WO2002019068A2

WO2002019068A2 - Data network based identification method

Info

Publication number: WO2002019068A2
Application number: PCT/EP2001/009939
Authority: WO
Inventors: Otfried Rumberg; Rüdiger BREDENDIEK
Original assignee: Otfried Rumberg; Bredendiek Ruediger
Priority date: 2000-09-01
Filing date: 2001-08-29
Publication date: 2002-03-07
Also published as: WO2002019068A3; DE10043554A1; DE10043554C2; AU2001291807A1

Abstract

The invention relates to a method for the personal identification of a user (2) in a data network. Conventional identification methods of said kind present substantial risks for all parties involved. The aim of the invention is therefore to reduce the time and/or effort required for securely identifying a user (2) in a data network both for the third party (3) requesting the identification and the user (2), without endangering the security of the identification. To this end, the invention provides an identification method in a data network according to which a personal authentication number (8) which is used only once is indicated in addition to the personal identification number (6). On the basis of a combination of the communicated personal identification number (6) and the personal authentication number (8), a data bank (4) provides the identification. The inventive method is advantageous in that it improves the security of the identification of the user (2) by the third party (3) requesting the identification and that it reduces the time and/or effort required by the user (2) for identification.

Description

Data network-based identification procedure

The invention relates to a method for personal identification of a user in a data network by a third party, in which the user is assigned a personal identification number and his personal data are registered in a database.

Such identification methods are used worldwide today. The increasing commercial use of the Internet, for example by financial institutions, department stores or other service providers, is often accompanied by the need to reliably identify the business partner. At the same time, the time-saving advantage of the personal contact between the contracting parties, which is no longer necessary, means that the identity of the declaring contracting party can no longer be verified by conventional means. Even knowing a few details of a person, personal data and bank details, can enable an unauthorized third party to make effective business declarations over the data network under false identity. Such a declaration of intent is usually associated with considerable inconvenience and sometimes with high economic losses for both the identity holder and the recipient of the declaration. The rapidly increasing crime rate in the field of credit card fraud is only an indication that the security of previous data network-based identification procedures is insufficient.

In order to avoid the problems described, a wide variety of institutes go about their business partners at the beginning of a mostly permanent one

BESTATIGUNGSKOPIE Identify business relationships securely once and provide them with options that facilitate subsequent identification. For example, before a financial institution does business with a customer over the Internet, it is currently customary to clearly identify the customer using the Postident procedure or similar procedures and to provide them with a personal identification number and a list of transaction numbers that can be used once. As a rule, institutions that offer business over the Internet have to identify each individual customer in such a complex manner and provide them with the appropriate authorization options.

This procedure is very complex, time-consuming and costly both for the commercial institution and for the customer. Most of the time, the potential customer does not only operate a business connection via a data network and therefore also has to endure such complex identification frequently. In the event that some of the data of the person already identified changes, all business partners must also be informed of this change in a confidential manner or, depending on the type of change, a new, complex and costly personal identification must be carried out.

Starting from the described disadvantages of already known methods for identifying users in data networks, the invention is therefore based on the object of creating a method which reduces the effort of reliably identifying a user in a data network both for the third party requesting the identification and for the user significantly reduced without having to accept any loss of security in identification.

To achieve this object, the invention proposes a method for personally identifying a user in a data network of the type mentioned at the outset, in which the user notifies the third party, in addition to the personal identification number, of a one-time use personal authentication number provided for each identification process, and that the Third parties on the basis of a combination of the communicated personal Identification number and the personal authentication number from the database receives an identification of the user.

The particular advantage of the method according to the invention lies in the security gain in the identification of the user by the third party requesting the identification. For the first time, the user is able to provide the business partner with the necessary information in a secure manner as part of the initiation of a long-term business relationship or only for a one-off business by specifying his personal identification number with a one-time personal authentication number. In addition to the increase in security, the effort involved in identifying a user also decreases.

While users, especially in the case of short-term business relationships, have often only identified themselves to their business partner by specifying a bank details, the method according to the invention is based on identification with a personal, multiple-use identification number and a one-time authentication number. The repeated use of identification information, for example the data of a credit card, has always led to a dangerous loss of security, since this data has retained its identification and sometimes even authorization function after each use. By means of the method according to the invention, the information provided becomes worthless after use and no longer poses a risk to the user. At the same time, the requesting institution is also secured according to the invention with regard to the information about the user without an independent database which is always kept up-to-date and reliably identified To entertain users.

