Method for managing a trusted identity
The invention is a method for deploying a trusted identity for a user issued by an issuer. The user has a user device configured to send a request for signature to an issuer device handled by the issuer. The request comprises a user public key allocated to the user. The issuer device is configured to compute an issuer signature by signing both the user's trusted identity and the user public key using an issuer private key allocated to the issuer. A block chain transaction containing the issuer signature is created and submitted to a Block Chain for transaction verification and storage.
1. A method for authenticating a user trusted identity by a verifier device, said user trusted identity being issued by an issuer,
wherein the user has a user device which sends a message to the verifier device, said message comprising a transaction identifier, and a user public key allocated to the user,
wherein the verifier device retrieves a block chain transaction comprising an issuer signature from a block chain, said block chain transaction being referenced in said block chain by said transaction identifier, and verifies the genuineness and integrity of the transaction,
in case of successful verification, the verifier device sends a challenge to the user device which computes a response by signing the challenge using the user's private key and sends the response to the verifier device, the verifier device checks the user signature using the user public key, and
in case of successful checking, the verifier device verifies the issuer signature using both the user trusted identity, the user public key and the issuer public key.
2. The method according to claim 1 , wherein the verifier device retrieves the user trusted identity from the block chain transaction or receives the user trusted identity from the user device.
3. The method according to claim 1 , wherein the block chain transaction contains an encrypted key and an encrypted identity,
wherein, in case of successful checking of the user signature, the verifier device sends the encrypted key and a verifier public key to the user device,
the user device derives a key encryption key and retrieves a secret key by decrypting the encrypted key using the key encryption key, then the user device encrypts the secret key using the verifier public key and sends the resulting new encrypted key to the verifier device,
the verifier device retrieves the secret key by decrypting the new encrypted key using a verifier private key, then the verifier device retrieves the user trusted identity by decrypting the encrypted identity using the secret key.
4. A verifier device configured to authenticate a user trusted identity of a user issued by an issuer having a public key,
wherein the verifier device is configured to receive a message from a user device of the user, said message comprising a transaction identifier, and a user public key allocated to the user,
wherein the verifier device is configured to retrieve a block chain transaction comprising an issuer signature from a block chain by using the transaction identifier as reference of said block chain transaction in said block chain, and to verify the genuineness and integrity of the transaction,
wherein in case of successful verification, the verifier device is configured to send a challenge to the user device, to get a response computed by the user device and to check the response using the user public key, and
wherein in case of successful checking, the verifier device is configured to verify the issuer signature using both the user trusted identity, the user public key and the issuer public key.
5. A method for authenticating a user trusted identity by a verifier device, said user trusted identity being issued by an issuer,
wherein the user has a user device which sends a message to the verifier device, said message comprising a transaction identifier, and a user public key allocated to the user,
wherein the verifier device retrieves a block chain transaction comprising an issuer signature from a block chain using the transaction identifier and verifies the transaction,
in case of successful verification, the verifier device sends a challenge to the user device which computes a response by signing the challenge using the user's private key and sends the response to the verifier device, the verifier device checks the user signature using the user public key and in case of successful checking, the verifier device verifies the issuer signature using both the user trusted identity, the user public key and the issuer public key;
wherein the block chain transaction contains an encrypted key and an encrypted identity,
wherein, in case of successful checking of the user signature, the verifier device sends the encrypted key and a verifier public key to the user device,
the user device derives a key encryption key and retrieves a secret key by decrypting the encrypted key using the key encryption key, then the user device encrypts the secret key using the verifier public key and sends the resulting new encrypted key to the verifier device,
the verifier device retrieves the secret key by decrypting the new encrypted key using a verifier private key, then the verifier device retrieves the user trusted identity by decrypting the encrypted identity using the secret key.