IP Library › Granted Patent US 11,777,953

Granted Patent B2

US 11,777,953 · App. 17/189,064 · Granted Oct 3, 2023

Systems and methods for managing digital identities

Inventors: Alex Oberhauser (Medford, MA); Matthew Commons (Cambridge, MA); Alok Bhargava (Newton, MA)

Assignee: Cambridge Blockchain, Inc.

H04L63/126 G06F21/33 G06Q10/06 G11B20/00086 H04L9/3236 H04L9/3247 H04L63/08 H04L9/50 H04L2209/56 H04N2201/3233

View Patent ↗

Loading inventors, assignments & file history…

Monitor This Case

Get email alerts when status or documents change.

Order Certified Copies

Most orders are placed with the USPTO same day — all within 24 business hours.

Order via The Patent Place →

Pre-filled with this patent's details

Quick Facts

Patent No.: US 11,777,953
App. No.: 17/189,064
Granted: Oct 3, 2023
Kind: B2

External Links

USPTO Patent Center↗ Full Patent PDF↗

Abstract

Systems and methods for managing digital identities. In some embodiments, a method is provided, comprising acts of: receiving a request to validate at least one statement about a user; identifying, from the request, a reference to a distributed ledger, the reference comprising an identifier for the distributed ledger and an identifier for a transaction recorded on the distributed ledger; identifying, based at least in part on the identifier for the distributed ledger, at least one node of a network of nodes managing the distributed ledger; and communicating with the at least one node to validate the at least one statement about the user.

Claims (141)

1. A computer-implemented method, comprising acts of:

receiving at least one attestation for at least one attribute of a first entity, wherein the at least one attestation comprises a cryptographic proof for the at least one attribute, wherein the at least one attestation is stored in a badge associated with the first entity, wherein receiving at least one attestation comprises receiving the badge, and wherein the badge is generated according to a schema selected from a plurality of schemas for badges, the schema comprising a plurality of attributes, the plurality of attributes comprising the at least one attribute;

determining whether the cryptographic proof in the at least one attestation is a valid proof of a purported value of the at least one attribute;

determining whether to trust a second entity indicated as being responsible for veracity of the purported value of the at least one attribute;

determining whether the at least one attestation is electronically signed by the second entity;

determining, based at least in part on information accessed from a distributed ledger, whether the at least one attestation has been revoked by the second entity; and

in response to determining that (1) the cryptographic proof is a valid proof of the purported value of the at least one attribute, (2) the second entity is to be trusted, (3) the at least one attestation is electronically signed by the second entity, and (4) the at least one attestation has not been revoked by the second entity:

proceeding with a transaction with the first entity.

2. The computer-implemented method of claim 1 , wherein:

the distributed ledger is implemented using at least one blockchain.

3. The computer-implemented method of claim 1 , wherein:

the at least one attestation is referenced by a globally unique identity identifier of the first entity.

4. The computer-implemented method of claim 3 , wherein:

the first entity is a user; and

the globally unique identity identifier is generated based on one or more biometrics of the user.

5. The computer-implemented method of claim 1 , wherein:

the at least one attribute comprises a first attribute of the first entity;

the first entity has at least one second attribute;

the purported value of the first attribute is derived from a value of the at least one second attribute; and

the value of the at least one second attribute is not received.

6. The computer-implemented method of claim 1 , wherein the first entity is a user or an organization.

7. The computer-implemented method of claim 1 , wherein:

the act of determining whether to trust the second entity comprises determining whether the second entity is in a list of trusted entities.

8. The computer-implemented method of claim 1 , further comprising an act of:

sending, to the first entity, a request for the at least one attribute, wherein the at least one attestation is received in response to the request.

9. The computer-implemented method of claim 1 , further comprising an act of:

receiving, from a personal data service (PDS) controlled by the first entity, the purported value of the at least one attribute.

10. The computer-implemented method of claim 9 , wherein:

the purported value of the at least one attribute is received from a mobile device associated with the first entity.

11. A system comprising:

at least one computer processor; and

at least one non-transitory computer-readable medium having encoded thereon instructions that, when executed, cause the at least one computer processor to:

receive at least one attestation for at least one attribute of a first entity, wherein the at least one attestation comprises a cryptographic proof for the at least one attribute, wherein the at least one attestation is stored in a badge associated with the first entity, wherein receiving at least one attestation comprises receiving the badge, and wherein the badge is generated according to a schema selected from a plurality of schemas for badges, the schema comprising a plurality of attributes, the plurality of attributes comprising the at least one attribute;

determine whether the cryptographic proof in the at least one attestation is a valid proof of a purported value of the at least one attribute;

determine whether to trust a second entity indicated as being responsible for veracity of the purported value of the at least one attribute;

determine whether the at least one attestation is electronically signed by the second entity;

determine, based at least in part on information accessed from a distributed ledger, whether the at least one attestation has been revoked by the second entity; and

proceed with a transaction with the first entity.

12. The system of claim 11 , wherein:

the distributed ledger is implemented using at least one blockchain.

13. The system of claim 11 , wherein:

the at least one attestation is referenced by a globally unique identity identifier of the first entity.

14. The system of claim 13 , wherein:

the first entity is a user; and

the globally unique identity identifier is generated based on one or more biometrics of the user.

15. The system of claim 11 , wherein:

the at least one attribute comprises a first attribute of the first entity;

the first entity has at least one second attribute;

the purported value of the first attribute is derived from a value of the at least one second attribute; and

the value of the at least one second attribute is not received.