Furthermore, the user is no longer forced to establish a secure business connection, including secure identification, with each business partner, but can, according to the method according to the invention, preferably carry out a secure identification via the database for each individual business or business partner. Should personal data of the user change, for example as part of a change of residence, the user can change the data in the database via a one-time change notification and thus ensure that all business partners who access the data in this database are always correct Work details.

Central databases or decentrally organized, i.e. distributed databases in question.

The database can also reduce the frequency of errors due to incorrect information transmission, in particular by the user. Writing and reading errors in forms filled in under time pressure lose importance due to the inventive method.

The method according to the invention is particularly advantageous if the user uses his personal identification number and the corresponding personal identification number to identify the third party

Authentication number transmitted over a public data network, for example the Internet. This procedure is particularly useful for offers via the Internet because the user is able to use an identical platform both for taking notice of and evaluating the offer and for any acceptance of the offer. This procedure reduces the time required and minimizes the probability of an error. Previous security disadvantages, in particular in the transmission of personal information via public data networks, are eliminated by the method according to the invention.

For the third party who wants to gain security with regard to the identity of the user, it makes sense if the third party receives the personal identification number and the personal one received from the user

Authentication number transmitted to the database via a public data network. The use of a public data network, for example the Internet, for this data transfer has the decisive advantage that the third party can check the user with the appropriate data Information is no longer tied to a specific location. The necessary infrastructure, access to the public data network, is available almost everywhere. This omnipresenting makes the use of the database particularly cost-effective. Since the identical platform can also be used here for the transmission of the information from the user to the third party, as well as for checking the identity of the user, the time expenditure and the frequency of errors are also significantly reduced here. It is also possible to automatically archive such processes and reproduce them exactly at any time with regard to the time sequence and content. The information regarding the validity of the personal identification number and the personal authentication number gives the third party, for example a mail-order company, a reliable guarantee of the trustworthiness of the user and shows whether the identity of the third party can be checked using the database.

An advantageous further development of the invention provides that the third party also has its own personal identifier with each identification process

Identification number and its own personal authentication number are transmitted to the database together with the user's personal identification number and the user's personal authentication number. This procedure additionally increases the security of the method according to the invention. Furthermore, all processes are clearly reproducible due to the uniqueness of the personal authentication numbers.

Since the connection between the third party and the database is preferably also via a public data network, it makes sense if the data transmitted to the database and the data made available by the database are encrypted. The effort of encryption is no longer on the user, but security is still guaranteed in this way.

Another advantageous possibility of using the data in the database arises if the third party receives the personal identification number received from the user, the personal authentication number and others Data to be checked by the user is transmitted via the data network to a server via which the information contained in the database is queried, the server compares the data to be checked with the data in the database and the result of this check is communicated to the third party seeking information. In this way, access to the personal data of this user is excluded upon presentation of the personal identification number and a personal authentication number of a user. Only the result of a review is available, reducing the risk of data misuse. For the user, this means a particularly high level of security with regard to their personal data in the database, which are not disclosed. For the third party, for example a mail order company, the result of an identity check is often sufficient to counter criminal activity, for example an order to the wrong address. The user remains in full control of his personal data and the third party is given the opportunity to verify the information provided.

In order to reduce the effort of identifying a user to a minimum, an advantageous development of the method according to the invention provides that the third party has read access to part of the personal data stored in the database by specifying the combination of personal identification number and personal authentication number User. For the user, the effort of a business relationship with the third party is reduced in such a way that, for example, when concluding a purchase contract for the acceptance of an offer, the user only has to specify the accepted offer and his personal identification number with a personal one

Authentication number must transmit to the third party. When ordering from a mail order company, the information can be reduced to an order number, personal identification number and personal authentication number. The previously required complex filling out of forms, for example for the initial entry or updating of customer data, is no longer necessary, since all data are kept in the database. On the side of the third party, the effort is also considerably reduced since all essential points are regulated with a minimum of data flow. Furthermore, the third party can refrain from sustainably storing information for users of the database, which must be brought up to date on a regular basis, since all relevant data is provided by the database in the course of any business contact. A mail-order company, for example, could completely do without updating a customer directory for ordering processes.

