Identifying revoked credentials
A system for providing an application includes an interface and a processor. The interface is configured to receive an indication to provide an application to a device. The processor is configured to provide the application to the device. The application is configured to: receive a request for a list of valid credentials; determine a list of stored credentials; provide the list of stored credentials to a database system; receive an indication of revoked credentials from the database system; and determine the list of valid credentials based at least in part on the list of stored credentials and the revoked credentials.
1. A system for providing an application, comprising:
an interface configured to:
receive an indication to provide the application to a device;
a hardware processor; and
a memory coupled with the hardware processor, wherein the memory is configured to provide the hardware processor with instructions which when executed cause the hardware processor to:
provide the application to the device, wherein the application is configured to:
receive a request for a list of valid credentials;
determine a list of stored credentials;
provide the list of the stored credentials to a database system, wherein the database system is configured to:
determine revoked credentials, comprising to:
query a credential system to determine whether a revocation indication has been written to a distributed ledger network for at least one stored credential of the list of the stored credentials; and
determine new credentials;
receive an indication of the revoked credentials from the database system;
receive an indication of the new credentials from the database system;
determine the list of the valid credentials based at least in part on the list of the stored credentials, the revoked credentials, and the new credentials;
display the list of the valid credentials and the revoked credentials;
determine whether to purge metadata associated with the revoked credentials; and
in response to a determination that the metadata associated with the revoked credentials is to be purged, delete, from a user system, one or more of the stored credentials associated with the revoked credentials and the metadata associated with the revoked credentials.
2. The system of claim 1 , wherein the hardware processor is further configured to retrieve the new credentials.
3. The system of claim 1 , wherein the database system is further configured to revoke one or more credentials.
4. The system of claim 3 , wherein one or more new credentials are provided to the database system for identifying revoked credential information.
5. The system of claim 3 , wherein the database system is further configured to provide a set of revoked credential identifiers to the credential system.
6. The system of claim 5 , wherein the credential system is configured to:
for each credential identifier of the set of revoked credential identifiers:
store an indication in a distributed ledger that the credential associated with the credential identifier is revoked.
7. The system of claim 1 , wherein the database system is configured to:
receive the list of the stored credentials;
provide an indication of the stored credentials to a credential server;
receive an indication from the credential server that one or more stored credentials of the stored credentials has been revoked.
8. The system of claim 1 , wherein the stored credentials comprise credentials verifying proof of salary, proof of employment, or proof of health insurance status.
9. A method for providing an application, comprising:
receiving an indication to provide the application to a device; and
providing, using a processor, the application to the device, wherein the application is configured to:
receive a request for a list of valid credentials;
determine a list of stored credentials;
provide the list of the stored credentials to a database system, wherein the database system is configured to:
determine revoked credentials, comprising to:
query a credential system to determine whether a revocation indication has been written to a distributed ledger network for at least one stored credential of the list of the stored credentials; and
determine new credentials;
receive an indication of the revoked credentials from the database system;
receive an indication of the new credentials from the database system;
determine the list of the valid credentials based at least in part on the list of the stored credentials, the revoked credentials, and the new credentials;
display the list of the valid credentials and the revoked credentials;
determine whether to purge metadata associated with the revoked credentials; and
in response to a determination that the metadata associated with the revoked credentials is to be purged, delete, from a user system, one or more of the stored credentials associated with the revoked credentials and the metadata associated with the revoked credentials.
10. A computer program product for providing an application, the computer program product being embodied in a non-transitory computer readable storage medium and comprising computer instructions which when executed cause a processor to perform operations comprising:
receiving an indication to provide the application to a device; and
providing the application to the device, wherein the application is configured to:
receive a request for a list of valid credentials;
determine a list of stored credentials;
provide the list of the stored credentials to a database system, wherein the database system is configured to:
determine revoked credentials, comprising to:
query a credential system to determine whether a revocation indication has been written to a distributed ledger network for at least one stored credential of the list of the stored credentials; and
determine new credentials;
receive an indication of the revoked credentials from the database system;
receive an indication of the new credentials from the database system;
determine the list of the valid credentials based at least in part on the list of the stored credentials, the revoked credentials, and the new credentials;
display the list of the valid credentials and the revoked credentials;
determine whether to purge metadata associated with the revoked credentials; and
in response to a determination that the metadata associated with the revoked credentials is to be purged, delete, from a user system, one or more of the stored credentials associated with the revoked credentials and the metadata associated with the revoked credentials.
11. A system for identifying revoked credential information, comprising:
an interface configured to:
receive a request for a list of valid credentials; and
a hardware processor; and
a memory coupled with the hardware processor, wherein the memory is configured to provide the hardware processor with instructions which when executed cause the hardware processor to:
determine a list of stored credentials;
provide the list of the stored credentials to a database system, wherein the database system is configured to:
determine revoked credentials, comprising to:
query a credential system to determine whether a revocation indication has been written to a distributed ledger network for at least one stored credential of the list of the stored credentials; and
determine new credentials;
receive an indication of the revoked credentials from the database system;
receive an indication of the new credentials from the database system;
determine the list of the valid credentials based at least in part on the list of the stored credentials, the revoked credentials, and the new credentials;
display the list of the valid credentials and the revoked credentials;
determine whether to purge metadata associated with the revoked credentials; and
in response to a determination that the metadata associated with the revoked credentials is to be purged, delete, from a user system, one or more of the stored credentials associated with the revoked credentials and the metadata associated with the revoked credentials.