Deterministic verification of digital identity documents

1. A computer-implemented method, comprising:

loading, by one or more processors of a computing resource, from one or more external clients, into a repository internal to the computing resource, one or more identity electronic documents, wherein the loading comprises encoding the one or more identity electronic documents with metadata indicating a document type for each document;

locally encrypting, by the one or more processors, one or more identity electronic documents stored by the one or more processors in the repository, utilizing a public key specific to the computing resource, wherein the electronic documents stored in the repository are accessible to accepted identity verification requests obtained by the one or more processors and are not accessible to applications executing on the computing resource;

obtaining, by the one or more processors, from a second computing resource, an identity verification request, wherein the identity verification request comprises a specification for one or more electronic identity documents comprising one or more requested document types to fulfill the identity verification request, the specification comprising a specification for attributes of the one or more electronic identity documents of the one or more requested document types;

searching, by the one or more processors, the repository of electronic identity documents to locate at least one electronic identity document comprising each of the one or more requested document types, wherein each electronic identity document in the repository comprises machine readable metadata comprising a respective document type;

based on locating the at least one electronic identity document comprising each of the one or more requested document types, automatically performing, by the one or more processors, a deterministic match to select one electronic identity document comprising each of the one or more requested document types to utilize in formulating a response to the identity verification request, performing the deterministic match comprising verifying, by the one or more processors, that data in each of the one electronic identity document comprising each of the one or more requested document types comprises the attributes; and

formulating, by the one or more processors, a response to the identity verification request, based on the selected electronic identity documents.

2. The computer-implemented method of claim 1 , wherein the respective type of each electronic identity document characterizes the electronic identity document.

3. The computer-implemented method of claim 2 , wherein the respective types of each electronic identity document indicate that each electronic identity document is selected from the group consisting of: a driver's license, a fishing license, a membership card, an insurance card, a rewards card, a social security card, a police badge, a card for food assistance, a library card, and a gym membership.

4. The computer-implemented method of claim 1 , wherein the one or more requested document type is a sub-type in a hierarchical type definition scheme.

5. The computer-implemented method of claim 1 , wherein the response comprises the data from the selected electronic identity documents.

6. The computer-implemented method of claim 1 , wherein the identity verification request further comprising a specification for attributes for each of the one or more electronic identity documents of the one or more requested document types.

7. The computer-implemented method of claim 6 , wherein performing the deterministic match comprises selecting each of the one electronic identity document comprising each of the one or more requested document types from more than one electronic identity document of the one or more requested document types comprising the attributes.

8. The computer-implemented method of claim 1 , wherein the one or more requested document type is a sub-sub-type in a hierarchical type definition scheme.

9. A computer program product comprising:

a non-transitory computer readable storage medium readable by a processor and storing instructions which when executed by the processor performs a method comprising:

loading, by one or more processors of a computing resource, from one or more external clients, into a repository internal to the computing resource, one or more identity electronic documents, wherein the loading comprises encoding the one or more identity electronic documents with metadata indicating a document type for each document;

locally encrypting, by the one or more processors, one or more identity electronic documents stored by the one or more processors in the repository, utilizing a public key specific to the computing resource, wherein the electronic documents stored in the repository are accessible to accepted identity verification requests obtained by the one or more processors and are not accessible to applications executing on the computing resource;

obtaining, by the one or more processors, from a second computing resource, an identity verification request, wherein the identity verification request comprises a specification for one or more electronic identity documents comprising one or more requested document types to fulfill the identity verification request, the specification comprising a specification for attributes of the one or more electronic identity documents of the one or more requested document types;

searching, by the one or more processors, the repository of electronic identity documents to locate at least one electronic identity document comprising each of the one or more requested document types, wherein each electronic identity document in the repository comprises machine readable metadata comprising a respective document type;

based on locating the at least one electronic identity document comprising each of the one or more requested document types, automatically performing, by the one or more processors, a deterministic match to select one electronic identity document comprising each of the one or more requested document types to utilize in formulating a response to the identity verification request, performing the deterministic match comprising verifying, by the one or more processors, that data in each of the one electronic identity document comprising each of the one or more requested document types comprises the attributes; and

formulating, by the one or more processors, a response to the identity verification request, based on the selected electronic identity documents.

10. The computer program product of claim 9 , wherein the respective type of each electronic identity document characterizes the electronic identity document.

11. The computer program product of claim 10 , wherein the respective types of each electronic identity document indicate that each electronic identity document is selected from the group consisting of: a driver's license, a fishing license, a membership card, an insurance card, a rewards card, a social security card, a police badge, a card for food assistance, a library card, and a gym membership.

12. The computer program product of claim 9 , wherein the one or more requested document type is a sub-type in a hierarchical type definition.

13. The computer program product of claim 9 , wherein the response comprises the data from the selected electronic identity documents.

14. The computer program product of claim 9 , wherein the identity verification request further comprising a specification for attributes for each of the one or more electronic identity documents of the one or more requested document types.

15. The computer program product of claim 14 , wherein performing the deterministic match comprises selecting each of the one electronic identity document comprising each of the one or more requested document types from more than one electronic identity document of the one or more requested document types comprising the attributes.

16. The computer program product of claim 9 , wherein the one or more requested document type is sub-sub-type in a hierarchical type definition scheme.

17. A system comprising:

a memory;

one or more processors of a computing resource in communication with the memory; and

program instructions when executed by the one or more processors, via the memory, perform a method, the method comprising:

loading, by the one or more processors of the computing resource, from one or more external clients, into a repository internal to the computing resource, one or more identity electronic documents, wherein the loading comprises encoding the one or more identity electronic documents with metadata indicating a document type for each document;

locally encrypting, by the one or more processors, one or more identity electronic documents stored by the one or more processors in the repository, utilizing a public key specific to the computing resource, wherein the electronic documents stored in the repository are accessible to accepted identity verification requests obtained by the one or more processors and are not accessible to applications executing on the computing resource;

obtaining, by the one or more processors, from a second computing resource, an identity verification request, wherein the identity verification request comprises a specification for one or more electronic identity documents comprising one or more requested document types to fulfill the identity verification request, the specification comprising a specification for attributes of the one or more electronic identity documents of the one or more requested document types;

searching, by the one or more processors, the repository of electronic identity documents to locate at least one electronic identity document comprising each of the one or more requested document types, wherein each electronic identity document in the repository comprises machine readable metadata comprising a respective document type;

based on locating the at least one electronic identity document comprising each of the one or more requested document types, automatically performing, by the one or more processors, a deterministic match to select one electronic identity document comprising each of the one or more requested document types to utilize in formulating a response to the identity verification request, performing the deterministic match comprising verifying, by the one or more processors, that data in each of the one electronic identity document comprising each of the one or more requested document types comprises the attributes; and

formulating, by the one or more processors, a response to the identity verification request, based on the selected electronic identity documents.

18. The system of claim 17 , wherein the respective type of each electronic identity document characterizes the electronic identity document.

19. The system of claim 18 , wherein the respective types of each electronic identity document indicate that each electronic identity document comprises one of: a driver's license, a fishing license, a membership card, an insurance card, a rewards card, a social security card, a police badge, a card for food assistance, a library card, or a gym membership.

20. The system of claim 18 , wherein the identity verification request further comprising a specification for attributes for each of the one or more electronic identity documents of the one or more requested document types, and wherein performing the deterministic match comprises selecting each of the one electronic identity document comprising each of the one or more requested document types from more than one electronic identity document of the one or more requested document types comprising the attributes.