IP Library Granted Patent US 12689606
Granted Patent B2
US 12689606 · App. 18/238,411 · Granted Jul 21, 2026

Decentralized identifier determination by a registry operator or registrar

Inventors: Andrew Kaizer (Arlington, VA); Swapneel Sheth (Fairfax, VA)
Assignee: VeriSign, Inc.
H04L61/3025H04L61/4511H04L2101/618
View Patent ↗
Loading inventors, assignments & file history…
Monitor This Case
Get email alerts when status or documents change.
Order Certified Copies
Most orders are placed with the USPTO same day — all within 24 business hours.
Order via The Patent Place →
Pre-filled with this patent's details
Quick Facts
Patent No.
US 12689606
App. No.
18/238,411
Granted
Jul 21, 2026
Kind
B2
Abstract

Techniques for identifying a registrant of a domain name using a decentralized identifier are described herein. A computing device can determine a decentralized identifier (DID) for associating with the domain name and validate an identity of the registrant based on the decentralized identifier. The computing device can be associated with a registrar or a registry operator that uses the decentralized identifier during registration of a domain name and/or to perform operations after the domain name is registered. The computing device can use the decentralized identifier in place of personal information to identify the domain name.

Claims (66)

1 . A computer-implemented method comprising:

receiving, by a registrar, a first data from a registrant requesting an action associated with a domain name maintained in a registry by a domain name system registry operator for the domain name, wherein the domain name system registry operator is configured to maintain the registry of domain names associated with a domain;

determining, by the registrar, a decentralized identifier to represent personal identifiable information of the registrant, wherein determining the decentralized identifier to represent the personal identifiable information of the registrant comprises:

determining that the domain name included in the first data is associated with the personal identifiable information; and

generating, by the registrar, the decentralized identifier;

determining a second data based on the decentralized identifier and the domain name, the second data excluding the personal identifiable information of the registrant; and

outputting the second data to the domain name system registry operator to verify an identity of the registrant.

2 . The computer-implemented method of claim 1 , wherein:

the first data identifies a decentralized identifier method included as part of the decentralized identifier.

3 . The computer-implemented method of claim 1 , wherein determining the decentralized identifier further comprises:

determining that the domain name is not associated with a previously generated decentralized identifier; and

generating the decentralized identifier responsive to determining that the domain name is not associated with the previously generated decentralized identifier.

4 . The computer-implemented method of claim 1 , wherein determining the decentralized identifier comprises:

determining that the domain name is associated with a previously generated decentralized identifier; and

accessing the previously generated decentralized identifier for output as the decentralized identifier.

5 . The computer-implemented method of claim 1 , further comprising:

configuring one or more verifiable credentials to include as part of the second data.

6 . The computer-implemented method of claim 5 , the computer-implemented method further comprising:

outputting, to the registrant, a combination of the one or more verifiable credentials and the decentralized identifier to meet domain name registration criteria.

7 . The computer-implemented method of claim 1 , further comprising:

transmitting the decentralized identifier to the registrant to enable control of the domain name.

8 . The computer-implemented method of claim 1 , wherein the registrant is a first registrant, and the computer-implemented method further comprising:

transmitting at least a portion of the second data to a second registrant to enable the second registrant to identify the first registrant.

9 . One or more non-transitory computer-readable media storing instructions that, when executed, cause one or more processors to perform operations comprising:

receiving, by a registrar, a first data from a registrant requesting an action associated with a domain name maintained in a registry by a domain name system registry operator for the domain name, wherein the domain name system registry operator is configured to maintain the registry of domain names associated with a domain;

determining, by the registrar, a decentralized identifier to represent personal identifiable information of the registrant, wherein determining the decentralized identifier to represent the personal identifiable information of the registrant comprises:

determining that the domain name included in the first data is associated with the personal identifiable information; and

generating, by the registrar, the decentralized identifier;

determining a second data based on the decentralized identifier and the domain name, the second data excluding the personal identifiable information of the registrant; and

outputting the second data to the domain name system registry operator to verify an identity of the registrant.

10 . The one or more non-transitory computer-readable media of claim 9 , the operations further comprising:

configuring a verifiable credential to include as part of the second data.

11 . The one or more non-transitory computer-readable media of claim 9 , wherein determining the decentralized identifier to represent the identity personal identifiable information of the registrant further comprises:

verifying the identity of the registrant based at least in part on the first data;

wherein determining that the domain name included in the first data is associated with the personal identifiable information is based at least in part on verifying the identity;

wherein generating the decentralized identifier comprises generating the decentralized identifier to replace the personal identifiable information of the registrant.

12 . The one or more non-transitory computer-readable media of claim 9 , wherein determining the decentralized identifier and the domain name comprises:

adding the second data representing the decentralized identifier and the domain name to a decentralized identifier document; and

storing the decentralized identifier document to manage the action associated with the domain name.

13 . The one or more non-transitory computer-readable media of claim 9 , wherein the action associated with the domain name comprises one of:

a first action to generate a new decentralized identifier for the domain name,

a second action to verify the identity of the registrar, or

a third action to generate privacy compliance data associated with the domain name.

14 . A system comprising:

one or more processors; and

one or more non-transitory computer-readable media storing instructions executable by the one or more processors, wherein the instructions, when executed, cause the one or more processors to perform operations comprising:

receiving, by a registrar, a first data from a registrant requesting an action associated with a domain name maintained in a registry by a domain name system registry operator for the domain name, wherein the domain name system registry operator is configured to maintain the registry of domain names associated with a domain;

determining, by the registrar, a decentralized identifier to represent personal identifiable information of the registrant, wherein determining the decentralized identifier to represent the personal identifiable information of the registrant comprises:

determining that the domain name included in the first data is associated with the personal identifiable information; and

generating, by the registrar, the decentralized identifier;

determining a second data based on the decentralized identifier and the domain name, the second data excluding the personal identifiable information of the registrant; and

outputting the second data to the domain name system registry operator to verify an identity of the registrant.

15 . The system of claim 14 , the operations further comprising:

configuring a verifiable credential to include as part of the second data.

16 . The system of claim 14 , wherein determining the decentralized identifier comprises:

adding the second data representing the decentralized identifier and the domain name to a decentralized identifier document; and

storing the decentralized identifier document to manage the action associated with the domain name.

17 . The system of claim 14 , wherein the action associated with the domain name comprises one of:

a first action to generate a new decentralized identifier for the domain name,

a second action to verify the identity of the registrar, or

a third action to generate privacy compliance data associated with the domain name.

18 . The system of claim 14 , wherein determining the second data based on the decentralized identifier and the domain name comprises associating the decentralized identifier and the domain name in a decentralized identifier document.

19 . The system of claim 14 , the operations further comprising:

defining an association between the decentralized identifier and the domain name in a decentralized identifier document.

20 . The system of claim 14 , wherein:

the first data identifies a decentralized identifier method included as part of the decentralized identifier.