Patent Description:
Electronic authentication is widely adopted by systems in different applications to authenticate the identity of a user. During the electronic authentication, registered identity data of a user is compared with information provided at the electronic authentication touchpoints. For example, biometric recognition systems utilise the biometric data obtained by digitising measurements of a physical or behavioural characteristic of a person to verify the identity of the person. Characteristics used by modern biometric recognition systems include fingerprint, hand shape, retina pattern, voiceprint, handwriting style or face. In general, biometric identification systems rely on the comparison between a set of reference biometric characteristics of the user captured during an enrolment stage and corresponding biometric characteristics of the user extracted from a scan of the user. For example, the captured biometric characteristics may be obtained from an image or a scan of the user captured by means of an imaging or scanner equipment at a biometric authentication touchpoint, e.g. airport passport control, a biometric point of recognition (POP) system, and the like. In general, biometric offers the possibility of processing a large number of people with relative ease. Biometric authentication has been deployed in a number of industries. For example, airports use facial recognition to identify individuals as they move towards their destination.

In many cases, the information processed or received at an electronic ID processing touchpoint may be transferred to another electronic system or reused at a later time without the knowledge of the corresponding user. As such, there are growing concerns on how the identity information of an individual is used and processed by an electronic ID processing touchpoint. Currently, there is a lack of transparency, and as such, governments and individuals have become sceptical on the use of biometric authentication. More specifically, individuals are concerned that their user ID may be used in a malicious manner without knowing or having the possibility to react.

<CIT> relates to techniques for monitoring and verifying compliance in a distributed work environment. Violations of rules are detected only at the touchpoints via compliance checks. <CIT> concerns a transaction visual capturing system that transforms different parameters of a mobile device into real-time behavior-sensitive product purchase related information, shopping purchase notification, and electronic receipts. The consumer's identity may be determined by biometric recognition. Therefore, there is a need for a solution that would enable a user to have transparency of how their identity data is collected, and when and why is collected, processed, analysed and shared with third parties.

An aim of the present invention is to provide a method and a system that overcomes the disadvantages of the prior art. More specifically, the present invention provides a method and a system for monitoring and controlling the distribution of user IDs to different ID processing touchpoints.

According to a first aspect of the present invention, a distributed system for managing identity, ID, data of registered users is provided. The ID management system comprising.

The ID management system of the present disclosure enables users to receive notification in relation to the status of their identity, ID, data at an ID processing touchpoint. The identity data may comprise a range of information identifying the user such as name, address, biometric ID, email, and the like. As such, the user acquires transparency over the use and processing of the corresponding ID data at different locations. The use of a central ID server enables the distribution of the user ID to a network of connected ID processing touchpoints. The touchpoints may be provided with a monitoring application configured to monitor the use and processing of ID data, and accordingly, generate status notifications. The status notifications may be generated in response to the use and/or processing of a user ID at an ID processing touchpoint. For example, a status notification may be issued at an ID processing touchpoint requesting the sharing of a user ID in response to a registered user being presented for authentication. Once the ID processing touchpoint is provided with the ID data of a registered user, notifications may be issued each time the user ID is used and/or processed, e.g. transfer of the user ID to another connected entity, deleting the user ID, storing the user ID and the like. The status notification may be collected by the ID server and accordingly distributed to the corresponding client applications. Furthermore, the ID processing touchpoints may issue notifications directly to the client application of a corresponding user. The monitoring application may be configured to communicate the status notifications as soon as they are generated or in batches. The client application is configured to receive the status notification issued by the ID server and/or the ID processing touchpoints and accordingly generate user alerts, which are displayed on a graphic user interface (GUI) running on the electronic device of the corresponding registered user. The user alerts may be in the form of a message, a sound, a vibration, and the like. As such, the user is promptly notified about the status of his/her ID data at a specific location and accordingly is in a position to initiate actions.

According to an embodiment, the status notifications may include, but not limited to: user ID arrived, user ID Scheduled, the user ID is Active/Inactive, user ID currently in use, user ID Breached, user ID Deleted.

According to an embodiment, the client application is configured to display on the GUI a set of user-selectable options for initiating one or more actions in response to a notification received from the ID server and/or an ID processing touchpoint.

