Web application user identification by limited self-recognition

Abstract

A system and method for provides unverified users an ability to act upon private records known to them while protecting user privacy by not reflecting private information back to the unverified user. As an unverified user inputs information related to their identity into an interface, the system searches an indexed database which may include both registered users and/or unregistered customers indexed from a single data source or from disparate data sources.

We claim: 
     
         1 . A method for authenticating a user of a web application user interface comprising:
 receiving on a central server computing device, private user information and non-private information associated with a verified user or a new user;   storing the private user information on a database;   transmitting to an unverified user computing device a first series of one or more user interface dialogs configured to accept self-recognizable user information input by an unverified user;   receiving from the unverified user computing device the self-recognizable user information;   searching for a data record field stored on the database which matches at least a portion of the self-recognizable user information;   retrieving related user information records which contain the data record field which matches at least a portion of the self-recognizable user information;   transmitting to the unverified user computing device at least a portion of the related user information;   transmitting to the unverified user computing device a query for confirmation of self-recognition;   receiving from the unverified user computing device data indicating a confirmation of self-recognition;   transmitting to the unverified user computing device a second series of one or more user interface dialogs configured to allow the unverified user to schedule an appointment for a known user, wherein no private information is transmitted to the unverified user computing device;   receiving from the unverified user computing device information to schedule the appointment.   
     
     
         2 . The method as in  claim 1 , wherein the at least a portion of the related user information comprises a make of a vehicle. 
     
     
         3 . The method as in  claim 1 , wherein the at least a portion of the related user information comprises a model of a vehicle. 
     
     
         4 . The method as in  claim 1 , wherein the at least a portion of the related user information comprises a year of a vehicle. 
     
     
         5 . The method as in  claim 1 , wherein the known user is the new user or the verified user. 
     
     
         6 . The method of  claim 1  further comprising:
 transmitting to the unverified user computing device a third series of user interface dialogs configured to allow the unverified user to input additional authentication information; 
 receiving from the unverified user computing device the additional authentication information; 
 confirming that the additional authentication matches authentication information corresponding to the known user; 
 transmitting to the unverified user computing device a fourth series of configured user interface dialogs containing private information related to the known user. 
 
     
     
         7 . The method of  claim 6  wherein the fourth series of configured user interface dialogs further comprises a capability to edit records corresponding to the known user. 
     
     
         8 . The method of  claim 1  further comprising:
 transmitting to the unverified user computing device a third series of user interface dialogs configured to allow the unverified user to input additional authentication information; 
 receiving from the unverified user computing device additional authentication information; 
 transmitting an email message to an email address related to the known user wherein the message includes information related to the dated record. 
 
     
     
         9 . The method of  claim 1  wherein the self-recognizable user information comprises a phone number. 
     
     
         10 . The method of  claim 1  wherein the self-recognizable user information comprises an email address. 
     
     
         11 . The method of  claim 1  wherein the self-recognizable user information comprises a vehicle identification number. 
     
     
         12 . The method of  claim 1  wherein the self-recognizable user information comprises a vehicle license plate. 
     
     
         13 . The method of  claim 1  whereby using self-recognizable user information matched to the known user, the unverified user is provided a capability to schedule and confirm an appointment without private information being revealed to the unverified user. 
     
     
         14 . The method of  claim 1  wherein a query for confirmation of self-recognition comprises a selection query from among a group of one or more user products. 
     
     
         15 . A system for web application user identification and limited authentication comprising:
 a central server computing device configured to store identification information in a database, wherein the identification information comprises one or more items of information associated with one or more users, wherein the central server computing device is configured to receive self-recognizable user data;   a database management system comprising a processor, configured to search for user record entries in the database matching at least a portion of the self-recognizable user data;   the central server computing device further configured to:
 transmit to the unverified user computing device related user information from one or more user record containing a user record entry of which at least a portion matches the self-recognizable user data; 
 transmit to the unverified user computing device a query for confirmation of self-recognition; 
 receive from the unverified user computing device data indicating a confirmation of self-recognition; 
 transmit to the unverified user computing device a user interface dialog configured to allow the unverified user to schedule an appointment for a known user, wherein no private information is transmitted to the unverified user computing device; 
 receive from the unverified user computing device information to schedule an appointment. 
   
     
     
         16 . A system as in  claim 15  wherein the database management system is configured to index identification information received from a database of registered users. 
     
     
         17 . A system as in  claim 15  wherein the database management system is configured to index identification information received from a customer database. 
     
     
         18 . A system as in  claim 15  wherein the database management system is configured to index identification information received from a customer database. 
     
     
         19 . A system as in  claim 15  wherein the user identifying information is a phone number. 
     
     
         20 . A system as in  claim 15  wherein the user identifying information is an email address.