User data validation for digital identifications
In general, one innovative aspect of the subject matter described in this specification may be embodied in methods that may include validating user data pages extracted from a digital identification in circumstances where a user device that includes the digital identification is either unavailable or presently lacks network connectivity. For instance, an authorized device may be used to extract user data pages from the digital identification by either exchanging communications with the user device using a proximity-based data exchange protocol, or by using a physical identification card to identify the digital identification on a user record. The user data pages may then be validated by comparing checksums associated with user data pages against the checksums within the user record, and decrypting the user data pages using a decryption key that is variably designated by a security status assigned to the digital identification.
1. A computer-implemented method comprising:
receiving, by a computing device, an electronic identification document having a security status, wherein the security status of the electronic identification document is stored in a database and periodically updated, the security status including a timestamp associated with a most recent update of the security status and one or more most recent values of user credential data;
in response to receiving the electronic identification document, extracting, by the computing device, embedded user credential data that is included with the electronic identification document;
obtaining, by the computing device, encrypted data that is included in the embedded user credential data;
receiving, by the computing device, a decryption key that is variably designated based on the security status of the electronic identification document;
decrypting, by the computing device, the encrypted data using the decryption key; and
based on the decrypted data, determining, by the computing device, whether the electronic identification document is valid.
2. The method of claim 1 , comprising:
receiving, by the computing device, data for extracting the embedded user credential data that is included with the electronic identification document,
wherein the computing device extracts the embedded user credential data using the data for extracting the embedded user credential data.
3. The method of claim 1 , wherein the embedded user credential data comprises:
a graphical watermark included in the electronic identification document;
an audio watermark embedded in audio outputted by an electronic device presenting the electronic identification document; or
a QR code included in the electronic identification document.
4. The method of claim 1 , wherein determining whether the electronic identification document is valid comprises:
transmitting, by the computing device and to an additional computing device, the decrypted data; and
receiving, by the computing device and from the additional computing device, data indicating that the electronic identification document is valid.
5. The method of claim 1 , wherein determining whether the electronic identification document is valid comprises:
transmitting, by the computing device and to an additional computing device, the decrypted data; and
receiving, by the computing device and from the additional computing device, data indicating that the electronic identification document is invalid.
6. The method of claim 1 , wherein an electronic device presenting the electronic identification document is configured to update the embedded user credential data in response to receiving data indicating the security status of the electronic identification document.
7. The method of claim 1 , wherein the encrypted data that is included in the embedded user credential data includes data identifying an individual depicted in the electronic identification document.
8. A system comprising:
one or more computers; and
one or more storage devices storing instructions that are operable, when executed by the one or more computers, to cause the one or more computers to perform operations comprising:
receiving, by a computing device, an electronic identification document having a security status;
in response to receiving the electronic identification document, extracting, by the computing device, embedded user credential data that is included with the electronic identification document;
obtaining, by the computing device, encrypted data that is included in the embedded user credential data;
receiving, by the computing device, a decryption key that is variably designated based on the security status of the electronic identification document;
decrypting, by the computing device, the encrypted data using the decryption key; and
based on the decrypted data, determining, by the computing device, whether the electronic identification document is valid; and
a database, wherein the security status of the electronic identification document is stored in the database and periodically updated, the security status including a timestamp associated with a most recent update of the security status and one or more most recent values of the user credential data.
9. The system of claim 8 , wherein the operations comprise:
receiving, by the computing device, data for extracting the embedded user credential data that is included with the electronic identification document,
wherein the computing device extracts the embedded user credential data using the data for extracting the embedded user credential data.
10. The system of claim 8 , wherein the embedded user credential data comprises:
a graphical watermark included in the electronic identification document;
an audio watermark embedded in audio outputted by an electronic device presenting the electronic identification document; or
a QR code included in the electronic identification document.
11. The system of claim 8 , wherein determining whether the electronic identification document is valid comprises:
transmitting, by the computing device and to an additional computing device, the decrypted data; and
receiving, by the computing device and from the additional computing device, data indicating that the electronic identification document is valid.
12. The system of claim 8 , wherein determining whether the electronic identification document is valid comprises:
transmitting, by the computing device and to an additional computing device, the decrypted data; and
receiving, by the computing device and from the additional computing device, data indicating that the electronic identification document is invalid.
13. The system of claim 8 , wherein an electronic device presenting the electronic identification document is configured to update the embedded user credential data in response to receiving data indicating the security status of the electronic identification document.
14. The system of claim 8 , wherein the encrypted data that is included in the embedded user credential data includes data identifying an individual depicted in the electronic identification document.
15. A non-transitory computer-readable medium storing software comprising instructions executable by one or more computers which, upon such execution, cause the one or more computers to perform operations comprising:
receiving, by a computing device, an electronic identification document having a security status, wherein the security status of the electronic identification document is stored in a database and periodically updated, the security status including a timestamp associated with a most recent update of the security status and one or more most recent values of user credential data;
in response to receiving the electronic identification document, extracting, by the computing device, embedded user credential data that is included with the electronic identification document;
obtaining, by the computing device, encrypted data that is included in the embedded user credential data;
receiving, by the computing device, a decryption key that is variably designated based on the security status of the electronic identification document;
decrypting, by the computing device, the encrypted data using the decryption key; and
based on the decrypted data, determining, by the computing device, whether the electronic identification document is valid.
16. The medium of claim 15 , wherein the operations comprise:
receiving, by the computing device, data for extracting the embedded user credential data that is included with the electronic identification document,
wherein the computing device extracts the embedded user credential data using the data for extracting the embedded user credential data.
17. The medium of claim 15 , wherein the embedded user credential data comprises:
a graphical watermark included in the electronic identification document;
an audio watermark embedded in audio outputted by an electronic device presenting the electronic identification document; or
a QR code included in the electronic identification document.
18. The medium of claim 15 , wherein determining whether the electronic identification document is valid comprises:
transmitting, by the computing device and to an additional computing device, the decrypted data; and
receiving, by the computing device and from the additional computing device, data indicating that the electronic identification document is valid.
19. The medium of claim 15 , wherein determining whether the electronic identification document is valid comprises:
transmitting, by the computing device and to an additional computing device, the decrypted data; and
receiving, by the computing device and from the additional computing device, data indicating that the electronic identification document is invalid.
20. The medium of claim 15 , wherein an electronic device presenting the electronic identification document is configured to update the embedded user credential data in response to receiving data indicating the security status of the electronic identification document.