Encrypted verification of digital identifications
In general, one innovative aspect of the subject matter described in this specification may be embodied in methods that may include verifying a digital identification using embedded encrypted user credential data that is not viewable to human eyes within the digital identification. For instance, the embedded encrypted user credential data may be variably encrypted by an encryption key that is designated by a security status assigned to the digital identification. The embedded encrypted user credential data may be extracted using an authorized device and decrypted using a decryption key that is associated with the encryption key designated by the security status. The decrypted user credential data may then be used to verify user information included in the digital identification.
1. A computer-implemented method comprising:
capturing, by a detector device, an image of a digital identification displayed on a user device, wherein:
the digital identification displayed on the user device is assigned a time-dependent security status that periodically adjusts display of the digital identification on the user device based on the assigned security status,
each time a display of the digital identification on the user device is adjusted, a different optically scannable credential corresponding to particular security status is (i) selected from among multiple optically scannable credentials stored on the user device and associated with a different security status, and (ii) displayed on the digital identification, and
each optically scannable credential is associated with a different decryption key that is specified by the security status and used to decrypt encrypted data associated with each optically scannable credential;
obtaining, by the detector device and from a digital identification server, credential data that identifies a present optically scannable credential included in the digital identification that was selected by the user device from among the multiple optically scannable credentials stored on the user device for a present security status assigned to the digital image when the detector device captured the image of the digital identification;
detecting, by the detector device, the present optically scannable credential within the captured image based on the obtained credential data;
extracting, by the detector device and from the captured image, encrypted data associated with the present optically scannable credential;
obtaining, by the detector device and from the digital identification server, a present decryption key associated with the present optically scannable credential;
decrypting, by the detector device and based on the present decryption key, the encrypted data using the decryption key to extract a decrypted payload from the encrypted data;
providing, by the detector device and to the digital identification server, the decrypted payload extracted from the encrypted data;
in response to providing the decrypted payload extracted from the encrypted data to the digital identification server, receiving, by the detector device and from the digital identification server, verification results indicating whether the decrypted payload matches verified user information associated with the digital identification; and
providing, for output on the detector device, a notification representing an authenticity of the digital identification based on the verification results received from the digital identification server.
2. The method of claim 1 , wherein the encrypted data extracted from the present optically scannable credential comprises a digital audio watermark that encrypts user information.
3. The method of claim 1 , wherein the encrypted data extracted from the present optically scannable credential comprises a digital image watermark that encrypts user information.
4. The method of claim 1 , wherein the encrypted data extracted from the present optically scannable credential comprises a quick response code and a two dimensional bar code.
5. A system comprising:
one or more computers; and
a non-transitory computer-readable medium coupled to the one or more computers having instructions stored thereon, which, when executed by the one or more computers, cause the one or more computers to perform operations comprising:
capturing, by a detector device, an image of a digital identification displayed on a user device, wherein:
the digital identification displayed on the user device is assigned a time-dependent security status that periodically adjusts display of the digital identification on the user device based on the assigned security status,
each time a display of the digital identification on the user device is adjusted, a different optically scannable credential corresponding to particular security status is (i) selected from among multiple optically scannable credentials stored on the user device and associated with a different security status, and (ii) displayed on the digital identification, and
each optically scannable credential is associated with a different decryption key that is specified by the security status and used to decrypt encrypted data associated with each optically scannable credential;
obtaining, by the detector device and from a digital identification server, credential data that identifies a present optically scannable credential included in the digital identification that was selected by the user device from among the multiple optically scannable credentials stored on the user device for a present security status assigned to the digital image when the detector device captured the image of the digital identification;
detecting, by the detector device, the present optically scannable credential within the captured image based on the obtained credential data;
extracting, by the detector device and from the captured image, encrypted data associated with the present optically scannable credential;
obtaining, by the detector device and from the digital identification server, a present decryption key associated with the present optically scannable credential;
decrypting, by the detector device and based on the present decryption key, the encrypted data using the decryption key to extract a decrypted payload from the encrypted data;
providing, by the detector device and to the digital identification server, the decrypted payload extracted from the encrypted data;
in response to providing the decrypted payload extracted from the encrypted data to the digital identification server, receiving, by the detector device and from the digital identification server, verification results indicating whether the decrypted payload matches verified user information associated with the digital identification; and
providing, for output on the detector device, a notification representing an authenticity of the digital identification based on the verification results received from the digital identification server.
6. The system of claim 5 , wherein the encrypted data extracted from the present optically scannable credential comprises a digital audio watermark that encrypts user information.
7. The system of claim 5 , wherein the encrypted data extracted from the present optically scannable credential comprises a digital image watermark that encrypts user information.
8. The system of claim 5 , wherein the encrypted data extracted from the present optically scannable credential comprises a quick response code and a two dimensional bar code.
9. A non-transitory computer storage device encoded with a computer program, the program comprising instructions that when executed by one or more computers cause the one or more computers to perform operations comprising:
capturing, by a detector device, an image of a digital identification displayed on a user device, wherein:
the digital identification displayed on the user device is assigned a time-dependent security status that periodically adjusts display of the digital identification on the user device based on the assigned security status,
each time a display of the digital identification on the user device is adjusted, a different optically scannable credential corresponding to particular security status is (i) selected from among multiple optically scannable credentials stored on the user device and associated with a different security status, and (ii) displayed on the digital identification, and
each optically scannable credential is associated with a different decryption key that is specified by the security status and used to decrypt encrypted data associated with each optically scannable credential;
obtaining, by the detector device and from a digital identification server, credential data that identifies a present optically scannable credential included in the digital identification that was selected by the user device from among the multiple optically scannable credentials stored on the user device for a present security status assigned to the digital image when the detector device captured the image of the digital identification;
detecting, by the detector device, the present optically scannable credential within the captured image based on the obtained credential data;
extracting, by the detector device and from the captured image, encrypted data associated with the present optically scannable credential;
obtaining, by the detector device and from the digital identification server, a present decryption key associated with the present optically scannable credential;
decrypting, by the detector device and based on the present decryption key, the encrypted data using the decryption key to extract a decrypted payload from the encrypted data;
providing, by the detector device and to the digital identification server, the decrypted payload extracted from the encrypted data;
in response to providing the decrypted payload extracted from the encrypted data to the digital identification server, receiving, by the detector device and from the digital identification server, verification results indicating whether the decrypted payload matches verified user information associated with the digital identification; and
providing, for output on the detector device, a notification representing an authenticity of the digital identification based on the verification results received from the digital identification server.
10. The non-transitory computer storage device of claim 9 , wherein the encrypted data extracted from the present optically scannable credential comprises a digital audio watermark that encrypts user information.
11. The non-transitory computer storage device of claim 9 , wherein the encrypted data extracted from the present optically scannable credential comprises a digital image watermark that encrypts user information.
12. The non-transitory computer storage device of claim 9 , wherein the encrypted data extracted from the present optically scannable credential comprises a quick response code and a two dimensional bar code.