IP Library Granted Patent US 10,805,072
Granted Patent B2
US 10,805,072 · App. 16/006,169 · Granted Oct 13, 2020

System and method for autonomous dynamic person management

Inventors: Jared Ralph Corduan (San Mateo, CA); Theodore C. Tanner (San Mateo, CA); Tim Dunlevy (San Mateo, CA); W. Bryan Smith (San Mateo, CA)
Assignee: CHANGE HEALTHCARE HOLDINGS, LLC
H04L9/0825G06Q20/367G06Q20/383G06Q20/385G06Q20/3829H04L9/085H04L9/0847H04L9/0861H04L9/0894H04L9/3236H04L63/062H04L63/102G06Q2220/00H04L63/10H04L2209/38
View Patent ↗
Loading inventors, assignments & file history…
Monitor This Case
Get email alerts when status or documents change.
Order Certified Copies
Most orders are placed with the USPTO same day — all within 24 business hours.
Order via The Patent Place →
Pre-filled with this patent's details
Quick Facts
Patent No.
US 10,805,072
App. No.
16/006,169
Granted
Oct 13, 2020
Kind
B2
Abstract

A system and method for persona management in online environments provides an identity by proxy with trusted parties having portions of the private cryptographic key of the consumer so that the private cryptographic key of the consumer may be generated. The system and method implements the persona management in online environments in one embodiment using an immutable ledger with decentralized transaction consensus and a process to share portions of the private cryptographic key with trusted third parties.

Claims (50)

1. A method for persona management, comprising:

storing an identity of a user in a location of a memory of a user's computing device comprising a wallet, the location storing a private cryptographic key associated with the identity of the user;

separating, by a key manager of the user's computing device, the private cryptographic key of the user into a plurality of portions of the private cryptographic key, each portion of the private cryptographic key being encrypted for a trusted party to whom the encrypted portion of the private cryptographic key is being shared and each portion of the private cryptographic key alone being insufficient to generate the private cryptographic key;

distributing, by the computing device, each of the plurality of encrypted portions of the private cryptographic key to a plurality of computing devices of different trusted parties;

storing information about the distribution of each encrypted portion of the private cryptographic key that was sent to each trusted party in an immutable ledger comprised of one or more blockchains and having decentralized transaction consensus; and

regenerating, by the user's computing device, the private cryptographic key of the user using a subset of the plurality of encrypted portions of the private cryptographic key as determined from the immutable ledger, wherein the subset of the plurality of encrypted portions of the private cryptographic key is greater than one portion.

2. The method of claim 1 further comprising requesting, by a new wallet of the user, to regenerate the private cryptographic key of the user using the subset of the plurality of encrypted portions of the private cryptographic key.

3. The method of claim 2 , further comprising transferring contents of the wallet to the new wallet once the private cryptographic key is regenerated.

4. The method of claim 1 , wherein separating the private cryptographic key of the user into the plurality of portions of the private cryptographic key further comprises using a sharing process that generates the plurality of portions of the private cryptographic key.

5. The method of claim 4 , wherein the sharing process is one of Shamir's secret sharing scheme, a Chinese remainder theorem and an exclusive OR process.

6. The method of claim 4 , wherein the sharing process is Shamir's secret sharing scheme and further comprises setting a threshold value of a number of the portions of the plurality of portions of the private cryptographic key that are required to generate the private cryptographic key.

7. The method of claim 6 , wherein the subset of the plurality of encrypted portions of the private cryptographic key is a number of encrypted portions of the private cryptographic key greater than the threshold.

8. The method of claim 1 , wherein generating the plurality of portions of the private cryptographic key for the trusted parties further comprises encrypting the portion of the private cryptographic key for each trusted party using a public cryptography key of the trusted party.

