IP Library Granted Patent US 11,410,185
Granted Patent B2
US 11,410,185 · App. 16/418,864 · Granted Aug 9, 2022

System and methods for interdependent identity based credential collection validation

Inventor: Eric R. Korb (Watchung, NJ)
Assignee: Accreditrust Technologies, LLC
G06Q30/018
View Patent ↗
Loading inventors, assignments & file history…
Monitor This Case
Get email alerts when status or documents change.
Order Certified Copies
Most orders are placed with the USPTO same day — all within 24 business hours.
Order via The Patent Place →
Pre-filled with this patent's details
Quick Facts
Patent No.
US 11,410,185
App. No.
16/418,864
Granted
Aug 9, 2022
Kind
B2
Abstract

A system for digitally verifying credential sets and its method of use are provided. A credentials set is made up of a number of credentials, each linked to a particular Entity. If all of the credentials are validated and verified, then the credentials' status identifier will be set to a value. If the various status identifiers meet a predetermined value, the set will be verified and digitally signed.

Claims (70)

1. A system for performing credential verification of interdependent digital credential collections relating to a first entity, where a digital credential comprises an electronic document that contains machine readable data which is cryptographically verifiable and a reference to a decentralized identifier and a digital signature, the collection comprises two or more digital credentials, from two different credential issuers, that are linked via a computer-implemented data structure format and the verification comprises a cryptographic authentication of the credentials, the system comprising:

one or more physical processors; and

a storage device configured to store one or more computer-executable instructions that, when executed by the one or more physical processors, configure the one or more physical processors to:

electronically receive and store a first digital credential with associated metadata and a status identifier;

link the metadata associated with the first digital credential is linked to a decentralized identifier of a first entity;

format a first credential assertion of the first credential via a predetermined data interchange format, wherein the first credential assertion comprises a data record or file representing the first digital credential;

cryptographically sign the first credential assertion via a first private key;

curate the signed first credential assertion with an identity provider for the first entity;

verify the metadata associated with the first credential via a first public key;

electronically receive and store a second digital credential with associated metadata and a status identifier;

link the metadata associated with the second digital credential to the decentralized identifier of the first entity;

format a second credential assertion of the second credential via the predetermined data interchange format, wherein the second credential assertion comprises a data record or file representing the second digital credential;

cryptographically sign the second credential assertion via a second private key;

curate the signed second credential assertion with an identity provider for the first entity;

verify the metadata associated with the second credential via a second public key;

define a first interdependent credential collection including the first digital credential and second digital credential;

determine that the first digital credential may be used to satisfy a first parameter of the interdependent credential collection and set the status identifier of the first digital credential as satisfied;

determine that the second digital credential may be used to satisfy a second parameter of the interdependent credential collection and set the status identifier of the second digital credential as satisfied;

determine if the status identifier of the first digital credential and the second digital credential are both satisfied;

upon determination that the status identifier of the first digital credential and the second digital credential are both satisfied, set a status identifier for the interdependent credential collection as satisfied; and

digitally sign the interdependent credential collection to enable use of the interdependent credential collection status as verification of the first and second credentials.

2. The system of claim 1 , wherein the one or more physical processors are further configured to:

verify a credential super set comprising multiple interdependent credential collections, wherein each interdependent credential collection includes one or more digital credentials.

3. The system of claim 2 , wherein to verify the credential super set, the one or more physical processors are configured to:

verify each digital credential of the multiple interdependent credential collections individually.

4. The system of claim 2 , wherein to verify the credential super set, the one or more physical processors are configured to:

verify a subset of the multiple interdependent credential collections.

5. The system of claim 1 , wherein the credentials are electronically created via a credential processor tool and are issued and transported via a credential transport protocol.

6. The system of claim 1 , wherein the one or more physical processors are further configured to:

verify a credential set comprising at least the first credential and second credential, wherein the first credential and second credential are stored in a credential aggregator vault which is configured to receive and store credential information from different credential issuers and organize the first credential and second credential into a interdependent credential collection, where each interdependent credential collection is represented by a Uniform Resource Identifier.

7. The system of claim 6 , wherein the first and second digital credentials cannot be modified without compromising validation of the interdependent credential collections.

8. The system of claim 6 , wherein the interdependent credential collections is modifiable.

9. The system of claim 1 , wherein the first and second digital credentials comprise at least one item of legitimate information and the status identifier.

10. The system of claim 9 , wherein the at least one item of legitimate information is selected from the group consisting of: type, issuer, claim, date issued, title, carrier, license, state, driver, birth date, address, expiration date, signature graph, public key, and identity.

