Methods and systems for ownership verification using blockchain
A blockchain system for ownership verification may include one or more issuer network nodes and one or more verification network nodes. An issuer network node may be configured to receive a request including a public key to issue a credential, provision the credential to the communication device, generate a payload derived from hashing the credential and the public key, store the payload in a record of a blockchain, and synchronize the record to other network nodes on the blockchain. A verification network node may be configured to receive the credential, the public key, and a signature generated by the communication device to request access to a resource, verify the signature using the public key, generate a hash value based on the credential and the public key, determine that the hash value is stored in the blockchain, and authenticate the communication device for access to the requested resource.
1. A blockchain system comprising:
an issuer network node computer configured to:
receive a request to issue a credential for a communication device, the request including a communication device public key;
determine the credential to issue to the communication device;
provision the credential to the communication device;
generate a payload derived from hashing the credential and the communication device public key;
store the payload in a record of a blockchain; and
synchronize the record to other network nodes on the blockchain; and
a verification network node computer coupled to the issuer network node computer via a communications network and configured to:
receive the credential, the communication device public key, and a communication device signature generated by the communication device to request access to a resource;
verify the communication device signature using the communication device public key;
in response to verifying the communication device signature, generate a hash value based on the credential and the communication device public key;
determine that the hash value is stored in the blockchain; and
in response to determining that the hash value is stored in the blockchain, authenticate the communication device for access to the requested resource.
2. The blockchain system of claim 1 , wherein the record includes a record signature that is generated with a signature key.
3. The blockchain system of claim 2 , wherein the signature key is an issuer key associated with the issuer network node computer, or a certificate authority key associate with a certificate authority.
4. The blockchain system of claim 2 , wherein the verification network node computer is further configured to verify the record signature of the record to authenticate the communication device.
5. The blockchain system of claim 1 , wherein the payload is further derived from a hash of a previous block of one or more records in the blockchain.
6. The blockchain system of claim 5 , wherein the issuer network node computer is further configured to provide to the communication device a block identifier identifying which block in the blockchain contains the record.
7. The blockchain system of claim 1 , wherein the communication device signature is generated by encrypting a numeric value using a communication device private key corresponding to the communication device public key.
8. The blockchain system of claim 7 , wherein the numeric value is a block identifier identifying which block in the blockchain contains the record.
9. The blockchain system of claim 8 , wherein the block identifier is a hash of a previous block of the block in the blockchain containing the record.
10. A computer-implemented method comprising:
receiving, by a network node associated with a blockchain, a credential, a communication device public key associated with a communication device, and a communication device signature to request access to a resource;
verifying, by the network node, the communication device signature using the communication device public key;
in response to verifying the communication device signature, generating, by the network node, a hash value based on the credential and the communication device public key;
determining, by the network node, that the hash value is stored in a record of the blockchain;
verifying, by the network node, a record signature associated with the record of the blockchain; and
in response to determining that the hash value is stored in the blockchain and verifying the record signature of the record, authenticating the communication device for access to the requested resource.
11. The computer-implemented method of claim 10 , wherein the communication device signature is generated by encrypting a numeric value using a communication device private key corresponding to the communication device public key.
12. The computer-implemented method of claim 11 , wherein the numeric value is one of:
a number provided to the communication device from the network node;
a block identifier identifying which block in the blockchain contains the record; or
a hash of a previous block of the block in the blockchain containing the record.