A further advantageous variant of the method according to the invention provides that the user receives confirmation of this identification from the database after the identification has taken place. Such confirmation gives the user additional security regarding the intended use of his data. A process that was not authorized by him would be uncovered in this way and any security gaps in the user or in the system would be subsequently recognized via this information return. With the help of extremely timely communication in the form of SMS messages, electronic mail and similar processes, the user can even cancel goods, for example, in the event of an error or misuse.

Since the amount of information that is made available to the third party from the database in order to achieve the intended purpose of transmitting the information is always different and strongly depends on the type of business relationship between the user and the third party, it is advisable to if the personal identification number and / or the personal authentication number contains a coding which determines which data of the user can be checked or which parts of the personal data registered in the database are accessible to the third party. For example, if the service is free of charge, but which requires knowledge of the user's address, the user can, for example, provide the third party with the personal identification number with a personal authentication number, which precludes the provision of information or verification of information, for example regarding the bank details. It is particularly important to encode the personal identification number and / or personal authentication number, which defines the possible payment methods from the outset in the context of a purchase contract.

Since the address and the name of the user is data that must be given frequently in daily traffic, it makes sense to register the name and / or address of the user in the database.

It is also advantageous if information from the user's ID card is registered in the database. Specifying ID card data can be particularly useful when dealing with public authorities. It may also be important to state the tax number, social security number and other identification numbers.

An advantageous development of the method according to the invention provides that biometric data of the user are registered in the database. This opens up the possibility, for example, of having a biometric identification of a user checked, or of having to set up a biometric identification system to save the institution from having to record the biometric data and authorize it to access the database by means of a personal identification number and a personal authentication number.

Occasionally, in the context of such an efficient correspondence between the user, the third party and the database, reduced to the bare minimum, a personal contact between the third party and the user may be required. For this purpose, it makes sense if the database also contains contact information for the respective user. This information can be, for example, telephone numbers, addresses of electronic mail, fax numbers and the like.

A frequently occurring problem is the secure transmission of bank details and / or credit card data of the user to a third party. A security deficiency can have unfavorable economic consequences, in particular when transmitting credit card data. It therefore makes sense if the database also contains information about bank details and / or credit card Contains user data. Here too, the necessary up-to-dateness of this information can always be ensured with little effort due to the storage of this information in the centrally or decentrally organized database. In addition, security can always be guaranteed due to the access restriction due to the personal identification number in combination with the personal authentication number. In addition, the user is no longer forced to remember a large number of different identifiers and personal identification numbers, since these are stored securely in the database and, if necessary, access is always made according to the invention by specifying the personal identification number in combination with a personal identification number.

In the following, the method according to the invention is explained in more detail with the aid of a special example with reference to figures. Show it:

1: a data network as a platform for the method according to the invention,

2: a flow chart as an example for the method according to the invention,

3: Another flow chart as an example for the method according to the invention,

Fig. 4: An example of a coded personal

Authentication number.

In FIG. 1, the Internet is provided with the reference number 1 as a platform for the method according to the invention. Some elements of this public data network, which play a special role for the method according to the invention, are shown separately. Specifically, these are users 2 or customers, the third party 3 requesting the identification, or a mail-order company and a central database 4 in which the personal data of the users 2 are stored. First, the user 2 causes his personal data 5 to be registered once in the central database 4. The user 2 receives confirmation of this registration together with a personal identification number (IDNR) 6 and a list 7 of unique personal authentication numbers (PAN) 8 using a postident procedure ,

After the identity of the user 2 has been established with certainty, the department store presents the user 2 with offers 9 for the conclusion of a purchase contract for a product 10.

On one of the offers 9, the user 2 decides to buy the goods 10 which have the specifications 11. In order to inform the goods mail order company of its decision to accept the offer 9, the user 2 sends his personal identification number (IDNR) 6 a personal authentication number (PAN) 8 together with the specifications 11 of the goods 10 to the goods mail order company. The personal authentication number (PAN) 8 here contains a code which authorizes the department store for read access to the data of the user 2 in the central database 4. For this purpose the department store sends the received personal identification number (IDNR) 6 together with the personal authentication number (PAN) 8 to the central database 4 which, after checking the identity of the user 2, transmits the data 12 to the department store. At the same time, the coding in the personal authentication number (PAN) 8 authorizes the department store to debit the invoice amount for the ordered goods shipment using the bank details of the user 2, which is also registered in the central database 4. The user 2 receives his goods 10 on the conventional goods shipping route 13.