9. A method for identity recovery for an identity of a user stored in a location in a memory of a user's computing device having a private cryptographic key associated with the identity of the user, the method comprising:

storing a plurality of portions of the private cryptographic key in a memory of computing devices at a plurality of trusted parties, each portion of the private cryptographic key having been encrypted for the trusted party to whom the encrypted portion of the private cryptographic key is being shared and each portion of the private cryptographic key alone being insufficient to generate the private cryptographic key;

storing the information about the sharing of the encrypted portion of the private cryptographic key with the trusted parties in an immutable ledger comprised of one or more blockchains and having decentralized transaction consensus;

requesting, by the user's computing device and from a subset of the trusted parties, a return of the encrypted portion of the private cryptographic key from each of the subset of the trusted parties as determined from the immutable ledger, the return request including one or more access grants;

returning, from each trusted party, the encrypted portion of the private cryptographic key to the user's computing device; and

regenerating, by the user's computing device, the private cryptographic key of the user using the encrypted portions of the private cryptographic key from the subset of the trusted parties, wherein the subset of the plurality of encrypted portions of the private cryptographic key is greater than one portion.

10. The method of claim 9 further comprising depositing a verification token at each of the subset of the trusted parties and the user and each trusted party verifying that the verification token exists for the user before returning the encrypted portion of the private cryptographic key to the user's computing device.

11. The method of claim 9 , wherein returning the encrypted portion of the private cryptographic key for each trusted party further comprises each trusted party's computing device decrypting the encrypted portion of the private cryptographic key using a private cryptographic key of the trusted party and re-encrypting the decrypted portion of the private cryptographic key using a new public cryptographic key of the user.

12. A system persona management, comprising:

a computer system of a user having a location that stores an identity of the user and having a private cryptographic key associated with the identity of the user;

a key manager hosted by the computer system of the user having a processor and memory that are configured to:

generate a plurality of portions of the private cryptographic key, each portion of the private cryptographic key being encrypted for a trusted party to whom the encrypted portion of the private cryptographic key is being shared and each portion of the private cryptographic key being insufficient to generate the private cryptographic key;

distribute the plurality of encrypted portions of the private cryptographic key to a plurality of different trusted parties; and

an immutable ledger comprised of one or more blockchains and having decentralized transaction consensus that stores the distribution of each portion of the private cryptographic key to each trusted party in the immutable ledger,

wherein the key manager is further configured to regenerate the private cryptographic key of the user using a subset of the plurality of encrypted portions of the private cryptographic key as determined from the immutable ledger, wherein the subset of the plurality of encrypted portions of the private cryptographic key is greater than one portion.

13. The system of claim 12 , wherein the key manager of the computer system of the user is further configured to regenerate the private cryptographic key of the user for a new wallet of the user.

14. The system of claim 13 , wherein the location is a wallet.

15. The system of claim 14 , wherein the key manager of the computer system of the user is further configured to transfer contents of the wallet to the new wallet once the private cryptographic key is generated.

16. The system of claim 12 , wherein the key manager of the computer system of the user is further configured to use a sharing process that generates the plurality of portions of the private cryptographic key.

17. The system of claim 16 , wherein the sharing process is one of Shamir's secret sharing scheme, a Chinese remainder theorem and an exclusive OR process.

18. The system of claim 16 , wherein the sharing process is Shamir's secret sharing scheme and wherein the key manager of the computer system of the user is further configured to set a threshold value of a number of the portions of the plurality of portions of the private cryptographic key that are required to generate the private cryptographic key.

19. The system of claim 18 , wherein the subset of the plurality of encrypted portions of the private cryptographic key is a number of encrypted portions of the private cryptographic key greater than the threshold.

20. The system of claim 12 , wherein the key manager of the computer system of the user is further configured to encrypt the portion of the private cryptographic key for each trusted party using the public cryptography key of the trusted party.