According to an embodiment, the client application is configured, upon receiving a user response through the GUI, to issue counter-notification to the ID server and/or ID processing touchpoints.

According to an embodiment, the selectable options comprise at least one of providing consent for the sharing of the corresponding ID data to ID processing touchpoints and issuing a breach notification indicating an unauthorised ID transaction at an ID processing touchpoint.

The client application provides to the user, in response to receiving status notifications, a number of selectable options on the GUI. For example, the client application, in response to receiving a request from the ID server and/or an ID processing touchpoint to share the identity data, may provide a set of options to the user, which may include acceptance or decline of the request. Other options may be included as needed. Furthermore, the selectable options may include an option for reporting a breach of the identity data. The ID management system enables users to maintain control of how their corresponding ID is distributed, used, and processed, by different ID processing systems. Furthermore, the ID managing system presented herein allows users to monitor and manage the user, processing and sharing of their user ID data at different ID processing systems. In this way, the present ID management system offers a secure way for the distribution of user IDs between different ID processing touchpoints and their monitoring thereof.

According to an embodiment, the client application is configured, in response to a user selecting to provide consent for the sharing of the corresponding ID data, to communicate a consent notification comprising the requested ID data of the user to the ID server, the ID server being configured to distribute the ID data at a selected set of ID processing touchpoints.

According to an embodiment, the route is generated based on information obtained from a travel itinerary of the registered user.

The ID server may act as a central point for processing requests for the distribution of user IDs at the different ID processing touchpoints. The ID server may be configured to request, via the issuance of a notification, the consent of registered users to distribute their corresponding user IDs to different ID processing touchpoints. The request for the user ID may be initiated from the ID server and/or the ID processing touchpoints. The client application may generate a consent notification, upon receiving the consent of the user, to the biometric server, which may comprise the user ID. The user ID of the user may be stored in the electronic device of the user. The ID server may store the user ID and distributed it to the ID processing touchpoints, in accordance with the response received from the client application. The ID server may communicate to the client application information regarding the ID processing touchpoints to which the user ID would be distributed. The user, via the GUI, may initiate an action in response to the request received from the ID server, which may include one of accepting the request, refuse the request, report the request, and the like. The route displayed on the GUI may be generated based on a travel itinerary of a user. For example, the client application and/or the ID server may obtain the travel itinerary from a connected travel application. As such a pre-approved route may be constructed for the distribution of the user ID in advance of the user journey. For example, the ID server may schedule for the user ID to be transferred to an ID processing touchpoint on the route according to the itinerary schedule. The user may pre-approve the distribution of the user ID along the route via the client application. The user via the route displayed on the GUI may monitor the transfer and use of the corresponding ID.

According to an embodiment, upon receiving a selection for issuing a breach notification, the client application is configured, to issue a corresponding breach notification, which is communicated to a secure server, where it is stored in a registry, the security server being part of the ID management system.

According to an embodiment, the security server is configured upon receiving the breach notification to collect information from the one or more ID processing touchpoints associated with the unauthorised transaction and accordingly communicate a report to the client application of the registered user, the report comprising information associated with the breach.

According to an embodiment, the security server, upon receiving the breach notification is configured to initiate a set of breach control actions for assessing and managing the identified ID breach, the breach control actions comprising at least one of investigating the cause of the breach, notifying other ID processing touchpoints of the breach, and deleting the breached data from the ID management system and/or other ID processing touchpoints.

The ID management system of the present invention offers enhanced security in the distribution, use and processing of user IDs with the provision of a secure server. The security server may be configured to receive notifications from the client application and/or ID server with regards to the breach of a user ID at one or more ID processing touchpoints. The security server, upon receiving the breach notification, retrieves from the one or more ID processing touchpoint information associated with the breached transactions and accordingly generate a report, which is sent to the user. At the same time, a registry of the breach data is maintained for 'n' days or till the breach is identified. The registry may maintain the list of breached data or reference of the transaction. The security server may compare future ID transaction at the ID processing touchpoint with the data stored in the registry for verification. The security server, depending on the severity of the breach, may take a number of actions. For example, the deletion of known and authorised traces of the identity/data is initiated via an action system. The action system, depending on the type of registered ID processing touchpoints, may initiate at least one of:.

According to an embodiment, the client application is configured to display on the GUI a graphical representation of the status of the corresponding ID data at different ID processing touchpoints.