11. A computer-implemented method of performing credential verification of interdependent credential collections relating to a first entity, where a digital credential comprises an electronic document that contains machine readable data which is cryptographically verifiable and a reference to a decentralized identifier and a digital signature, the collection comprises two or more digital credentials, from two different credential issuers, that are linked via a computer-implemented data structure format and the verification comprises a cryptographic authentication of the credentials, the method being implemented by a computer system that includes one or more physical processors executing one or more computer-executable instructions that, when executed, perform the method, the method comprising:

electronically receiving and storing a first digital credential with associated metadata and a status identifier;

linking the metadata associated with the first digital credential to a decentralized identifier of a first entity;

formatting a first credential assertion of the credential via a predetermined data interchange format, wherein the first credential assertion comprises a data record or file representing the first digital credential;

cryptographically signing the first credential assertion via a first private key;

curating the signed first credential assertion with an identity provider for the first entity;

verifying the metadata associated with the first credential via a first public key;

electronically receiving and storing a second digital credential with associated metadata and a status identifier;

linking the metadata associated with the second digital credential to the decentralized identifier of the first entity;

formatting a second credential assertion of the second credential via the predetermined data interchange format, wherein the second credential assertion comprises a data record or file representing the second digital credential;

cryptographically signing the second credential assertion via a second private key;

curating the signed second credential assertion with an identity provider for the first entity;

verifying the metadata associated with the second credential via a second public key;

defining a first interdependent credential collection including the first digital credential and the second digital credential;

determining that the first digital credential may be used to satisfy a first parameter of the interdependent credential collection and setting the status identifier of the first digital credential as satisfied;

determining that the second digital credential may be used to satisfy a second parameter of the interdependent credential collection and setting the status identifier of the second digital credential as satisfied;

determining if the status identifier of the first digital credential and the second digital credential are both satisfied;

upon determination that the status identifier of the first digital credential and the second digital credential are both satisfied, setting a status identifier for the interdependent credential collection as satisfied;

digitally signing the interdependent credential collection to enable use of the interdependent credential collection status as verification of the first and second credentials.

12. The method of claim 11 , the method further comprising:

verifying a credential super set comprising multiple interdependent credential collection, wherein each interdependent credential collection includes one or more digital credentials.

13. The method of claim 12 , wherein verifying the credential super set comprises:

verifying each digital credential of the multiple interdependent credential collections individually.

14. The method of claim 12 , wherein verifying the credential super set comprises:

verifying a subset of the multiple interdependent credential collections.

15. The method of claim 11 , wherein the credentials are electronically created via a credential processor tool and are issued and transported via a credential transport protocol.

16. The method of claim 11 , the method further comprising:

verifying a credential set comprising at least the first credential and second credential, wherein the first credential and second credential are stored in a credential aggregator vault which is configured to receive and store credential information from different credential issuers and organize the first credential and second credential into a interdependent credential collection, where each interdependent credential collection is represented by a Uniform Resource Identifier.

17. The method of claim 16 , wherein the first and second digital credentials cannot be modified without compromising validation of the interdependent credential collections.

18. The method of claim 16 , wherein the interdependent credential collections is modifiable.

19. The method of claim 11 , wherein the first and second digital credentials comprise at least one item of legitimate information and the status identifier.

20. The method of claim 19 , wherein the at least one item of legitimate information is selected from the group consisting of: type, issuer, claim, date issued, title, carrier, license, state, driver, birth date, address, expiration date, signature graph, public key, and identity.

21. The system of claim 1 , wherein the one or more physical processors are further configured to obtain the first and second digital credentials via a primary source provider or issuer.

22. The method of claim 11 , the method further comprising obtaining the first and second digital credentials via a primary source provider or issuer.

23. The system of claim 1 , wherein the one or more physical processors are further configured to receive, from an entity, an endorsement of the interdependent credential collection.

24. The method of claim 11 , the method further comprising: receiving, from an entity, an endorsement of the interdependent credential collection.

Assignments (5)
SECURITY INTEREST Recorded Jun 18, 2026
From: VERISYS CORPORATION
To: CAPITAL ONE, NATIONAL ASSOCIATION, AS ADMINISTRATIVE AGENT
Reel/Frame 075005/0313 →
NUNC PRO TUNC ASSIGNMENT Recorded Sep 11, 2025
From: ACCREDITRUST TECHNOLOGIES, LLC
To: ACCREDITRUST, LLC
Reel/Frame 072224/0204 →
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Sep 11, 2025
From: ACCREDITRUST, LLC
To: VERISYS CORPORATION
Reel/Frame 072866/0743 →
SECURITY INTEREST Recorded May 17, 2022
From: ACCREDITRUST TECHNOLOGIES, LLC
To: CAPITAL ONE, NATIONAL ASSOCIATION, AS ADMINISTRATIVE AGENT FOR THE SECURED PARTIES
Reel/Frame 059932/0659 →
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded May 21, 2019
From: KORB, ERIC R.
To: ACCREDITRUST TECHNOLOGIES, LLC
Reel/Frame 049247/0947 →
Continuity (2)
Division 14883285 · Oct 14, 2015
Related Publication 20190272548A1 · Sep 5, 2019
Cited By (1)
US 12,626,264