are provided access according to the configuration without any account login  316 A. The remaining process steps  318 A- 324 A are analogous to the account based process in  FIG. 3 , and the embodiment here is also for making a service appointment  324 A. 
         [0043]      FIG. 4  depicts an exemplary embodiment of the invention as an application interface  400 . Shown is the “instant access” or “find yourself” field  402 , a mechanism for logging in with a traditional usename/password pair  404 , and a link to the registration interface  406 . In this embodiment of the invention, the user is allowed to use name, email, phone number, or vehicle identification number (“VIN”), as the identifying information used for access  402 . 
         [0044]      FIG. 5  shows the registration interface used in this exemplary embodiment of the invention  500 . User personal information is  502  is input by the user through this interface. Other embodiments provide the user the ability to configure privacy, communication, and an unlimited variety of personal information relevant to the function of the customer interaction. 
         [0045]      FIG. 6  depicts the application interface  600  for the exemplary embodiment during the real time challenge-response identification matching process. Shown in the “find yourself” or “instant access” field  606  is the user input of a partial name (the characters “Pika”), and the real-time number of matching records (“found 102”  604 ) which exceeds the (configurable) threshold for presenting obscured choices to the user. 
         [0046]      FIG. 7  depicts the application interface for the exemplary embodiment of the invention  700  during the real time challenge-response identification matching process. Shown in the “find yourself’ or “instant access” field  704  is the user input of a partial email address (the characters “Pika.Pika”), and the real-time obscured presentation  706  of matching records (“found 8”  702 ) from which the user is to choose their identity. In this embodiment, the user is presented with multiple entries for the same customer, but with additional information (the customer vehicle) from which to choose an account or particular customer product to process (make a service appointment)  708 . If this implementation had been configured limiting the user input identity choices to a vehicle license plate, this would certainly be more esoteric information and would provide a higher level of access restriction or control. 
         [0047]    In various embodiments, once the user identifies himself or herself, various actions may be performed. In the exemplary embodiment, a customer&#39;s vehicle is scheduled for service. In various embodiments, the user can choose a particular service advisor, discounted service times, shuttle service, and describe their service needs. In these embodiments, user personal information remains obscured. 
         [0048]    In various embodiments, including the exemplar appointment scheduling system, as shown in  FIG. 8  is the appointment confirmation user interface screen  800 . In this embodiment of the invention, the user must confirm the appointment time and date  806 , along with the vehicle  804  and obscured personal information  902 . If the user recognizes error in the personal information or communication preferences, they may login to the higher security level access through a traditional username and password  908 . Additional security may be provided at this level by requiring the user to respond to a secondary confirmation email before the appointment is actually calendared by the service entity. 
         [0049]    In other embodiments of the invention, the application is utilized to make restaurant reservations, salon appointments, or schedule country club golf tee times. In another embodiment of the invention, the application provides package tracking information without reflecting the delivery address or sender information. In another embodiment of the invention, the user requests renewals of library materials. In other embodiments of the invention employing the additional security of enhanced and multiple identity challenge-response pairs, the user makes routine optometrist, doctor, dentist, or dental hygienist appointments. All of the above embodiments can also be utilized to review upcoming appointment times in redacted form or with an additional intermediary partitioned access level higher than basic, but not with the full user credentials. 
         [0050]    In other embodiments of the invention, the user can access delivery status information, make personal appointments, cancel newspaper or mail delivery during vacations, use online fantasy sports or other gaming sites. In various embodiments, the user may be permitted to participate in game play with or without their game identity redacted, or the user activities may by more limited, depending on user configurable settings, or the games administrative business model. 
         [0051]    The implications of the present invention&#39;s numerous potential configurations and embodiments are far reaching. Numerous routine and benign online activities which currently require traditional username/password authentication are now available without any of the well documented security risks posed by the proliferation of password usage. By providing users an acceptably and extremely convenient alternative to the traditional model, benefits accrue for the user&#39;s security with unaffiliated third party sites, since they are less likely to have password duplication vulnerability. Embodiment variations which provide user authentication and interaction without any user accounts are any even further departure from tradition cumbersome and vulnerable user/password authentication and has countless applications. 
         [0052]    Although the invention has been described in terms of the preferred and exemplary embodiments, one skilled in the art will recognize many embodiments not mentioned here by the discussion and drawing of the invention. Interpretation should not be limited to those embodiments specifically described in this specification.