According to an embodiment, the graphic representation is in the form of a route displaying the transfer of the ID data between different ID processing touchpoints.

According to an embodiment, based on the status notification, the client application is configured to display on the route the current status of the ID data at the different ID processing touchpoints.

The ID management system of the present invention is configured to provide to the user a visual representation of how the corresponding ID is used at different touchpoints. For example, the client application may generate a map showing the status of the user ID at different ID processing touchpoints over a period of time. The ID processing touchpoints may be represented with an icon, which may be unique depending on the nature and type of the ID processing touchpoint. Accordingly, the status of the user ID at the different touchpoints may be displayed, thereby allowing the user to more efficiently assess the status of their ID data over a period of time. Furthermore, the client application may selectively display information on the GUI. For example, the GUI, in response to the user selecting an icon of an ID processing touchpoint, may open a new window displaying information on the use and processing of the user ID at the specified ID processing touchpoint over a period of time. By selectively displaying information on the GUI may reduce the battery and processing requirements, as well as enhance the comprehension of the status of the user ID at ID processing touchpoint. The selection of the ID touchpoint may be performed in a number of ways such as tapping an icon on a touch-sensitive display of the electronic device, selecting The GUI may further provide a number of options to the user, which when selected initiate a predetermined action, e.g. delete, authorise, remove, and the like.

According to an embodiment, the ID processing touchpoints are connected to the ID server on the basis of membership.

According to an embodiment, the ID server is configured to include or exclude ID processing touchpoints from membership based on metrics indicative their ID security performance.

To enhance the security of the ID management system, the ID processing touchpoints are connected to the ID server on the basis of membership. The ID server may comprise a membership module for registering ID processing touchpoints to the system. For example, the membership module may be configured to allow only ID processing touchpoints with specific security characteristics to be registered. Once the ID processing touchpoint is registered, it is added to the network of connected ID processing touchpoints to which the user IDs may be transferred. The ID server may be configured to monitor the security performance of the ID processing touchpoint. For example, the ID server may extract security risk metrics from information obtained from the security server. For example, an ID processing touchpoints that have been the subject of a breach, e.g. due to spoofing, may be considered as a risk to the security. The ID server, based on the security risk metrics, may invoke the membership of a registered biometric processing touchpoint.

According to a second aspect, a method for managing identity, IDs, data of registered users is provided. The method comprising:.

The following drawings are provided as an example to further explain and describe various aspects of the invention:.

The present invention will be illustrated using the exemplified embodiments shown in <FIG>, which will be described in more detail below. It should be noted that any references made to dimensions are only indicative and do not restrict the invention in any way. While this invention has been shown and described with reference to certain illustrated embodiments thereof, it will be understood by those skilled in the art that various changes in form and details may be made therein without departing from the scope of the invention encompassed by the appended claims. Furthermore, while the invention has been described with references to a particular system and method for monitoring and managing biometric identities (IDs) of registered users, it should be understood by those skilled in the art that the present system and method may be used for the monitoring and managing of any type of identity (ID) data without departing from the scope of the invention encompassed by the appended claims.

<FIG> shows an example of an identify (ID) management system <NUM> according to embodiments of the present invention. The ID management system <NUM> is provided with an ID server <NUM> that is communicatively coupled via a communication network to one or more ID processing touchpoints <NUM> and to one or more client applications <NUM> running corresponding electronic devices of registered users. The ID management system <NUM> is configured to manage the user identities (IDs) of a plurality of registered users. The user IDs may comprise a range of information for authenticating the user, which may include but not limited to biometric characteristics, name, address, password, and the like. A security server <NUM> may be provided for dealing with authentication breaches occurring at the ID processing touchpoints <NUM>, e.g., due to spoofing. According to embodiments of the present invention, the ID processing touchpoints <NUM> are configured to issue notifications regarding the processing and/or use of user IDs. The ID server <NUM> may be configured to receive and process the notifications and accordingly distribute them to the corresponding client applications <NUM>, whereby they are notified to the user via user alerts displayed on a Graphical User Interface (GUI) running on the electronic device of the user. The ID processing touchpoints <NUM> are configured to authenticate a user at least based on the information contained in the corresponding user ID during an authentication procedure. Each ID processing touchpoints <NUM> may be part of a corresponding vendor application, which may be accessed by the user for the provision of goods and services. For example, the vendor application may be a travel booking application, which the users may use to access their corresponding travel booking. Furthermore, the ID processing touchpoints <NUM> may be physical touchpoints provided at different locations to authenticate users. For example, the ID processing touchpoints may be provided at airports to check-in passengers, or at hotels to check-in travellers. The Id processing touchpoints may be provided with scanning equipment for obtaining a biometric scan of the user, which is compared with the biometric scan provided in the user ID.

