Method and system for identity and access management for blockchain interoperability
A method performed by a computerized device of identity registration and certification comprising receiving at the computerized device a registration application from a user comprising hashed user identification information that has been signed with a private key of the user from the user, generating by the computerized device a first seal contract comprising the hashed user identification information and being recorded at a sealed user record address on a blockchain network, transmitting by the computerized device the sealed user record address to the user, receiving at the computerized device a hashed verification record from a certificate authority, generating by the computerized device a second seal contract recorded at a sealed verification record address on the blockchain network using the hashed verification record as an input, and transmitting by the computerized device the sealed verification record address to the certificate authority.
1. A method performed by a computerized device of identity registration and certification comprising:
receiving at a computerized device that is a node on an identity blockchain network a first seal contract that has been signed with a private key of a user, the first seal contract comprising hashed user identification information;
transmitting by the computerized device a sealed user record address on the identity blockchain network to the user at which a transaction comprising the first seal contract is deployed;
receiving at the computerized device a hashed verification record from a certificate authority;
generating by the computerized device a second seal contract using the hashed verification record as an input;
transmitting by the computerized device a sealed verification record address on the identity blockchain network to the certificate authority at which a transaction comprising the second seal contract is deployed;
receiving at the computerized device the sealed user record address, a certification token indicating an identity of the user is certified by the certificate authority, and the sealed verification record address from the certificate authority;
generating by the computerized device a certification contract comprising:
the sealed user record address;
the sealed verification record address:
the certification token; and
a certification token expiration;
deploying a transaction comprising the certification contract at a certification contract address on the identity blockchain network; and
transmitting by the computerized device a certification contract address on the identity blockchain network to the user at which a transaction comprising the certification contract is deployed.
2. The method of claim I wherein the first seal contract consists of the hashed user identification information.
3. The method of claim 1 wherein the certification contract consists of:
the sealed user record address;
the sealed verification record address;
the certification token: and
a certification token expiration.
4. The method of claim 1 further comprising:
receiving at the computerized device a request to access the sealed user record address from the certification contract at the certification contract address from a decentralized application;
transmitting the sealed user record address to the decentralized application;
receiving at the computerized device a request for the hashed user identification information at the sealed user record address from the decentralized application;
transmitting the hashed user identification information to the decentralized application;
receiving at the computerized device a request to access the sealed verification record address from the certification record at the certification record address from a decentralized application;
transmitting the sealed verification record address to the decentralized application;
receiving at the computerized device a request for the hashed verification record at the sealed verification record address from the decentralized application;
transmitting the hashed verification record to the decentralized application;
receiving a request at the computerized device for the certification token at the certification contract address from the decentralized application; and
transmitting the certification token to the decentralized application.
5. The method of claim 4 wherein the step of receiving the request for the hashed verification record is performed subsequent to the decentralized application performing a step of comparing the hashed user identification information to signed hashed user identification information received from the user and that has been decrypted using a public key associated with the user.
6. A method performed by a computerized device of identity registration and certification comprising:
receiving at a computerized device that is a node on an identity blockchain network a first seal contract signed by a private key of a user, the first seal contract consisting of hashed user identification information;
transmitting by the computerized device a sealed user record address on the identity blockchain network to the user at which a transaction comprising the first deal contract is deployed;
receiving at the computerized device a hashed verification record from a certificate authority;
generating by the computerized device a second seal contract using the hashed verification record as an input;
transmitting by the computerized device a sealed verification record address on the identity blockchain network to the certificate authority at which a transaction comprising the second seal contract is deployed;
receiving at the computerized device from the certificate authority the sealed user record address, a certification token that indicates an identity of the user has been certified by the certificate authority, and the sealed verification record address;
generating by the computerized device a certification contract consisting of:
the sealed user record address;
the sealed verification record address;
the certification token; and
a certification token expiration;
transmitting by the computerized device a certification contract address on the identity blockchain network to the user at which a transaction comprising the certification contract is deployed.
7. The method of claim 6 further comprising:
receiving at the computerized device a request to access the sealed user record address from the certification contract at the certification contract address from a decentralized application;
transmitting the sealed user record address to the decentralized application;
receiving at the computerized device a request for the hashed user identification information at the sealed user record address from the decentralized application;
transmitting the hashed user identification information to the decentralized application;
receiving at the computerized device a request to access the sealed verification record address from the certification record at the certification record address from a decentralized application;
transmitting the sealed verification record address to the decentralized application;
receiving at the computerized device a request for the hashed verification record at the sealed verification record address from the decentralized application;
transmitting the hashed verification record to the decentralized application;
receiving a request at the computerized device for the certification token at the certification contract address from the decentralized application; and
transmitting the certification token to the decentralized application.
8. The method of claim 7 wherein the step of receiving the request for the hashed verification record is performed subsequent to the decentralized application performing a step of comparing the hashed user identification information to signed hashed user identification information received from the user and that has been decrypted using a public key associated with the user.