Method for managing a trusted identity

1. A method for deploying a trusted identity of a user issued by an issuer,

wherein the user has a user device configured to send a request for signature to an issuer device handled by the issuer, said request comprising a user public key allocated to the user,

wherein, in response to receiving the request for signature, the issuer device is configured to compute an issuer signature by signing both the user's trusted identity and the user public key using an issuer private key allocated to the issuer, and

wherein a block chain transaction containing the issuer signature is created and submitted to a Block Chain for transaction verification and storage.

2. The method according to claim 1 , wherein said issuer device sends the issuer signature in response to the request and wherein the block chain transaction is created by the user device and contains the user's trusted identity.

3. The method according to claim 2 , wherein the user device generates an encrypted identity by encrypting the user's trusted identity with a secret key generated in the user device,

wherein the user device generates an encrypted key by encrypting the secret key using a key encryption key, and

wherein the block chain transaction created by the user device contains the encrypted key and the encrypted identity.

4. The method according to claim 3 , wherein the key encryption key is a public key belonging to a key pair generated by the user device.

5. The method according to claim 1 , wherein said request comprises a block chain address, wherein the issuer device generates an encrypted identity by encrypting the trusted identity with a secret key generated in the issuer device,

wherein the issuer device generates an encrypted key by encrypting the secret key using the user public key, and

wherein the issuer device creates a block chain transaction containing a digital asset including both the issuer signature, the encrypted identity and the encrypted key and submits the block chain transaction to the Block Chain for transaction verification and storage to the block chain address.

6. The method according to claim 1 , wherein said request comprises a block chain address, wherein the issuer device computes a hash of the trusted identity and sends the trusted identity to the user device,

wherein the issuer device creates the block chain transaction containing the hash and submits said block chain transaction to the block chain for transaction verification and storage to the block chain address, and

wherein the user device receives the block chain transaction from the block chain.

7. A user device comprising a processing device and a memory, wherein the user device, via the processing device and the memory, is configured to receive a user trusted identity generated by an issuer device and to send a request for signature to the issuer device, said request comprising a user public key allocated to a user of the user device,

wherein the user device is configured to receive, in response to the request, an issuer signature generated by signing both the user trusted identity and the user public key using an issuer private key allocated to the issuer and

wherein the user device is configured to create a block chain transaction containing the issuer signature and to submit said block chain transaction to a Block Chain for verification and storage.

8. The user device according to claim 7 , wherein the user device is configured to generate an encrypted identity by encrypting the user's trusted identity with a secret key generated in the user device, wherein the user device is configured to generate an encrypted key by encrypting the secret key using a key encryption key, and

wherein the user device is configured to include the encrypted key and the encrypted identity in the block chain transaction.

9. The user device according to claim 7 , wherein the user device is configured to send a message to a verifier device, said message comprising a transaction identifier and a user public key allocated to the user, and

wherein the user device is configured to compute a response by signing a challenge received from the verifier device using the user's private key and to send the response to the verifier device.

10. An issuer device comprising a processing device and a memory, wherein the issuer device, via the processing device and the memory, is configured to send a trusted identity for a user issued by an issuer,

Wherein the issuer device is configured to receive a request for signature from a user device, said request comprising both a block chain address and a user public key allocated to the user of the user device,

wherein, in response to receiving the request for signature, the issuer device is configured to compute an issuer signature by signing both the user's trusted identity and the user public key using an issuer private key allocated to the issuer,

wherein the issuer device is configured to generate an encrypted identity by encrypting the trusted identity with a secret key generated in the issuer device,

wherein the issuer device is configured to generate an encrypted key by encrypting the secret key using the user public key, and

wherein the issuer device is configured to create a block chain transaction containing a digital asset including both the issuer signature, the encrypted identity and the encrypted key and to submit the block chain transaction to a Block Chain for transaction verification and storage to the block chain address.

11. An issuer device comprising a processing device and a memory, wherein the issuer device, via the processing device and the memory, is configured to send a trusted identity for a user issued by an issuer,

wherein the issuer device is configured to receive a request for signature from a user device, said request comprising both a block chain address and a user public key allocated to the user of the user device,

wherein, in response to receiving the request for signature, the issuer device is configured to compute an issuer signature by signing both the user's trusted identity and the user public key using an issuer private key allocated to the issuer,

wherein the issuer device is configured to generate a hash of the trusted identity,

wherein the issuer device is configured to send the trusted identity to the user device, and

wherein the issuer device is configured to create a block chain transaction containing the hash and to submit the block chain transaction to a Block Chain for transaction verification and storage to the block chain address.