Digital notarization using a biometric identification service

1. A system for digital notarization using a biometric identification service, comprising:

at least one non-transitory storage medium that stores instructions;

a biometric reader device;

a communication unit; and

at least one processor, communicably coupled to the biometric reader device and the communication unit, that executes the instructions to:

receive a payload from a signature requesting service using the communication unit, the payload identifying a digital item to validate with a signature;

obtain at least one digital representation of a biometric using the biometric reader device;

receive a data structure from an identification service using the communication unit, the data structure including the payload and an identity attestation generated using the at least one digital representation of the biometric, at least a portion of the data structure encrypted using a private encryption key of the identification service; and

transmit the data structure to the signature requesting service using the communication unit; wherein:

the at least one processor implements:

a signature requesting service module that performs processing to receive the payload and transmit the data structure; and

an identification system module that obtains the at least one digital representation of the biometric and receives the data structure; and

the signature requesting service module and the identification system module communicate with each other to exchange the payload and the data structure.

2. The system of claim 1 , wherein the identity attestation includes a liveness determination related to the at least one digital representation of the biometric.

3. The system of claim 2 , wherein the at least one processor:

generates the liveness determination by analyzing the at least one digital representation of the biometric or at least one additional digital representation of the biometric; and

transmits the liveness determination to the identification service using the communication unit along with the payload and the at least one digital representation of the biometric.

4. The system of claim 1 , wherein the at least the portion of the data structure encrypted using the private encryption key of the identification service includes at least a portion of the payload.

5. The system of claim 4 , wherein the at least the portion of the payload comprises a hash of at least part of the payload.

6. The system of claim 1 , wherein the at least one processor instructs the identification service regarding which of a set of identity information to include in the identity attestation.

7. The system of claim 1 , wherein the at least one processor instructs the identification service regarding an identity fidelity level to use in generating the identity attestation.

8. A system for digital notarization using a biometric identification service, comprising:

at least one non-transitory storage medium that stores instructions;

a communication unit; and

at least one processor, communicably coupled to the communication unit, that executes the instructions to:

receive a payload from a signature requesting service using the communication unit, the payload identifying a digital item to validate with a signature;

obtain at least one digital representation of a biometric;

determine a liveness of the at least one digital representation of the biometric;

determine an identity using the at least one digital representation of the biometric;

generate an identity attestation using the identity and the liveness;

generate a data structure that includes the payload and the identity attestation;

encrypt at least a portion of the data structure using an identification service private encryption key; and

transmit the data structure to the signature requesting service using the communication unit; wherein:

the at least one processor implements:

a signature requesting service module that performs processing to receive the payload and transmit the data structure; and

an identification system module that obtains the at least one digital representation of the biometric and receives the data structure; and

the signature requesting service module and the identification system module communicate with each other to exchange the payload and the data structure.

9. The system of claim 8 , wherein the at least one processor:

encrypts the identity attestation in the data structure using a symmetric identity attestation encryption key;

generates an encrypted version of the symmetric identity attestation encryption key using the identification service private encryption key; and

includes the encrypted version of the symmetric identity attestation encryption key in the data structure.

10. The system of claim 8 , wherein the at least one processor:

generates a hash of the payload; and

includes the hash of the payload in the identity attestation.

11. The system of claim 10 , wherein the data structure includes:

the payload;

the hash of the payload in the identity attestation; and

information regarding a procedure used to generate the hash of the payload.

12. The system of claim 8 , wherein the at least one processor determines the identity according to an identity fidelity level specified in the payload.

13. The system of claim 12 , wherein the at least one processor includes the identity fidelity level in the identity attestation.

14. The system of claim 8 , wherein the at least one processor includes a set of identity information in the identity attestation as specified by a person associated with the identity.

15. The system of claim 8 , wherein the at least one processor determines the identity by comparing the at least one digital representation of the biometric to stored biometric data wherein the stored biometric data is associated with the identity.

16. The system of claim 8 , wherein the at least one processor determines the identity by:

verifying access to an account wherein the account is associated with the identity; and

validating that the at least one digital representation of the biometric matches biometric data stored for the identity.

17. A system for digital notarization using a biometric identification service, comprising:

at least one non-transitory storage medium that stores instructions;

a communication unit; and

at least one processor, communicably coupled to the communication unit, that executes the instructions to:

determine to validate a digital item with a signature;

generate a payload that identifies the digital item to validate;

transmit the payload to an identification service using the communication unit;

receive a data structure from the identification service using the communication unit, the data structure including the payload and an identity attestation generated using at least one digital representation of a biometric, at least a portion of the data structure encrypted using a private encryption key of the identification service; and

store the data structure associated with the digital item in the at least one non-transitory storage medium; wherein:

the at least one processor implements:

a signature requesting service module that performs processing to transmit the payload and receive the data structure; and

an identification system module that obtains the at least one digital representation of the biometric and provides the data structure; and

the signature requesting service module and the identification system module communicate with each other to exchange the payload and the data structure.

18. The system of claim 17 , wherein the at least one processor:

uses a public encryption key of the identification service to decrypt the at least the portion of the data structure;

extracts the payload and the identity attestation from the data structure; and

uses the payload and the identity attestation to verify validation of the digital item.

19. The system of claim 17 , wherein the at least one processor identifies a person for the signature in the payload.

20. The system of claim 17 , wherein the at least one processor includes in the payload at least one of:

an identity fidelity level to use in generating the identity attestation; or

a set of identity information to include in the identity attestation.