Identity attestation system and method
A system and method of determining an attestation or identity score of a user of a communication device employs metadata stored in a plurality of client devices, such as IoT devices. A request for attestation, comprises a unique identifier associated with the communication device and an input or shared value. The unique identifier is used to identify, in a distributed ledger (blockchain), client devices that are paired with the communication device. Metadata stored in association with each of the client devices is retrieved and compared to the input or shared value, and a sub-identity score is determined based on the extent to which there is a match and the reliability of the client device. The sub-identity scores are combined to obtain an identity score reflecting a confidence level in the user and/or communication device.
1. A method, comprising:
receiving a request associated with a communication device, the communication device being associated with a user, the request comprising a unique identifier associated with the communication device and a shared value, the shared value comprising a data type;
identifying a plurality of client devices associated with the communication device, based on data stored in a distributed ledger;
retrieving metadata associated with each of the plurality of client devices, wherein the metadata is of a same data type as the shared value;
determining, for each of the plurality of client devices for which metadata is retrieved, a score based on a degree to which the retrieved metadata matches the shared value, comprising:
determining a match score for the shared value and the metadata,
determining a reliability score for the client device, and
combining the match score and the reliability score to produce a sub-identity score;
determining an identity score from the scores determined for each of the plurality of client devices, comprising aggregating the sub-identity scores for the plurality of client devices; and
providing a response to the request based on the identity score.
2. The method of claim 1 , wherein identifying the plurality of client devices comprises retrieving identifiers for each of the plurality of client devices from the distributed ledger.
3. The method of claim 1 , wherein identifying the plurality of client devices comprises retrieving identifiers for each of the plurality of client devices from a static copy of the distributed ledger.
4. The method of claim 1 , wherein retrieving the metadata associated with each of the plurality of client devices comprises retrieving the metadata from either the distributed ledger or a static copy of the distributed ledger.
5. The method of claim 1 , wherein retrieving the metadata associated with each of the plurality of client devices comprises querying each of the plurality of client devices for the metadata.
6. The method of claim 1 , wherein retrieving the metadata associated with each of the plurality of client devices comprises retrieving the metadata from memory of the communication device.
7. The method of claim 1 , wherein aggregating the sub-identity score comprises weighting each sub-identity score according to at least one inherent or external factor of the client device associated with the sub-identity score.
8. The method of claim 1 , wherein identifying the plurality of client devices comprises obtaining, from the distributed ledger, identifiers of client devices that are paired with the communication device.
9. The method of claim 1 , wherein identifying the plurality of client devices comprises:
obtaining, from the distributed ledger, a root identifier associated with the unique identifier;
obtaining, from the distributed ledger, application-specific identifiers associated with the root identifier;
obtaining, from the distributed ledger, identifiers of client devices associated with each of the application-specific identifiers.
10. Non-transitory computer-readable media storing code which, when executed by at least one processor device of a networked computer system, causes the computer system to implement:
receiving a request associated with a communication device, the communication device being associated with a user, the request comprising a unique identifier associated with the communication device and a shared value, the shared value comprising a data type;
identifying a plurality of client devices associated with the communication device, based on data stored in a distributed ledger;
retrieving metadata associated with each of the plurality of client devices, wherein the metadata is of a same data type as the shared value;
determining, for each of the plurality of client devices for which metadata is retrieved, a score based on a degree to which the retrieved metadata matches the shared value, comprising:
determining a match score for the shared value and the metadata,
determining a reliability score for the client device, and
combining the match score and the reliability score to produce a sub-identity score;
determining an identity score from the scores determined for each of the plurality of client devices, comprising aggregating the sub-identity scores for the plurality of client devices; and
providing a response to the request based on the identity score.
11. The non-transitory computer-readable media of claim 10 , wherein identifying the plurality of client devices comprises one of:
retrieving identifiers for each of the plurality of client devices from the distributed ledger or from a static copy of the distributed ledger; or
obtaining identifiers for each of the plurality of client devices by:
obtaining, from the distributed ledger, a root identifier associated with the unique identifier;
obtaining, from the distributed ledger, application-specific identifiers associated with the root identifier; and
obtaining, from the distributed ledger, identifiers of client devices associated with each of the application-specific identifiers.
12. The non-transitory computer-readable media of claim 10 , wherein retrieving the metadata associated with each of the plurality of client devices comprises one of:
retrieving the metadata from either the distributed ledger or a static copy of the distributed ledger;
querying each of the plurality of client devices for the metadata; or
retrieving the metadata from memory of the communication device.
13. The non-transitory computer-readable media of claim 10 , wherein aggregating the sub-identity score comprises weighting each sub-identity score according to at least one inherent or external factor of the client device associated with the sub-identity score.
14. A networked computer system comprising at least one processor device, the at least one processor device being configured to implement:
receiving a request associated with a communication device, the communication device being associated with a user, the request comprising a unique identifier associated with the communication device and a shared value, the shared value comprising a data type;
identifying a plurality of client devices associated with the communication device, based on data stored in a distributed ledger;
retrieving metadata associated with each of the plurality of client devices, wherein the metadata is of a same data type as the shared value;
determining, for each of the plurality of client devices for which metadata is retrieved, a score based on a degree to which the retrieved metadata matches the shared value, comprising:
determining a match score for the shared value and the metadata,
determining a reliability score for the client device, and
combining the match score and the reliability score to produce a sub-identity score;
determining an identity score from the scores determined for each of the plurality of client devices, comprising aggregating the sub-identity scores for the plurality of client devices; and
providing a response to the request based on the identity score.
15. The networked computer system of claim 14 , wherein identifying the plurality of client devices comprises one of:
retrieving identifiers for each of the plurality of client devices from the distributed ledger or from a static copy of the distributed ledger; or
obtaining identifiers for each of the plurality of client devices by:
obtaining, from the distributed ledger, a root identifier associated with the unique identifier;
obtaining, from the distributed ledger, application-specific identifiers associated with the root identifier; and
obtaining, from the distributed ledger, identifiers of client devices associated with each of the application-specific identifiers.
16. The networked computer system of claim 14 , wherein retrieving the metadata associated with each of the plurality of client devices comprises one of:
retrieving the metadata from either the distributed ledger or a static copy of the distributed ledger;
querying each of the plurality of client devices for the metadata; or
retrieving the metadata from memory of the communication device.
17. The networked computer system of claim 14 , wherein aggregating the sub-identity score comprises weighting each sub-identity score according to at least one inherent or external factor of the client device associated with the sub-identity score.