FIG. 3 shows another example of the method according to the invention. Here the user 2 decides on an offer 9 to buy the goods 10 and selects the credit card as the payment mode. Since the transaction is carried out over the Internet, the user 2 cannot provide a manual signature, but has made an agreement with his financial institution that a personal authentication number (PAN) 8 must be transmitted for such cases. the User transmits the personal identification number (IDNR) 6, the personal, to the sales institute 16

Authentication number (PAN) 8, the specifications 11 for the goods 10 and the credit card number (CCNR) 17 via the public data network. In order to initiate the payment of the purchase price 18, this is sent to a credit institution together with the personal identification number (IDNR) 6 of the user 2 and the personal authentication number (PAN) 8 of the user 2, i.e. that in the central database 4 according to a Identification requesting third party 3 transmitted. The third party 3 sends the transmitted personal identification number (IDNR) 6 of the user 2 and the personal authentication number (PAN) 8 of the user 2 and their own personal identification number (IDNR) 14 with their own personal authentication number (PAN) 15 to the via a secure connection Central database 4, which checks the validity of the combination of the personal identification number (IDNR) 6 of the user 2 with the personal authentication number (PAN) 8 of the user 2. If the result of this check is positive, the central database 4 transmits the confirmation to the third party 3 requesting the identification and the payment is initiated.

FIG. 4 shows a structure of a coded personal authentication number (PAN) 8. The personal

Authentication number (PAN) 8 here consists of nine numbers 20 and three letters 21, which are only given if the requesting third party is to receive 3 information relating to the bank details of user 2.

Claims

claims

1. A method for personal identification of a user (2) in a data network by a third party (3), in which the user (2) is assigned a personal identification number (IDNR) (6) and registers his personal data in a database (4) are characterized in that, in addition to the personal identification number (IDNR) (6), the user (2) provides the third party (3) with a one-time, personal use provided for each identification process

Authentication number (PAN) (8) and that the third party (3) based on a combination of the communicated personal identification number (IDNR) (6) and the personal authentication number (PAN) (8) from the database (4) an identification of the user (2) receives.

2. The method according to claim 1, characterized in that the

For personal identification, the user (2) transmits to the third party (3) his personal identification number (IDNR) (6) and a personal authentication number (PAN) (8) via a public data network.

3. The method according to claim 1, characterized in that the third party (3) received by the user (2) personal

Identification number (IDNR) (6) the personal

Authentication number (PAN) (8) via a public data network to the

Database (4) transmitted.

4. The method according to claim 1, characterized in that the third party (3) with each identification process additionally his own personal identification number (IDNR) (14) and his own personal authentication number (PAN) (15) together with the personal identification number (IDNR) ( 6) of the user and the personal authentication number (PAN) (8) of the user to the database.

5. The method according to claim 1, characterized in that the data transmitted to the database (4) and the data provided by the database (4) are encrypted.

6. The method according to claim 1, characterized in that the

Identification of the user (2) only includes confirmation of the validity of the combination of the transmitted personal identification number (IDNR) (6) and the personal authentication number (PAN) (7) towards the third party (3).

7. The method according to claim 1, characterized in that the

Identification of the user (2) includes confirmation of the validity and correctness of the combination of the transmitted personal identification number (IDNR) (6) and the personal authentication number (PAN) (7) and other transmitted personal data of the user vis-à-vis the third party.

8. The method according to claim 1, characterized in that the third party (3) by specifying the combination of personal identification number (IDNR) (6) and the personal authentication number (PAN) (8) read access to part of the in the database ( 4) stored personal data of the user (2).

9. The method according to claim 1, characterized in that the user (2) receives a confirmation of this identification from the database (4) after identification.

10. The method according to claim 1, characterized in that the personal identification number (IDNR) (6) and / or the personal authentication number (PAN) (8) contains a coding by which it is determined which data of the user (2) are checked can, or to which parts of the personal data registered in the database (4) the third party (3) has access.

11. The method according to claim 1, characterized in that the name and / or address of the user (2) is registered in the database (4).

12. The method according to claim 1, characterized in that information from the identity card of the user (2) is registered in the database (4).

13. The method according to claim 1, characterized in that in the database (4) biometric data of the user (2) are registered.

14. The method according to claim 1, characterized in that contact information on the user (2) is registered in the database (4).

15. The method according to claim 1, characterized in that in the database (4) bank details and / or credit card data of the user (2) are registered.

16. The method according to claim 1, characterized in that the personal identification number (IDNR) (6) and / or the personal authentication number (PAN) (8) consists of both numbers and letters.