Methods and systems for a digital trust architecture
In some aspects, methods and systems for a digital trust architecture are provided. In some aspects, the architecture includes a user account provisioning process. The provisioning process may make use of in person verifications of some personal information to ensure authenticity of the user information. Once the authenticity of user information is established, an account may be created. The user account may include a user email account, with integrated access to digital certificates linked to the user account. Account creation may also automatically publish the new user's public key in a publicly accessible directory, enabling encrypted email information to be easily sent to the new user.
1. A digital trust architecture system comprising:
a hardware processor configured to:
receive, from a network, a request to create an account for a user;
verify the user account for the user based on user identity information, the user identity information comprising a first item of user information received when the user is at a first location and a second item of user information received when the user is at a second location where the second item of user information is verified in-person, wherein the first location is different from the second location;
associate the user account with an electronic key;
identify electronic data regarding the user, wherein the electronic data is to be communicated electronically with respect to a transaction involving the user;
sign the electronic data based on the electronic key;
convey the electronic data over the network to a recipient associated with a recipient device;
receive input identifying the recipient associated with the recipient device and input indicating the electronic data,
search for a public key associated with the recipient, wherein the electronic key comprises, at least in part, the public key, and
encrypt the electronic data with the public key;
receive input indicating that the encrypted electronic data is to be stored in a blockchain; and
store the encrypted electronic data in the blockchain in response to the input; and
a memory configured to store the user identity information, the user account, and the electronic key.
2. The system of claim 1 , wherein the hardware processor is further configured to receive the first item of user information from a user device and the second item of user information from an in-person verification device via the network.
3. The system of claim 1 , wherein the hardware processor is further configured to:
generate a prompt to an in-person verification system for the second item of user identity information, and
receive the second item of user identity information in response to the generated prompt.
4. The system of claim 1 , wherein the hardware processor is further configured to:
receive a visibility input indicating whether the information stored in the blockchain is publicly accessible, and
set access privileges of the blockchain in response to the visibility input.
5. The system of claim 1 , wherein the hardware processor is further configured to selectively publish a public key associated with the user to a publicly accessible directory database.
6. The system of claim 1 , wherein the hardware processor is further configured to:
generate a digital signature for the electronic data, and
invalidate the digital signature based on revoking access to the electronic data.
7. A method implementing a digital trust architecture, the method comprising:
receiving, by a processor, from a network, a request to create an account for a user;
verifying by a processor, the user account for the user based on user identity information, the user identity information comprising a first item of user information received when the user is at a first location and a second item of user information received when the user is at a second location where the second item of user information is verified in-person, wherein the first location is different from the second location;
associating, by a processor, the user account with an electronic key;
identifying, by a processor, electronic data regarding the user, wherein the electronic data is to be communicated electronically with respect to a transaction involving the user;
signing, by a processor, the electronic data based on the electronic key;
conveying, by a processor, the electronic data over the network to a recipient associated with a recipient device;
receiving input identifying the recipient associated with the recipient device and input indicating the electronic data;
searching for a public key associated with the recipient, wherein the electronic key comprises, at least in part, the public key; and
encrypting the electronic data with the public key
receiving input indicating that the encrypted electronic data is to be stored in a blockchain;
storing the encrypted electronic data in the blockchain in response to the input; and
storing, in a memory the user identity information, the user account, and the electronic key.
8. The method of claim 7 , further comprising, receiving the first item of user information from a user device and the second item of user information from an in-person verification device via the network.
9. The method of claim 7 , further comprising:
generating a prompt to an in-person verification system for the second item of user identity information, and
receiving the second item of user identity information in response to the generated prompt.
10. The method of claim 7 , further comprising:
receiving a visibility input indicating whether the information stored in the blockchain is publicly accessible, and
setting access privileges of the blockchain in response to the visibility input.
11. The method of claim 7 , further comprising selectively publishing a public key associated with the user to a publicly accessible directory database.
12. The method of claim 7 , further comprising:
generating a digital signature for the electronic data; and
invalidating the digital signature based on revoking access to the electronic data.