16. The system of claim 11 , wherein the first entity is a user or an organization.

17. The system of claim 11 , wherein:

the instructions, when executed, cause the at least one computer processor to determine whether to trust the second entity at least in part by determining whether the second entity is in a list of trusted entities.

18. The system of claim 11 , wherein the instructions, when executed, further cause the at least one computer processor to:

send, to the first entity, a request for the at least one attribute, wherein the at least one attestation is received in response to the request.

19. The system of claim 11 , wherein the instructions, when executed, further cause the at least one computer processor to:

receive, from a personal data service (PDS) controlled by the first entity, the purported value of the at least one attribute.

20. The system of claim 19 , wherein:

the purported value of the at least one attribute is received from a mobile device associated with the first entity.

21. At least one non-transitory computer-readable medium having encoded thereon instructions which, when executed, cause at least one computer processor to perform acts of:

determining whether the cryptographic proof in the at least one attestation is a valid proof of a purported value of the at least one attribute;

determining whether to trust a second entity indicated as being responsible for veracity of the purported value of the at least one attribute;

determining whether the at least one attestation is electronically signed by the second entity;

determining, based at least in part on information accessed from a distributed ledger, whether the at least one attestation has been revoked by the second entity; and

proceeding with a transaction with the first entity.

22. The at least one non-transitory computer-readable medium of claim 21 , wherein:

the distributed ledger is implemented using at least one blockchain.

23. The at least one non-transitory computer-readable medium of claim 21 , wherein:

the at least one attestation is referenced by a globally unique identity identifier of the first entity.

24. The at least one non-transitory computer-readable medium of claim 23 , wherein:

the first entity is a user; and

the globally unique identity identifier is generated based on one or more biometrics of the user.

25. The at least one non-transitory computer-readable medium of claim 21 , wherein:

the at least one attribute comprises a first attribute of the first entity;

the first entity has at least one second attribute;

the purported value of the first attribute is derived from a value of the at least one second attribute; and

the value of the at least one second attribute is not received.

26. The at least one non-transitory computer-readable medium of claim 21 , wherein the first entity is a user or an organization.

27. The at least one non-transitory computer-readable medium of claim 21 , wherein:

determining whether to trust the second entity comprises determining whether the second entity is in a list of trusted entities.

28. The at least one non-transitory computer-readable medium of claim 21 , wherein the instructions, when executed, further cause the at least one computer processor to perform an act of:

sending, to the first entity, a request for the at least one attribute, wherein the at least one attestation is received in response to the request.

29. The at least one non-transitory computer-readable medium of claim 21 , wherein the instructions, when executed, further cause the at least one computer processor to perform an act of:

receiving, from a personal data service (PDS) controlled by the first entity, the purported value of the at least one attribute.

30. The at least one non-transitory computer-readable medium of claim 29 , wherein:

the purported value of the at least one attribute is received from a mobile device associated with the first entity.

31. A computer-implemented method, comprising acts of:

receiving at least one attestation for at least one attribute of a first entity, wherein the at least one attestation comprises a cryptographic proof for the at least one attribute;

determining whether the cryptographic proof in the at least one attestation is a valid proof of a purported value of the at least one attribute;

determining whether to trust a second entity indicated as being responsible for veracity of the purported value of the at least one attribute;

determining whether the at least one attestation is electronically signed by the second entity;

determining, based at least in part on information accessed from a distributed ledger, whether the at least one attestation has been revoked by the second entity; and

proceeding with a transaction with the first entity, wherein:

the at least one attestation comprises a first attestation;

the cryptographic proof comprises a first cryptographic proof, the distributed ledger comprises a first distributed ledger; and

the second entity electronically signs the first attestation in response to:

receiving a second attestation for the at least one attribute of the first entity, wherein the second attestation comprises a second cryptographic proof for the at least one attribute;

determining that the second cryptographic proof in the second attestation is a valid proof of the purported value of the at least one attribute;

determining to trust a third entity that is indicated as being responsible for veracity of the purported value of the at least one attribute;

determining that the second attestation is electronically signed by the third entity; and

determining, based at least in part on information accessed from a second distributed ledger, that the second attestation has not been revoked by the third entity.

32. A system comprising:

at least one computer processor; and

at least one non-transitory computer-readable medium having encoded thereon instructions that, when executed, cause the at least one computer processor to:

receive at least one attestation for at least one attribute of a first entity, wherein the at least one attestation comprises a cryptographic proof for the at least one attribute;

determine whether the cryptographic proof in the at least one attestation is a valid proof of a purported value of the at least one attribute;

determine whether to trust a second entity indicated as being responsible for veracity of the purported value of the at least one attribute;

determine whether the at least one attestation is electronically signed by the second entity;

determine, based at least in part on information accessed from a distributed ledger, whether the at least one attestation has been revoked by the second entity; and

proceed with a transaction with the first entity, wherein:

the at least one attestation comprises a first attestation;

the cryptographic proof comprises a first cryptographic proof;

the distributed ledger comprises a first distributed ledger; and

the second entity electronically signs the first attestation in response to:

receiving a second attestation for the at least one attribute of the first entity, wherein the second attestation comprises a second cryptographic proof for the at least one attribute;

determining that the second cryptographic proof in the second attestation is a valid proof of the purported value of the at least one attribute;

determining to trust a third entity that is indicated as being responsible for veracity of the purported value of the at least one attribute;

determining that the second attestation is electronically signed by the third entity; and

determining, based at least in part on information accessed from a second distributed ledger, that the second attestation has not been revoked by the third entity.

33. At least one non-transitory computer-readable medium having encoded thereon instructions which, when executed, cause at least one computer processor to perform acts of: