William A Madden

US Patent:

8122152, Feb 21, 2012

Filed:

Oct 14, 2004

Appl. No.:

10/965276

Inventors:

Bruce Chittenden - Englewood CO, US
William Madden - Englewood CO, US
Myk Willis - Englewood CO, US

Assignee:

Trustwave Holdings, Inc. - Chicago IL

International Classification:

G06F 15/16

US Classification:

709245, 709226, 709227

Abstract:

Systems and software that enable mapping of a particular network transaction with a specific computer and user in an organization. The network packet may be a live in-transit packet, or a packet that occurred at some time in the past. In a particular implementation, a database currently comprises a collection of records containing fields for username, computer name, IP address of the computer, and logon time. A name resolution is performed by taking an IP address and time as input, and determining from the records in the database what user's computer owned the IP address at that time.

US Patent:

20140012763, Jan 9, 2014

Filed:

Jul 9, 2012

Appl. No.:

13/544564

Inventors:

William Madden - Denver CO, US
Chris Cochran - Highlands Ranch CO, US
Patty McKernan - Parker CO, US

Assignee:

The Western Union Company - Englewood CO

International Classification:

G06Q 20/40

US Classification:

705 71, 705 44

Abstract:

Embodiments of the invention provide a fraud deterrent for retail money transfer or stored value product. In some embodiments, a two dimensional grid of number, letters, characters, and/or symbols can be provided retail packaging or cards that can be used as a second authentication factor in order to redeem funds. In some embodiments, methods and/or systems are also provided that associate control numbers with the grid, create the grid, provide the grid on packaging, and/or use the grid to authenticate a customer.

US Patent:

20150356523, Dec 10, 2015

Filed:

Jun 7, 2014

Appl. No.:

14/298906

Inventors:

- Denver CO, US
William Evan Madden - Denver CO, US

International Classification:

G06Q 20/06
G06Q 20/38
H04L 9/32

Abstract:

The present invention involves systems and methods that allow participants in cryptocurrency networks to exchange cryptocurrency for traditional currency legally and safely without requiring the use of a traditional exchange or online brokerage as a fiduciary. The invention accomplishes this through the use of a decentralized identity verification protocol that allows a service provider to verify the identity of a participant and then publish an identity signature on the participant's cryptocurrency address or addresses. The invention enables full compliance with Country specific customer identification program and anti-money laundering requirements, and maintains the ability to independently satisfy requests for information or data retention requirements if requested by legally authorized parties, but does not require that the participant store the private keys or access controls to their cryptocurrency on an exchange or brokerage service.The invention serves to verify a participant's identity in full compliance with US Bank Secrecy and Patriot Act provisions or similar regulations where identification may be achieved through non-documentary or documentary identity verification procedures. After passing the applicable verification procedure, the service provider stamps the participant's cryptocurrency address with a transaction containing an identity signature. This identity signature within the transaction consists of a public indicator of the participant's Country and subdivision, a compliance level code, an ID type indicator, and an identity hash. The identity hash is created from the digests of cryptographic hash functions where the participant's personal information is used as an input. The service provider signs the transaction with their authorized private key that corresponds to their publicly accessible public key. This serves as a publicly verifiable confirmation that the identity associated with the address in question was validated by the service provider authorized to act on behalf of the regulatory authority.The participant may then purchase and sell cryptographic currency from and to a third party exchange or brokerage service legally and safely when using their verified cryptocurrency address. This is because the third party is able to confirm compliance by openly referencing and verifying the identity verification transaction present on the address. Subsequent transactions where the third party sells or purchases cryptocurrency for the verified participant are similarly stamped with a transaction conforming to the identity verification protocol. This allows the third party interacting with the verified participant's address to observe any regulations limiting the amount or frequency of transactions over a variable period of time. It follows that this address could be used with any third party or participant in the cryptocurrency network that observes the decentralized identity verification protocol, all without requiring the third party or participant to collect and verify personal information redundantly. The ability to verify an identity remotely also eliminates the need for the third party to act as a fiduciary holding the private keys or access controls to the verified address. Lawful requests for information by authorized authorities are served to the service provider as digitally signed transactions that may then be linked to the participant's identity and transactions, allowing the protocol to observe subpoenas or similar lawful requests for information. The encrypted personal information may be held in escrow by the service provider indexed to the verified cryptocurrency address for such purposes. An alternate embodiment would store the encrypted personal information in a decentralized network of other participants, with the information accessible for retrieval using the public key of the verified cryptocurrency address and decryption using the corresponding private key, decentralizing the process entirely except for the identity verification step.