IP Library Granted Patent US 11,425,115
Granted Patent B2
US 11,425,115 · App. 16/021,243 · Granted Aug 23, 2022

Identifying revoked credentials

Inventors: Bjorn Hamel (Dublin, CA); Jonathan David Ruggiero (Danville, CA)
Assignee: Workday, Inc.
H04L63/083G06F16/27G06F21/31G06F21/45G06F21/604G06Q10/105H04L9/0819H04L9/0891H04L9/3213H04L9/3226H04L9/3247H04L63/0428G06F21/6245
View Patent ↗
Loading inventors, assignments & file history…
Monitor This Case
Get email alerts when status or documents change.
Order Certified Copies
Most orders are placed with the USPTO same day — all within 24 business hours.
Order via The Patent Place →
Pre-filled with this patent's details
Quick Facts
Patent No.
US 11,425,115
App. No.
16/021,243
Granted
Aug 23, 2022
Kind
B2
Abstract

A system for providing an application includes an interface and a processor. The interface is configured to receive an indication to provide an application to a device. The processor is configured to provide the application to the device. The application is configured to: receive a request for a list of valid credentials; determine a list of stored credentials; provide the list of stored credentials to a database system; receive an indication of revoked credentials from the database system; and determine the list of valid credentials based at least in part on the list of stored credentials and the revoked credentials.

Claims (76)

1. A system for providing an application, comprising:

an interface configured to:

receive an indication to provide the application to a device;

a hardware processor; and

a memory coupled with the hardware processor, wherein the memory is configured to provide the hardware processor with instructions which when executed cause the hardware processor to:

provide the application to the device, wherein the application is configured to:

receive a request for a list of valid credentials;

determine a list of stored credentials;

provide the list of the stored credentials to a database system, wherein the database system is configured to:

determine revoked credentials, comprising to:

 query a credential system to determine whether a revocation indication has been written to a distributed ledger network for at least one stored credential of the list of the stored credentials; and

determine new credentials;

receive an indication of the revoked credentials from the database system;

receive an indication of the new credentials from the database system;

determine the list of the valid credentials based at least in part on the list of the stored credentials, the revoked credentials, and the new credentials;

display the list of the valid credentials and the revoked credentials;

determine whether to purge metadata associated with the revoked credentials; and

in response to a determination that the metadata associated with the revoked credentials is to be purged, delete, from a user system, one or more of the stored credentials associated with the revoked credentials and the metadata associated with the revoked credentials.

2. The system of claim 1 , wherein the hardware processor is further configured to retrieve the new credentials.

3. The system of claim 1 , wherein the database system is further configured to revoke one or more credentials.

4. The system of claim 3 , wherein one or more new credentials are provided to the database system for identifying revoked credential information.

5. The system of claim 3 , wherein the database system is further configured to provide a set of revoked credential identifiers to the credential system.

6. The system of claim 5 , wherein the credential system is configured to:

for each credential identifier of the set of revoked credential identifiers:

store an indication in a distributed ledger that the credential associated with the credential identifier is revoked.

7. The system of claim 1 , wherein the database system is configured to:

receive the list of the stored credentials;

provide an indication of the stored credentials to a credential server;

receive an indication from the credential server that one or more stored credentials of the stored credentials has been revoked.

8. The system of claim 1 , wherein the stored credentials comprise credentials verifying proof of salary, proof of employment, or proof of health insurance status.

9. A method for providing an application, comprising:

receiving an indication to provide the application to a device; and

providing, using a processor, the application to the device, wherein the application is configured to:

receive a request for a list of valid credentials;

determine a list of stored credentials;

provide the list of the stored credentials to a database system, wherein the database system is configured to:

determine revoked credentials, comprising to:

query a credential system to determine whether a revocation indication has been written to a distributed ledger network for at least one stored credential of the list of the stored credentials; and

determine new credentials;

receive an indication of the revoked credentials from the database system;

receive an indication of the new credentials from the database system;

determine the list of the valid credentials based at least in part on the list of the stored credentials, the revoked credentials, and the new credentials;

display the list of the valid credentials and the revoked credentials;

determine whether to purge metadata associated with the revoked credentials; and

in response to a determination that the metadata associated with the revoked credentials is to be purged, delete, from a user system, one or more of the stored credentials associated with the revoked credentials and the metadata associated with the revoked credentials.

10. A computer program product for providing an application, the computer program product being embodied in a non-transitory computer readable storage medium and comprising computer instructions which when executed cause a processor to perform operations comprising:

receiving an indication to provide the application to a device; and

providing the application to the device, wherein the application is configured to:

receive a request for a list of valid credentials;

determine a list of stored credentials;

provide the list of the stored credentials to a database system, wherein the database system is configured to:

determine revoked credentials, comprising to:

query a credential system to determine whether a revocation indication has been written to a distributed ledger network for at least one stored credential of the list of the stored credentials; and

determine new credentials;

receive an indication of the revoked credentials from the database system;

receive an indication of the new credentials from the database system;

determine the list of the valid credentials based at least in part on the list of the stored credentials, the revoked credentials, and the new credentials;

display the list of the valid credentials and the revoked credentials;

determine whether to purge metadata associated with the revoked credentials; and

in response to a determination that the metadata associated with the revoked credentials is to be purged, delete, from a user system, one or more of the stored credentials associated with the revoked credentials and the metadata associated with the revoked credentials.

11. A system for identifying revoked credential information, comprising:

an interface configured to:

receive a request for a list of valid credentials; and

a hardware processor; and

a memory coupled with the hardware processor, wherein the memory is configured to provide the hardware processor with instructions which when executed cause the hardware processor to:

determine a list of stored credentials;

provide the list of the stored credentials to a database system, wherein the database system is configured to:

determine revoked credentials, comprising to:

query a credential system to determine whether a revocation indication has been written to a distributed ledger network for at least one stored credential of the list of the stored credentials; and

determine new credentials;

receive an indication of the revoked credentials from the database system;

receive an indication of the new credentials from the database system;

determine the list of the valid credentials based at least in part on the list of the stored credentials, the revoked credentials, and the new credentials;

display the list of the valid credentials and the revoked credentials;

determine whether to purge metadata associated with the revoked credentials; and

in response to a determination that the metadata associated with the revoked credentials is to be purged, delete, from a user system, one or more of the stored credentials associated with the revoked credentials and the metadata associated with the revoked credentials.

Assignments (1)
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Oct 1, 2018
From: HAMEL, BJORN; RUGGIERO, JONATHAN DAVID
To: WORKDAY, INC.
Reel/Frame 047025/0573 →
Continuity (2)
Provisional Application 62648854 · Mar 27, 2018
Related Publication 20190303590A1 · Oct 3, 2019