Methods and systems of providing verification of the identity of a digital entity using a centralized or distributed ledger
Providing verification of the identity of a digital entity may include including receiving information and a public key of the digital entity, the information having been previously attested to in an attestation transaction stored within a centralized or distributed ledger at an attestation address, the centralized or distributed ledger providing a record of transactions. The system may derive an attestation address using the information and the public key of the digital entity. The system may verify the existence of the attestation transaction at the attestation address in the centralized or distributed ledger and verify that the attestation transaction has not been revoked. The processor associated with the user may receive a cryptographic challenge nonce signed by the digital entity's private key; and may verify the digital entity's identity with the cryptographic challenge nonce signed by the digital entity's key.
1. A method of providing verification of an identity of a digital entity, the method being implemented on a computer system having one or more physical processors configured by machine-readable instructions which, when executed, perform the method, comprising:
sending, by a processor associated with a user to a processor associated with the digital entity, a request for information and a request for a public key of the digital entity, wherein the information has been previously attested to in an attestation transaction stored within a centralized or distributed ledger at an attestation address, the centralized or distributed ledger providing a record of transactions;
receiving, at the processor associated with the user from the processor associated with the digital entity, the information and the public key of the digital entity;
calculating an attestation address, by the processor associated with the user, from a Pay to Script Hash (P2SH) of a combination of a hash of the information and the public key of the digital entity;
verifying, by the processor associated with the user, an existence of the attestation transaction at the attestation address in the centralized or distributed ledger, the attestation transaction comprising an associated value;
verifying, by the processor associated with the user, that the attestation transaction has not been revoked responsive to the associated value being non-zero;
sending a cryptographic challenge nonce, by the processor associated with the user to the processor associated with the digital entity;
receiving at the processor associated with the user the cryptographic challenge nonce signed by a private key of the digital entity; and
verifying, by the processor associated with the user, the digital entity's identity with the cryptographic challenge nonce signed by the digital entity's private key.
2. The method of claim 1 , wherein the public key of the digital entity comprises a digital certificate.
3. The method of claim 1 , wherein calculating the attestation address generating a public attest key from the combination of the hash of the information and the public key of the digital entity.
4. The method of claim 3 , wherein calculating the attestation address further comprises calculating a hash of the public attest key and the public key of the digital entity.
5. The method of claim 1 , wherein verifying that the attestation transaction has not been revoked comprises checking to see if the attestation address exists in an Unspent Transaction Output (UTXO) cache.
6. The method of claim 1 , wherein the user is an individual, a web browser, or an operating system.
7. The method of claim 1 , wherein the digital entity is a website associated with a provider of goods or services or a financial institution.
8. The method of claim 1 , wherein the associated value comprises a cryptocurrency dust value.
9. The method of claim 1 , wherein calculating the attestation address further comprises calculating the attestation address from a combination of the hash of the information, the public key of the digital entity, and a public key of a second digital entity of an attestor.
10. A system for providing verification of an identity of a digital entity, the system comprising
a computer system having one or more physical processors configured by machine-readable instructions to:
send, by a processor associated with a user to a processor associated with a digital entity, a request for information and a request for a public key of the digital entity, wherein the information has been previously attested to in an attestation transaction stored within a centralized or distributed ledger at an attestation address, the centralized or distributed ledger providing a record of transactions;
receive, at the processor associated with the user, the information and the public key of the digital entity;
calculate an attestation address from a Pay to Script Hash (P2SH) of a combination of a hash of the information and the public key of the digital entity;
verify an existence of the attestation transaction at the attestation address in the centralized or distributed ledger, the attestation transaction comprising an associated value;
verify that the attestation transaction has not been revoked responsive to the associated value being non-zero;
send a cryptographic challenge nonce to the processor associated with the digital entity;
receive at the processor associated with the user the cryptographic challenge nonce signed by a private key of the digital entity; and
verify the digital entity's identity with the cryptographic challenge nonce signed by the digital entity's private key.
11. The system of claim 10 , wherein the public key of the digital entity comprises a digital certificate.
12. The system of claim 10 , wherein the computer system is configured to calculate the attestation address using the combination of the hash of the information and the public key of the digital entity to generate a public attest key.
13. The system of claim 12 , wherein the computer system is configured to calculate a hash of the public attest key and the public key of the digital entity to derive the attestation address.
14. The system of claim 10 , wherein the computer system is configured to verify that the attestation transaction has not been revoked by checking to see if the attestation address exists in an Unspent Transaction Output (UTXO) cache.
15. The system of claim 10 , wherein the user is an individual, a web browser, or an operating system.
16. The system of claim 10 , wherein the digital entity is a website associated with a provider of goods or services or a financial institution.
17. The system of claim 10 , wherein the associated value comprises a cryptocurrency dust value.
18. The system of claim 10 , wherein the computer system is configured to calculate the attestation address from a combination of the hash of the information, the public key of the digital entity, and a public key of a second digital entity of an attestor.