IP Library › Granted Patent US 10,541,818
Granted Patent B2
US 10,541,818 · App. 15/491,285 · Granted Jan 21, 2020

Decentralized biometric signing of digital contracts

Inventors: Anthony M. Butler (Dubai, AE); Ghada Dulaim (Dubai, AE); Victor Usobiaga (Dubai, AE)
Assignee: International Business Machines Corporation
H04L9/3247G06Q50/18H04L9/3231H04L9/3236H04W12/06
View Patent ↗
Loading inventors, assignments & file history…
Monitor This Case
Get email alerts when status or documents change.
Order Certified Copies
Most orders are placed with the USPTO same day — all within 24 business hours.
Order via The Patent Place →
Pre-filled with this patent's details
Quick Facts
Patent No.
US 10,541,818
App. No.
15/491,285
Granted
Jan 21, 2020
Kind
B2
Abstract

A method and system for decentralized biometric signing of a digital contract. A digital identity including a private key is created. The private key was encrypted on a mobile device via use of captured biometric data. A digital hash of the digital contract is generated. A user using biometric data is authenticated. Usage of the biometric data is authorized. Responsive to the usage of the biometric data being authorized, the encrypted private key is decrypted. The digital hash is signed with the decrypted private key. The signed digital hash is stored in a blockchain.

Claims (56)

1. A method for decentralized biometric signing of a digital contract, said method comprising:

capturing on a mobile device, by one or more processors of a computer system, biometric data from a user;

storing, by the one or more processors, the captured biometric data on the mobile device;

encrypting, by the one or more processors, a private key using the captured biometric data;

storing, on the mobile device by the one or more processors, the encrypted private key, a public key associated with the private key, and a digital identity comprising (i) an identifier associated with the user and the captured biometric data and (ii) a certifier of the identifier;

generating, by the one or more processors, a digital hash of the digital contract;

authenticating, by the one or more processors, the user using the captured biometric data;

authorizing, by the one or more processors, usage of the captured biometric data;

responsive to the usage of the captured biometric data being authorized, decrypting, by the one or more processors using the captured biometric data, the encrypted private key;

signing, by the one or more processors, the digital hash with the decrypted private key, which produces a signed digital hash of the digital contract; and

storing in a blockchain, by the one or more processors, the signed digital hash of the digital contract, the digital contract prior to being hashed, the identifier, the certifier of the identifier, the public key, a certification of the public key by a third party, and a record of a successful authentication of the user using the biometric data.

2. The method of claim 1 , wherein the digital contract comprises a smart contract using code.

3. The method of claim 1 , wherein digital contract comprises a customized digital contract retrieved from a library of digital contracts.

4. The method of claim 1 , wherein said capturing biometric data comprises capturing audio and video biometric data of the user speaking a textual phrase, wherein said authorizing usage of the captured biometric data comprises:

comparing the captured biometric data with a template stored on the mobile device;

responsive to a determination that the captured biometric data matches the template, converting the captured audio biometric data to text; and

responsive to a determination that the text matches the textual phrase, authorizing usage of the captured biometric data.

5. The method of claim 1 , wherein a plurality of digital identities are associated with a single biometric datum of the captured biometric data.

6. The method of claim 1 , wherein said capturing biometric data comprises:

capturing visual biometric data and audio biometric data; and

applying error correction to the captured visual biometric data and audio biometric data.

7. A computer program product, comprising one or more computer readable hardware storage devices having computer readable program code stored therein, each hardware storage device not being a transitory signal, said program code containing instructions executable by one or more processors of a computer system to implement a method for

capturing on a mobile device, by the one or more processors, biometric data from a user;

storing, by the one or more processors, the captured biometric data on the mobile device;

encrypting, by the one or more processors, a private key using the captured biometric data;

storing, on the mobile device by the one or more processors, the encrypted private key, a public key associated with the private key, and a digital identity comprising (i) an identifier associated with the user and the captured biometric data and (ii) a certifier of the identifier;

generating, by the one or more processors, a digital hash of the digital contract;

authenticating, by the one or more processors, the user using the captured biometric data;

authorizing, by the one or more processors, usage of the captured biometric data;

responsive to the usage of the captured biometric data being authorized, decrypting, by the one or more processors using the captured biometric data, the encrypted private key;

signing, by the one or more processors, the digital hash with the decrypted private key, which produces a signed digital hash of the digital contract; and

storing in a blockchain, by the one or more processors, the signed digital hash of the digital contract, the digital contract prior to being hashed, the identifier, the certifier of the identifier, the public key, a certification of the public key by a third party, and a record of a successful authentication of the user using the biometric data.

8. The computer program product of claim 7 , wherein the digital contract comprises a smart contract using code.

9. The computer program product of claim 7 , wherein digital contract comprises a customized digital contract retrieved from a library of digital contracts.

10. A computer system, comprising one or more processors, one or more memories, and one or more computer readable hardware storage devices, said one or more hardware storage device storing program code executable by the one or more processors using the one or more memories to implement a method for decentralized biometric signing of a digital contract, said method comprising:

capturing on a mobile device, by the one or more processors, biometric data from a user;

storing, by the one or more processors, the captured biometric data on the mobile device;

encrypting, by the one or more processors, a private key using the captured biometric data;

storing, on the mobile device by the one or more processors, the encrypted private key, a public key associated with the private key, and a digital identity comprising (i) an identifier associated with the user and the captured biometric data and (ii) a certifier of the identifier;

generating, by the one or more processors, a digital hash of the digital contract;

authenticating, by the one or more processors, the user using the captured biometric data;

authorizing, by the one or more processors, usage of the captured biometric data;

responsive to the usage of the captured biometric data being authorized, decrypting, by the one or more processors using the captured biometric data, the encrypted private key;

signing, by the one or more processors, the digital hash with the decrypted private key, which produces a signed digital hash of the digital contract; and

storing in a blockchain, by the one or more processors, the signed digital hash of the digital contract, the digital contract prior to being hashed, the identifier, the certifier of the identifier, the public key, a certification of the public key by a third party, and a record of a successful authentication of the user using the biometric data.

11. The computer system of claim 10 , wherein said capturing biometric data comprises capturing audio and video biometric data of the user speaking a textual phrase, wherein said authorizing usage of the captured biometric data comprises:

comparing the captured biometric data with a template stored on the mobile device;

responsive to a determination that the captured biometric data matches the template, converting the captured audio biometric data to text; and

responsive to a determination that the text matches the textual phrase, authorizing usage of the captured biometric data.

12. The computer system of claim 10 , wherein a plurality of digital identities are associated with a single biometric datum of the captured biometric data.

13. The computer system of claim 10 , wherein said capturing biometric data comprises:

capturing visual biometric data and audio biometric data; and

applying error correction to the captured visual biometric data and audio biometric data.

14. The method of claim 1 , wherein the certifier of the identifier is a bank, a telecommunications company, or a government organization.

15. The computer program product of claim 7 , wherein the certifier of the identifier is a bank, a telecommunications company, or a government organization.

16. The computer system of claim 10 , wherein the certifier of the identifier is a bank, a telecommunications company, or a government organization.

Assignments (1)
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Apr 19, 2017
From: BUTLER, ANTHONY M.; DULAIM, GHADA; USOBIAGA, VICTOR
To: INTERNATIONAL BUSINESS MACHINES CORPORATION
Reel/Frame 042062/0752 →
Continuity (1)
Related Publication 20180309581A1 · Oct 25, 2018