According to embodiments of the present invention, the user ID may contain biometric characteristics of the user. In the context of the present invention, biometric characteristics may refer to physical or behavioural human characteristics, which can be used to digitally identify a person to grant access to systems, devices or data. The biometric characteristics may be categorised into hard and soft biometric characteristics. As such, biometric characteristics may include, but not limited to, age, gender, ethnicity, height, facial measurements and geometry, scars or marks, physical characteristics such as the face, iris, fingerprint, hand geometry, vein, behavioural such as signature, keystroke, voice, gait, and the like, or biological such as DNA, bio-signals, e.g. bioelectrical signals such as the electrocardiogram (ECG) and the electroencephalogram (EEG), MRI images of X-Ray images. The biometric characteristics may be used in combination to ensure greater accuracy of identification.

In the context of the present invention, a biometric scan may refer to any means for detecting and extracting biometric characteristics of a user. For example, a biometric scan may be performed on images, recordings, data, e.g. DNA data, electrical signals, e.g. EEG, spectral data obtained from a spectral sensor, and the like.

In the context of the present invention, scanning equipment may be any device that is capable of obtaining a scan of a user. Such devices may include, but not limited, to cameras, voice recorders, fingerprint readers, iris scanners, vein scanners, gait assessment devices, sensors, spectral imaging devices, wearable sensors, handwriting detection devices, typing detection devices for keystroke recognition, and the like.

In the context of the present invention, a biometric authentication procedure indicates the security procedures and checks that may be applied at an ID processing touchpoint <NUM> to authenticate, verify, and identify users. The type of procedures and/or checks performed at an ID processing touchpoint <NUM> may vary depending on the biometric matching accuracy between the registered ID and the captured biometric scan of the user. Each ID processing touchpoint <NUM> may require a target biometric matching accuracy to authenticate the identity of a user successfully. As such, the ID processing touchpoints <NUM>, may initiate additional authentication procedures and security checks to authenticate a user, in the case where the matching accuracy is below the target biometric matching value. For example, a biometric ID with high matching accuracy, e.g. the biometric accuracy is within a preferred range, may authenticate a user via an automatic biometric authentication procedure, e.g. automated border control electronic gate. On the contrary, if the biometric matching accuracy is below a predetermined target value, then additional security checks and procedures may be initiated at the biometric authentication checkpoint, such as agent verification requiring other forms of identity to identify the user.