21. A system for identity recovery for an identity of a user stored in a wallet comprising a secure location having a private cryptographic key associated with the identity of the user, comprising:

a plurality of trusted parties each having a computing device, each trusted party storing a portion of the private cryptographic key being encrypted for the trusted party to whom the encrypted portion of the private cryptographic key is being shared and each portion of the private cryptographic key being insufficient to generate the private cryptographic key, wherein the portion of the private cryptographic key of each trusted party is stored on the trusted party's corresponding computing device;

an immutable ledger stored on a computing system, said immutable ledger comprised of one or more blockchains and having decentralized transaction consensus that stores the information about the sharing of the encrypted portion of the private cryptographic key with the trusted parties;

a key manager hosted on a computer system of the user that requests, from a subset of the trusted parties as determined from the immutable ledger, a return of the encrypted portion of the private cryptographic key from each of the subset of the trusted parties, the return request including one or more access grants;

each trusted party returning the encrypted portion of the private cryptographic key to a new wallet of the user; and

the key manager regenerating the private cryptographic key of the user using the encrypted portions of the private cryptographic key from the subset of the trusted parties wherein the subset of the plurality of encrypted portions of the private cryptographic key is greater than one portion.

22. The system of claim 21 , wherein the immutable ledger deposits a verification token at a wallet of each of the subset of the trusted parties and the new wallet of the user and wherein each trusted party verifies that the verification token exists in the new wallet of the user before returning the encrypted portion of the private cryptographic key to a new wallet of the user.

23. The system of claim 21 , wherein each trusted party decrypts the encrypted portion of the private cryptographic key using a private cryptographic key of the trusted party and re-encrypts the decrypted portion of private cryptographic key using a new public cryptographic key of the user.

24. A method for generating a private key of a user for a transaction wherein a plurality of portions of the private cryptographic key are stored at a plurality of trusted parties, each portion of the private cryptographic key having been encrypted for the trusted party to whom the encrypted portion of the private cryptographic key is being shared and each portion of the private cryptographic key being insufficient to generate the private cryptographic key, the method comprising:

requesting, from a subset of the trusted parties as determined from an immutable ledger comprised of one or more blockchains, a return of the encrypted portion of the private cryptographic key from each of the subset of the trusted parties, the return request including one or more access grants;

returning, from each trusted party, the encrypted portion of the private cryptographic key; and

re-generating the private cryptographic key of the user for the transaction using the encrypted portions of the private cryptographic key from the subset of the trusted parties, wherein the subset of the plurality of encrypted portions of the private cryptographic key is greater than one portion.

25. The method of claim 24 further comprising depositing a verification token at each of the subset of the trusted parties and an entity managing the transaction and each trusted party verifying that the verification token exists for the user before returning the encrypted portion of the private cryptographic key to the user.

26. The method of claim 24 , wherein returning the encrypted portion of the private cryptographic key for each trusted party further comprises decrypting the encrypted portion of the private cryptographic key using a private cryptographic key of the trusted party and re-encrypting the decrypted portion of private cryptographic key using a new public cryptographic key of an entity managing the transaction.

Assignments (4)
RELEASE OF SECURITY INTEREST Recorded Oct 5, 2022
From: BANK OF AMERICA, N.A.
To: CHANGE HEALTHCARE HOLDINGS, LLC
Reel/Frame 061620/0032 →
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Aug 19, 2020
From: CORDUAN, JARED RALPH; TANNER, THEODORE C.; DUNLEVY, TIM; SMITH, W. BRYAN
To: POKITDOK, INC.
Reel/Frame 054172/0032 →
SECURITY INTEREST Recorded Dec 12, 2019
From: CHANGE HEALTHCARE HOLDINGS, LLC
To: BANK OF AMERICA, N.A.
Reel/Frame 051279/0614 →
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Jan 30, 2019
From: POKITDOK, INC.
To: CHANGE HEALTHCARE HOLDINGS, LLC
Reel/Frame 048195/0658 →
Continuity (2)
Provisional Application 62518529 · Jun 12, 2017
Related Publication 20190007205A1 · Jan 3, 2019
Cited By (2)
US 12,468,827 US 12,719,688