Zero-knowledge identity verification in a distributed computing system
For each data value associated with a data object, a respective object value identification query message that includes the data value may be sent to each of a plurality of identity nodes via a network. For each of the data values, a respective object value identification response message that includes a respective network identifier corresponding with the respective data value may be received. A local identifier may be determined based on the object value identification response messages, and a response query message including the local identifier may be transmitted.
1. A method comprising:
receiving via a communications interface a request to identify a data object that includes a first plurality of data values;
for each of the first plurality of data values, transmitting a respective object value identification query message that includes the data value to each of a plurality of identity nodes via a gossip communication protocol defining a peer-to-peer procedure for transmitting information among the plurality of identity nodes;
for each of the first plurality of data values, receiving a respective object value identification response message that includes a respective network identifier corresponding with the respective data value, wherein the respective network identifier is stored in a trust ledger shared among the plurality of identity nodes, the respective network identifier being associated in the trust ledger with a respective second one or more data values;
determining via a processor a local identifier based on the object value identification response messages, wherein the local identifier is selected by identifying a designated network identifier as the most common network identifier among the object value identification response messages; and
transmitting a query response message including the local identifier via the communications interface.
2. The method recited in claim 1 , wherein determining the local identifier further comprises querying a correspondence table using the designated network identifier, the correspondence table identifying a plurality of correspondence relationships between local identifiers and network identifiers.
3. The method recited in claim 1 , wherein determining the local identifier further comprises creating the local identifier when it is determined that the designated network identifier does not correspond to an existing local identifier.
4. The method recited in claim 1 , wherein each of the respective network identifiers is determined by consensus among the plurality of identity nodes.
5. The method recited in claim 1 , wherein the data object is associated with a data object schema, the data object schema identifying one or more data fields associated with an instance of the data object schema, each of the first plurality of data values corresponding with a respective one of the data fields.
6. The method recited in claim 1 , wherein the second one or more data values are hashed prior to storage in the trust ledger, the trust ledger capable of being queried to determine any network identifiers associated with a designated hashed data value.
7. The method recited in claim 1 , wherein the trust ledger is implemented as a merkle tree.
8. The method recited in claim 1 , wherein the trust ledger is implemented as a blockchain.
9. A database system implemented via a server system comprising:
a communications interface operable to:
receive a request to identify a data object that includes a first plurality of data values,
for each of the first plurality of data values, transmit a respective object value identification query message that includes the data value to each of a plurality of identity nodes via a gossip communication protocol defining a peer-to-peer procedure for transmitting information among the plurality of identity nodes, and
for each of the first plurality of data values, receive a respective object value identification response message that includes a respective network identifier corresponding with the respective data value, wherein the respective network identifier is stored in a trust ledger shared among the plurality of identity nodes, the respective network identifier being associated in the trust ledger with a respective second one or more data values; and
a processor operable to:
determine a local identifier based on the object value identification response messages, wherein the local identifier is selected by identifying a designated network identifier as the most common network identifier among the object value identification response messages, and
instruct the communications interface to transmit a query response message including the local identifier via the communications interface.
10. The database system recited in claim 9 , wherein determining the local identifier comprises querying a correspondence table using the designated network identifier, the correspondence table identify a plurality of correspondence relationships between local identifiers and network identifiers.
11. The database system recited in claim 9 , wherein each of the respective network identifiers is determined by consensus among the plurality of identity nodes.
12. A computer program product comprising computer-readable program code capable of being executed by one or more processors when retrieved from a non-transitory computer-readable medium, the program code configurable to cause:
processing a request received via a communications interface to identify a data object that includes a first plurality of data values;
for each of the first plurality of data values, transmitting a respective object value identification query message that includes the data value to each of a plurality of identity nodes via a gossip communication protocol defining a peer-to-peer procedure for transmitting information among the plurality of identity nodes;
for each of the first plurality of data values, receiving a respective object value identification response message that includes a respective network identifier corresponding with the respective data value, wherein the respective network identifier is stored in a trust ledger shared among the plurality of identity nodes, the respective network identifier being associated in the trust ledger with a respective second one or more data values;
determining via a processor a local identifier based on the object value identification response messages, wherein the local identifier is selected by identifying a designated network identifier as the most common network identifier among the object value identification response messages; and
transmitting a query response message including the local identifier via the communications interface.
13. The computer program product recited in claim 12 , wherein determining the local identifier comprises querying a correspondence table using the designated network identifier, the correspondence table identify a plurality of correspondence relationships between local identifiers and network identifiers.
14. The computer program product recited in claim 12 , wherein each of the respective network identifiers is determined by consensus among the plurality of identity nodes.