Granted Patent B2

US 11,323,272 · App. 16/697,131 · Granted May 3, 2022

Inventors: Armin Ebrahimi (Los Gatos, CA); Gaurav Khot (Cupertino, CA); Vladimir Reshetnikov (San Jose, CA); Robert Gadbois (Los Gatos, CA)

Assignee: Ping Identity Corporation

H04L9/3263G06K7/1417G06Q20/065G06Q20/3827G06Q20/38215H04L9/0643H04L9/3236H04L9/3247H04L9/3297G06F7/588G06Q2220/00H04L2209/38

Abstract

Claims (66)

1. A method, comprising:

receiving data of a user at a certifying device;

generating a plurality of salts;

hashing each field of the data combined with an associated salt from the plurality of salts to create generated hashed data for that field;

signing the generated hashed data for each field of the data using a private key associated with the certifying device to create a signed certification for that field;

generating a certification record including the signed certification for each field of the data;

hashing the certification record to define a hashed certification record;

storing the hashed certification record on a blockchain, wherein the hashed certification record is referenced by a certification transaction-ID;

receiving the certification transaction-ID from the blockchain; and

storing the hashed certification record to a side chain.

2. The method of claim 1 , wherein the storing the hashed certification record to the side chain includes:

appending the certification transaction-ID to the hashed certification record; and

storing the certification transaction-ID appended to the hashed certification record to the side chain.

3. The method of claim 1 , further comprising:

receiving a side transaction-ID from the side chain that references the certification transaction-ID of the blockchain.

4. The method of claim 1 , wherein the blockchain is a first blockchain, the method further comprising:

verifying a signed hash value from a second blockchain using the data, a registration hash algorithm, and a public key of the user.

5. The method of claim 1 ,

wherein the side chain is a public or private block chain.

6. A non-transitory computer-readable medium storing a computer program for performing a method, the computer-readable medium comprising:

program instructions for receiving data of a user at a certifying device;

program instructions for generating a plurality of salts;

program instructions for hashing each field of the data combined with an associated salt from the plurality of salts to create generated hashed data for that field;

program instructions for signing the generated hashed data for each field of the data using a private key associated with the certifying device to create a signed certification for that field;

program instructions for generating a certification record including the signed certification for each field of the data;

program instructions for hashing the certification record to define a hashed certification record;

program instructions for storing the hashed certification record on a blockchain, wherein the hashed certification record is referenced by a certification transaction-ID;

program instructions for receiving the certification transaction-ID from the blockchain; and

program instructions for storing the hashed certification record to a side chain.

7. The non-transitory computer-readable medium of claim 6 , wherein the program instructions for storing the hashed certification record to the side chain include:

program instructions for appending the certification transaction-ID to the hashed certification record; and

program instructions for storing the certification transaction-ID appended to the hashed certification record to the side chain.

8. The non-transitory computer-readable medium of claim 6 , further comprising:

program instructions for receiving a side transaction-ID from the side chain that references the certification transaction-ID of the blockchain.

9. The non-transitory computer-readable medium of claim 6 , wherein the blockchain is a first blockchain, the non-transitory computer-readable medium of claim 6 further comprising:

program instructions for verifying a signed hash value from a second blockchain using the data, a registration hash algorithm, and a public key of the user.

10. The non-transitory computer-readable medium of claim 6 ,

wherein in the method the side chain is a public or private block chain.

11. A computer system comprising:

a processor; and

memory coupled to the processor and having stored therein instructions that, if executed by the processor, cause the processor to execute a method comprising:

receiving data of a user at a certifying device;

generating a plurality of salts;

hashing each field of the data combined with an associated salt from the plurality of salts to create generated hashed data for that field;

signing the generated hashed data for each field of the data using a private key associated with the certifying device to create a signed certification for that field;

generating a certification record including the signed certification for each field of the data;

hashing the certification record to define a hashed certification record;

storing the hashed certification record on a blockchain, wherein the hashed certification record is referenced by a certification transaction-ID;

receiving the certification transaction-ID from the blockchain; and

storing the hashed certification record to a side chain.

12. The computer system of claim 11 , wherein in the method the storing the hashed certification record to the side chain includes:

appending the certification transaction-ID to the hashed certification record; and

storing the certification transaction-ID appended to the hashed certification record to the side chain.

13. The computer system of claim 11 , the method further comprising:

receiving a side transaction-ID from the side chain that references the certification transaction-ID of the blockchain.

14. The computer system of claim 11 , wherein the blockchain is a first blockchain, the method further comprising:

verifying a signed hash value from a second blockchain using the data, a registration hash algorithm, and a public key of the user.

15. The method of claim 1 , wherein the blockchain is a first blockchain, the method further comprising:

receiving a registration transaction-ID of the data, wherein the registration transaction-ID is generated from a second blockchain in response to receiving and storing a signed hash value of the data for registration, wherein the signed hash value is signed using a private key of the user, wherein the hash value of the data is generated using a registration hash algorithm; and

retrieving the signed hash value from the second blockchain using the registration transaction-ID.

16. The non-transitory computer-readable medium of claim 6 , wherein the blockchain is a first blockchain, the non-transitory computer-readable medium further comprising:

program instructions for receiving a registration transaction-ID of the data, wherein the registration transaction-ID is generated from a second blockchain in response to receiving and storing a signed hash value of the data for registration, wherein the signed hash value is signed using a private key of the user, wherein the hash value of the data is generated using a registration hash algorithm; and

program instructions for retrieving the signed hash value from the second blockchain using the registration transaction-ID.

17. The computer system of claim 11 , wherein the blockchain is a first blockchain, the method further comprising:

receiving a registration transaction-ID of the data, wherein the registration transaction-ID is generated from a second blockchain in response to receiving and storing a signed hash value of the data for registration, wherein the signed hash value is signed using a private key of the user, wherein the hash value of the data is generated using a registration hash algorithm; and

retrieving the signed hash value from the second blockchain using the registration transaction-ID.

Assignments (11)

Continuity (5)

Cited By (3)

US 12,388,624 US 12,488,357 US 12,518,278