MULTI-TIERED IDENTITY VERIFICATION AUTHORITY FOR E-COMMERCE

摘要

Any single or combination of password log-in (1), mart card (2) or biometric (3) identification routines may be adapted in the system by authority software (4) used in conjunction with the user's browser and/or terminal (5). The ID authority (10) is interconnected between an enrolled user (6) and web site provider (20) and controls enrollment, customer support and administration. The ID authority site (10) includes interconnected web site server (101), LDAP server (102), encryption services server (103) and database (104) containing user and subscriber profiles. Web site providers (20) subscribing to the ID authority (10) includes identity verification software scripts provided by the authority (10) in their HTML pages (22). Communications between the user (5) and ID authority (10) may be encrypted through server (103). The identity data from the user (5) in compliance with the demand is sent in a message packet (15) to the authority (10). Depending on the comparison result, a response is sent, either failure or success is sent to the user terminal (15). The user terminal (15) then transmits the verification code (23) to the identity authority (10). In enrolling in the system (11), the user (5) provides an identity profile (12) that can include a combination of biometrics and authentication methods (1c), (2c), or (3c). The biometric software (7) is installed on the user terminal (15). The browser software includes a mechanism for conventionally communicating with a web site and for receiving a verification demand from a web site (8).