Abstract: This invention describes a method, and an apparatus for identifying and authenticating an Individual Client (IC), or a Secure-Computing-Device online while ensuring the privacy of the IC's personal data, (IPD), and information against identity theft and fraud by using a combination of prior art Blockchain technology, public key cryptography, and a newly created Biometric Digital Certificate issued by an accredited Biometric Certification Authority. The IC's transactions data are dynamically updated, cryptographically signed for integrity and stored in an immutable blockchain each time the IC requests service from a Service Provider and provides an accurate and traceable audit trail. During online access, the IC transactions data stored in the Blockchain Databases are processed by a Data Analytics Authentication Processor to generate the Service-Access-Authentication-Tag, which is an algorithmic score that determines the IC's eligibility to access online services offered by a plurality of Services Providers.

Abstract: This invention describes a system, method and computer-readable medium for authenticating the identity of a client in non-face-to-face transactions. At the core of the invention is the creation and use of live distributed ledger Biometric and Biographical Blockchain Databases, the use of live biometrics and the use of prior art Public Key digital certificate technology. The client data in the Blockchain is dynamically updated and digitally signed each time new live samples are captured. The Blockchains serve as a permanent history of the client's biometric or biographical transactions that can be used to create a completely traceable audit trail.

Abstract: A system, method and a computer-readable medium for authenticating a user in a live manner in non-face-to-face transactions, including a user downloading an authentication application from a server to a pervasive computing device, and after downloading the application, having an icon residing on the display of the device. When the authentication application is activated by the user, biographical and multi-biometric information of the user is requested by the application, and subsequently submitted to an authentication engine residing in a secure network cloud. The authentication process further includes, verifying by the authentication engine all of the requested information, compliance with government regulations such as CFT/AML, and the 4th Data Protection Principle. Users have the ability to check their biographical data through a system called, RITE, forming part of this application. Memorised IDs and passwords are not required. The aliveness of the user is verified at each transaction request.

Abstract: A system, method and a computer-readable medium for authenticating a user in a live manner in non-face-to-face transactions, including a user downloading an authentication application from a server to a pervasive computing device, and after downloading the application, having an icon residing on the display of the device. When the authentication application is activated by the user, biographical and multi-biometric information of the user is requested by the application, and subsequently submitted to an authentication engine residing in a secure network cloud. The authentication process further includes, verifying by the authentication engine all of the requested information, compliance with government regulations such as CFT/AML, and the 4th Data Protection Principle. Users have the ability to check their biographical data through a system called, RITE, forming part of this application. Memorised IDs and passwords are not required. The aliveness of the user is verified at each transaction request.

Abstract: A Domain Name System (DNS) proxy agent of the present invention performs a name query relaying function by redirecting DNS queries and responses to their final destination address, which is unknown to the node which originated the query or response. The real source and destination nodes are known only to the DNS proxy agent. This allows network address of an Internet-based name server to be changed without the requirement to reconfigure the DNS addressed on the LAN-based host.