Search All Patents in Z-ARCHIVE-Cryptocurrency
Patent US9749140
Issued 2017-08-29
Systems And Methods For Managing Digital Identities
Systems and methods for managing digital identities. In some embodiments, a method is provided, comprising acts of: using a plurality of measurements taken from a user to generate an identifier for the user, the identifier comprising a cryptographic proof of the plurality of measurements; instantiating a digital identity representation associated with the identifier for the user, the digital identity representation comprising program code that implements rules for attestation; generating an electronic signature over the digital identity representation; and publishing the digital identity representation and the electronic signature to a distributed ledger system.
Much More than Average Length Specification
View the Patent Matrix® Diagram to Explore the Claim Relationships
USPTO Full Text Publication >
- 1. A computer-implemented method comprising acts of:
generating a badge for use in attesting to an identity of an identity owner, wherein the act of generating comprises:
identifying a plurality of values, each value corresponding to an attribute of a plurality of attributes;
generating an attribute attestation for each attribute of the plurality of attributes, the attribute attestation comprising at least one cryptographic proof of the value corresponding to the attribute of the plurality of attributes; and
identifying an entity as being responsible for verifying the badge;
publishing the badge to a distributed ledger system, wherein:
the badge includes the attribute attestation for each attribute of the plurality of attributes;
the distributed ledger system comprises a digital identity representation associated with the identity owner;
the digital identity representation comprises program code that implements rules for attestation; and
for at least one attribute of the plurality of attributes, the program code, when executed, allows access to a cryptographic proof in the attribute attestation for the at least one attribute only when the attribute attestation is in a VERIFIED state; and
sending, via the distributed ledger system, a request to the responsible entity to verify the badge; and sending, via a channel outside the distributed ledger system, to the responsible entity, the plurality of values corresponding respectively to the plurality of attributes.
- 7. A computer-implemented method performed by an entity, the method comprising:
receiving, via a distributed ledger system, a request to verify a badge, the badge comprising a plurality of attribute attestations corresponding respectively to a plurality of attributes for an identity owner, wherein for each attribute of the plurality of attributes, the corresponding attribute attestation comprises a cryptographic proof, and wherein the badge identifies the entity as being responsible for verifying the badge; receiving, via a channel outside the distributed ledger system, a plurality of values comprising, for each attribute of the plurality of attributes, a value corresponding to that attribute; and for at least one attribute of the plurality of attributes:
checking whether the cryptographic proof in the attribute attestation corresponding to the at least one attribute is a valid proof of the received value corresponding to the at least one attribute;
verifying, based on information relating to the identity owner, the received value corresponding to the at least one attribute; and
in response to determining that the cryptographic proof is a valid proof of the received value corresponding to the at least one attribute, and successfully verifying the received value corresponding to the at least one attribute:
electronically signing the attribute attestation corresponding to the at least one attribute; and
causing, via the distributed ledger system, the attribute attestation corresponding to the at least one attribute to be in a VERIFIED state.
- 14. A system comprising:
at least one processor; at least one non-transitory computer-readable medium having stored thereon instructions that program the at least one processor to: generate a badge for use in attesting to an identity of an identity owner, wherein the at least one processor is programmed to generate the badge at least in part by:
identifying a plurality of values, each value corresponding to an attribute of a plurality of attributes;
generating an attribute attestation for each attribute of the plurality of attributes, the attribute attestation comprising at least one cryptographic proof of the value corresponding to the attribute of the plurality of attributes; and
identifying an entity as being responsible for verifying the badge;
publish the badge to a distributed ledger system, wherein:
the badge includes the attribute attestation for each attribute of the plurality of attributes;
the distributed ledger system comprises a digital identity representation associated with the identity owner;
the digital identity representation comprises program code that implements rules for attestation; and
for at least one attribute of the plurality of attributes, the program code, when executed, allows access to a cryptographic proof in the attribute attestation for the at least one attribute only when the attribute attestation is in a VERIFIED state; and
send, via the distributed ledger system, a request to the responsible entity to verify the badge; and send, via a channel outside the distributed ledger system, to the responsible entity, the plurality of values corresponding respectively to the plurality of attributes.
- 20. A system comprising:
at least one processor; at least one non-transitory computer-readable medium having stored thereon instructions that program the at least one processor to:
receive, via a distributed ledger system, a request to verify a badge, the badge comprising a plurality of attribute attestations corresponding respectively to a plurality of attributes for an identity owner, wherein for each attribute of the plurality of attributes, the corresponding attribute attestation comprises a cryptographic proof, and wherein the badge identifies the entity as being responsible for verifying the badge;
receive, via a channel outside the distributed ledger system, a plurality of values comprising, for each attribute of the plurality of attributes, a value corresponding to that attribute; and
for at least one attribute of the plurality of attributes:
check whether the cryptographic proof in the attribute attestation corresponding to the at least one attribute is a valid proof of the received value corresponding to the at least one attribute;
verify, based on information relating to the identity owner, the received value corresponding to the at least one attribute; and
in response to determining that the cryptographic proof is a valid proof of the received value corresponding to the at least one attribute, and successfully verifying the received value corresponding to the at least one attribute:
electronically signing the attribute attestation corresponding to the at least one attribute; and
causing, via the distributed ledger system, the attribute attestation corresponding to the at least one attribute to be in a VERIFIED state.