<FIG> shows an example of how information is communicated between the client application <NUM>, the ID server <NUM>, and the ID processing touchpoints <NUM>. As shown, the main server <NUM> is configured to manage the distribution of the user ID <NUM> between different entities <NUM>. Each entity <NUM> is configured to process and use the user ID <NUM> for authenticating a user. The main server <NUM> may request the consent of the user to store the corresponding user ID <NUM>, which is stored in the user device. The request is received as a notification by the client application <NUM> running on the electronic device of the user. The client application <NUM> may notify the user by means of a user alert, which may be displayed on the GUI running on the electronic device. The client application <NUM> may further provide the user with a number of selectable options associated with the consent request, e.g. accept, reject, ignore, and the like. In response to receiving via the GUI, a confirmation by the user that the user ID <NUM> may be shared, the client application issues the consent notification, which may include the user ID <NUM>. The main server <NUM>, receives and stores the user ID <NUM>, and distributes it to the requesting entity <NUM>. The main server <NUM> may distribute the user ID <NUM> to ID processing touchpoints <NUM> that may be part of a pre-approved route. The pre-approved route may be generated based on information provided by the user, e.g. a travel itinerary, or information obtained from other sources, e.g. connected applications. Furthermore, the main server <NUM> may be configured to share the user ID <NUM> to individual entities <NUM>. In turn, each entity may share the user ID <NUM> with other entities <NUM> that may be in the same network. Each may be configured to issue notifications associated with the user ID <NUM>. For example, an entity <NUM> may issue transit/status notifications each time a user ID <NUM> is received, processed, or used by the corresponding entity <NUM>. The transit/status notifications may be communicated to the main server, where they are processed and communicated to the corresponding client application <NUM>. The client application <NUM>, upon receiving the transit/status notifications may be configured to issue user alerts, which are displayed on the GUI of the user. The client application <NUM> may further be configured to receive transit/status notifications directly from the different entities, as shown in <FIG>. <FIG> shows an example of how the user ID <NUM> may be distributed to different service providers according to embodiments of the present invention. As shown, the main server <NUM> may distribute the user ID <NUM>, at the consent of the user, to a first entity <NUM>, e.g. a hotel. The first entity <NUM> may, in turn, transfer the user ID <NUM>, for the provision of a connected service, to a second entity, e.g. a local event, which may, in turn, transfer the user ID <NUM> to a third entity, e.g. a taxi. Each entity <NUM>, as previously explained with reference to <FIG> and <FIG>, issues a transit/status notification, which may be transferred to the main server <NUM> or directly to the client application <NUM>. As such, the user stays informed at how his/her user ID <NUM> is processed, used, and transferred at different locations.

As shown in <FIG>, the communication between the main server <NUM>, the client application <NUM> and the vendor applications <NUM> may be achieved with the use of deep links. As such, sensitive information may be securely communicated to the corresponding device.

Referring now to <FIG>, the client application <NUM>, as previously discussed, may display user alerts to a GUI <NUM> running on the electronic device. The GUI may be part of the client application <NUM>. The client application <NUM> may be configured to graphically represent on the GUI the route <NUM> taken by the user ID <NUM> as it is received, processed and used at different locations <NUM>. The different locations may be represented by predetermined icons, as shown in <FIG>. The user alerts <NUM> may be displayed on the GUI, along with a set of options (not shown), which the user may select from to initiate an action in response to the notification. As shown in <FIG>, the status <NUM> of the user ID <NUM> at each location may be shown at each location <NUM>. As such, users may monitor in a quick and easy manner the status of the corresponding user ID <NUM>. Furthermore, the user may take action associated with the status notifications received <NUM> and <NUM>. For example, as shown in <FIG>, the user upon identifying an unauthorised use of their user ID <NUM> may issue a breach notification <NUM>, which is communicated at the corresponding ID processing touchpoint <NUM> and/or the main server <NUM>. As such, the user may promptly intervene in case of improper use of their user ID <NUM>.

Referring now to <FIG>, the breach notification may be transmitted to the ID processing touchpoint <NUM> and/or the main server <NUM>, as shown in <FIG>. As soon as the breach notification is received at the ID processing touchpoint <NUM>, e.g. entity <NUM>, a damage control procedure <NUM> may be initiated. <FIG> shows an example of the actions taken during an authentication breach, which may be as follows:.

As previously discussed, the action system <NUM> may communicate with the corresponding ID processing touchpoints <NUM>, e.g. entities <NUM> to n, to verify the breach and further obtain further information that would allow the identification of the person responsible for the breach. The information obtained is stored in the registry <NUM> in the form of references to transactions, which may be passed on to the client application <NUM>. The information obtained from the different ID processing touchpoints <NUM> may be dependent on their type and the permission available for sharing data.

In general, the system presented herein enables a user to monitor and manage their user ID <NUM> as it is transferred, processed and used at different devices, systems, and applications. As such, the user may withdraw permission of the use of their user ID <NUM> and further be in a position to take action when a breach of their user data is identified.

In general, the routines executed to implement the embodiments of the invention, whether implemented as part of an operating system or a specific application, component, program, object, module or sequence of instructions, or even a subset thereof, may be referred to herein as "computer program code," or simply "program code. " Program code typically comprises computer-readable instructions that are resident at various times in various memory and storage devices in the computer and that, when read and executed by one or more processors in a computer, cause that computer to perform the operations necessary to execute operations and/or elements embodying the various aspects of the embodiments of the invention. The computer-readable program instructions for carrying out operations of the embodiments of the invention may be, for example, assembly language or either source code or object code is written in any combination of one or more programming languages.

