Identity management service using a blockchain providing identity transactions between devices
Logic on a first remote device causes the capture of personal data identifying a user from an identification card. The logic generates a hash value from the personal data using a hashing algorithm and signs the hash value with a digital signature created using a private key paired with a public key. The logic transmits, over a network, the signed hash value and the public key from the remote device to a distributed public database for storage. The logic receives, over the network, a transaction number from the distributed public database. The logic then transmits the transaction number and the personal data to a second remote device. Logic on the second remote device verifies that the hash value in the signed hash value is the same as a generated hash value and verifies that the signed hash value was signed with the private key.
1. A method for managing an identity of a user as executed by a first processor of a first smartphone and a second processor of a second smartphone, the method comprising operations of:
receiving by the first processor personal data identifying the user from an identification card, wherein the personal data is received on the first smartphone;
creating by the first processor a hash value from the personal data using a hashing algorithm;
signing by the first processor the hash value with a digital signature created using a first private key paired with a first public key;
transmitting by the first processor, over a network, the signed hash value and the first public key from the first smartphone to a block chain database;
receiving by the first processor a first transaction number from the block chain database; and
transmitting by the first processor the first transaction number and the personal data to the second processor of the second smartphone;
using by the second processor the first transaction number to retrieve the signed hash value and the first public key from the block chain database;
hashing by the second processor the personal data using the hashing algorithm to create a generated hash value;
verifying by the second processor that the hash value in the signed hash value is the same as the generated hash value,
verifying by the second processor that the signed hash value was signed with the first private key; and
creating by the second processor a certification to certify that the personal data was signed using the first private key and was stored to the block chain, the certification used for verifying the identity of the user.
2. The method of claim 1 , wherein the certification includes the first transaction number and the personal data or selected fields of the personal data.
3. The method of claim 2 , wherein the certification is signed with a second private key paired with a second public key on the second smartphone.
4. The method of claim 3 , wherein the signed certification record is transmitted, over a network, to the block chain database.
5. The method of claim 4 , wherein a second transaction number is received by the second smartphone from the block chain database.
6. The method of claim 1 , wherein at least a part of the personal data is coded in a barcode or QR code.
7. A non-transitory computer-readable medium storing a computer program for managing an identity of a user as executed by a first processor of a first smartphone and a second processor of a second smartphone, the computer-readable medium comprising a first set of instructions that when executed causes the first processor to:
receive personal data identifying the user from an identification card, wherein the personal data is received on the first smartphone;
create a hash value from the personal data using a hashing algorithm;
sign the hash value with a digital signature created using a first private key paired with a first public key;
transmit, over a network, the signed hash value and the first public key from the first smartphone to a block chain database;
receive a first transaction number from the block chain database; and
transmit the first transaction number and the personal data to the second processor of the second smartphone;
wherein the computer-readable medium comprising a second set of instructions that when executed causes the second processor to;
use the first transaction number to retrieve the signed hash value and the first public key from the block chain database;
hash the personal data using the hashing algorithm to create a generated hash value;
verify that the hash value in the signed hash value is the same as the generated hash value;
verify that the signed hash value was signed with the first private key; and
create a certification to certify that the personal data was signed using the first private key and was stored to the block chain, the certification used for verifying the identity of the user.
8. The computer-readable medium of claim 7 , wherein the certification includes the first transaction number and the personal data or selected fields of the personal data.
9. The computer-readable medium of claim 8 , wherein the certification is signed with a second private key paired with a second public key on the second smartphone.
10. The computer-readable medium of claim 9 , wherein the signed certification record is transmitted, over a network, to the block chain database.
11. The computer-readable medium of claim 10 , wherein a second transaction number is received by the second smartphone from the block chain database.
12. The computer-readable medium of claim 7 , wherein at least a part of the personal data is coded in a barcode or QR code.
13. A method for managing an identity of a user as executed by a first processor of a first device and a second processor of a second device, the method comprising operations of:
receiving by the first processor personal data identifying the user from an identification card, wherein the personal data is received on the first device;
creating by the first processor a hash value from the personal data using a hashing algorithm;
signing by the first processor the hash value with a digital signature created using a first private key paired with a first public key;
transmitting by the first processor, over a network, the signed hash value and the first public key from the first device to a block chain database;
receiving by the first processor a first transaction number from the block chain database; and
transmitting by the first processor the first transaction number and the personal data to the second processor of the second device;
using by the second processor the first transaction number to retrieve the signed hash value and the first public key from the block chain database;
hashing by the second processor the personal data using the hashing algorithm to create a generated hash value;
verifying by the second processor that the hash value in the signed hash value is the same as the generated hash value;
verifying by the second processor that the signed hash value was signed with the first private key; and
creating by the second processor a certification to certify that the personal data was signed using the first private key and was stored to the blockchain, the certification used for purposes of verifying the identity of the user.
14. The method of claim 13 , wherein the certification includes the first transaction number and the personal data or selected fields of the personal data.
15. The method of claim 14 , wherein the certification is signed with a second private key paired with a second public key on the second device.
16. The method of claim 15 , wherein the signed certification record is transmitted, over a network, to the block chain database.
17. The method of claim 16 , wherein a second transaction number is received by the second device from the block chain database.
18. The method of claim 13 , wherein at least a part of the personal data is coded in a barcode or QR code.
19. A system for managing an identity of a user, comprising:
a first device having a first processor configured to:
receive personal data identifying the user from an identification card, wherein the personal data is received on the first device;
create a hash value from the personal data using a hashing algorithm;
sign the hash value with a digital signature created using a first private key paired with a first public key;
transmit, over a network, the signed hash value and the first public key from the first device to a block chain database;
receive a first transaction number from the block chain database; and
transmit the first transaction number and the personal data to a second device; and
the second device having a second processor configured to:
use the first transaction number to retrieve the signed hash value and the first public key from the block chain database;
hash the personal data using the hashing algorithm to create a generated hash value;
verify that the hash value in the signed hash value is the same as the generated hash value;
verify that the signed hash value was signed with the first private key; and
create a certification to certify that the personal data was signed using the first private key and was stored to the block chain, the certification used for verifying the identity of the user.
20. The system of claim 19 ,
wherein the certification includes the first transaction number and the personal data or selected fields of the personal data,
wherein the certification is signed with a second private key paired with a second public key on the second device, and
wherein the signed certification record is transmitted, over a network, to the block chain database.
21. The system of claim 19 , wherein a second transaction number is received by the second device from the block chain database.
22. The system of claim 19 ,
wherein the first device executes an application provided by an entity allowing for communication between the first device and the second device, and
wherein the second device executes the application provided by the entity allowing for communication between the first device and the second device.