The program code embodied in any of the applications/modules described herein is capable of being individually or collectively distributed as a program product in a variety of different forms. In particular, the program code may be distributed using the computer-readable storage medium having the computer-readable program instructions thereon for causing a processor to carry out aspects of the embodiments of the invention. Computer-readable storage media, which is inherently non-transitory, may include volatile and non-volatile, and removable and non-removable tangible media implemented in any method or technology for storage of information, such as computer-readable instructions, data structures, program modules, or other data. Computer-readable storage media may further include RAM, ROM, erasable programmable read-only memory (EPROM), electrically erasable programmable read-only memory (EEPROM), flash memory or other robust state memory technology, portable compact disc read-only memory (CD-ROM), or other optical storage, magnetic cassettes, magnetic tape, magnetic disk storage or other magnetic storage devices, or any other medium that can be used to store the desired information and which can be read by a computer. A computer-readable storage medium should not be construed as transitory signals per se (e.g., radio waves or other propagating electromagnetic waves, electromagnetic waves propagating through a transmission media such as a waveguide, or electrical signals transmitted through a wire). Computer-readable program instructions may be downloaded to a computer, another type of programmable data processing apparatus, or another device from a computer-readable storage medium or an external computer or external storage device via a network. Computer-readable program instructions stored in a computer-readable medium may be used to direct a computer, other types of programmable data processing apparatus, or other devices to function in a particular manner, such that the instructions stored in the computer-readable medium produce an article of manufacture including instructions that implement the functions/acts specified in the flowcharts, sequence diagrams, and/or block diagrams. The computer program instructions may be provided to one or more processors of a general-purpose computer, special purpose computer, or other programmable data processing apparatus to produce a machine, such that the instructions, which execute via the one or more processors, cause a series of computations to be performed to implement the functions and/or acts specified in the flowcharts, sequence diagrams, and/or block diagrams.

In certain alternative embodiments, the functions and/or acts specified in the flowcharts, sequence diagrams, and/or block diagrams may be re-ordered, processed serially, and/or processed concurrently without departing from the scope of the invention. Moreover, any of the flowcharts, sequence diagrams, and/or block diagrams may include more or fewer blocks than those illustrated consistent with embodiments of the invention.

The terminology used herein is for the purpose of describing particular embodiments only and is not intended to be limiting of the embodiments of the invention. As used herein, the singular forms "a", "an" and "the" are intended to include the plural forms as well, unless the context indicates otherwise. It will be further understood that the terms "comprise" and/or "comprising," when used in this specification, specify the presence of stated features, integers, steps, operations, elements, and/or components, but do not preclude the presence or addition of one or more other features, integers, steps, operations, elements, components, and/or groups thereof. Furthermore, to the extent that the terms "includes", "having", "has", "with", "comprised of", or variants thereof are used in either the detailed description or the claims, such terms are intended to be inclusive in a manner similar to the term "comprising".

Claim 1:
A distributed system (<NUM>) for managing identity, ID, data (<NUM>) of a registered user, wherein the ID data (<NUM>) comprises biometric characteristics of the registered user, the ID management system (<NUM>) comprising:
a client application (<NUM>) running on an electronic device associated with the registered user, the client application (<NUM>) comprising a graphic user interface, GUI, (<NUM>) for interacting with the corresponding registered user;
a network of ID processing touchpoints (<NUM>), wherein an ID processing touchpoint (<NUM>) is configured to process ID data (<NUM>) for the authentication of users, wherein the ID processing touchpoint (<NUM>) is configured to issue a status notification associated with the processing and/or use of the ID data (<NUM>) by the ID processing touchpoint (<NUM>); and
an ID server (<NUM>) configured to receive and distribute the status notification issued by the ID processing touchpoint (<NUM>) to the corresponding client application (<NUM>);
wherein the client application (<NUM>) is configured, in response to receiving the status notification from the ID server (<NUM>), to issue user alerts on the GUI (<NUM>) to notify the registered user on the status of the corresponding ID data (<NUM>) at the ID processing touchpoint (<NUM>); and
wherein the client application (<NUM>) is configured to display on the GUI (<NUM>) a set of user-selectable options for initiating one or more actions in response to the status notification received from the ID server (<NUM>).