IP Library › Granted Patent US 11,887,121
Granted Patent B2
US 11,887,121 · App. 17/409,530 · Granted Jan 30, 2024

Systems and methods for use in managing digital identities

Inventors: Ranjita Shankar Iyer (Chappaqua, NY); Robert D. Reany (New Canaan, CT); Ashfaq Kamal (Stamford, CT)
Assignee: MASTERCARD INTERNATIONAL INCORPORATED
G06Q20/4014G06Q20/3827G06Q20/401G06Q20/4093H04L9/0891H04L9/321H04L9/3231H04L9/3239H04L9/50
View Patent ↗
Loading inventors, assignments & file history…
Monitor This Case
Get email alerts when status or documents change.
Order Certified Copies
Most orders are placed with the USPTO same day — all within 24 business hours.
Order via The Patent Place →
Pre-filled with this patent's details
Quick Facts
Patent No.
US 11,887,121
App. No.
17/409,530
Granted
Jan 30, 2024
Kind
B2
Abstract

Systems and methods are provided for managing digital identities associated with users. One exemplary method includes receiving, at a computing device, an encrypted message from a communication device associated with a user where the message includes a changed attribute for the user. The method also includes generating a first hash of a first digital identity for the user with the changed attribute and generating a second hash of a second digital identity of the user stored in a ledger data structure. And, in response to the first hash not matching the second hash, the method then includes broadcasting a pending status of the first digital identity to a relying party for the second digital identity, and storing a certification of the changed attribute, received from the relying party in response to the pending status, based on verification of the changed attribute by the relying party.

Claims (46)

1. A computer-implemented method for use in managing a digital identity for a user, the method comprising:

generating and transmitting, by a communication device associated with a user to a computing device, an encrypted message including at least one changed attribute for the user;

receiving, at the computing device, the encrypted message from the communication device associated with the user;

generating a first hash of a first digital identity for the user, the first digital identity including the at least one changed attribute;

generating, by the computing device, a second hash of a second digital identity of the user, the second digital identity included in a ledger data structure and excluding the at least one changed attribute;

determining, by the computing device, that the first and second hashes do not match;

transmitting, by the computing device, a request for the user to attest to the at least one changed attribute in response to the first and second hashes not matching;

displaying, by the communication device, the request for the user to attest to the at least one changed attribute;

capturing, by the communication device, an image of a physical document presented to the communication device, in response to the request;

confirming, by the communication device, the physical document based on the image of the physical document;

transmitting, by the communication device, a confirmation of the changed attribute to the computing device in response to confirming the physical document based on the image of the physical document;

annotating, by the computing device, the first digital identity with a pending status based on the confirmation of the at least one changed attribute;

broadcasting the pending status of the first digital identity to a relying party for the second digital identity;

receiving, by the computing device, from the relying party, a certification for the at least one changed attribute in response to broadcasting the pending status, the certification indicative of the at least one changed attribute being verified by the relying party;

storing the certification of the at least one changed attribute, wherein the stored certification is indicative of verification by the relying party of the at least one changed attribute;

annotating the first digital identity with an approved status based on the certification from the relying party; and

broadcasting the approved status of the first digital identity to the relying party and/or at least one additional relying party associated with the second digital identity.

2. The computer-implemented method of claim 1 , further comprising storing the first digital identity in the ledger data structure, prior to annotating the first digital identity with the pending status.

3. The computer-implemented method of claim 1 , wherein the first digital identity includes data included in the second digital identity and the at least one changed attribute from the communication device in the encrypted message.

4. The computer-implemented method of claim 1 , wherein the relying party includes at least one banking institution; and

wherein the computing device is included in a payment network.

5. A system for use in managing a digital identity for a user, the system comprising:

a computing device comprising:

a memory comprising digital identities for multiple users; and

a processor in communication with the memory, the processor configured to:

receive an encrypted message, the encrypted message including a first digital identity of a user, the first digital identity including at least one changed attribute for the user;

generate a first hash of the first digital identity of the user;

retrieve a second digital identity of the user from the memory and generate a second hash of the second digital identity;

compare the first hash and the second hash;

determine that the first and second hashes do not match;

transmit a request for the user to attest to the at least one changed attribute in response to the first and second hashes not matching;

annotate the first digital identity with a pending approval status based on a received confirmation of the at least one changed attribute;

broadcast the pending approval status of the first digital identity of the user to a relying party associated with the second digital identity in the memory;

receive, from the relying party, a certification for the at least one changed attribute, the certification indicative of the at least one changed attribute being verified by the relying party;

store the certification in the memory in association with the first digital identity, wherein the certification is indicative of adopting the relying party verification of the at least one changed attribute;

annotate the status of the first digital identity stored in the memory with an approved status based on the certification from the relying party; and

broadcast the approved status of the first digital identity of the user to the relying party and/or at least one additional relying party associated with the second digital identity; and

a communication device comprising a second memory, and a second processor in communication with the second memory, the second processor configured to:

generate and transmit the encrypted message to the computing device;

display the request for the user to attest to the at least one changed attribute;

capture an image of a physical document presented to the communication device, in response to the request;

confirm the physical document based on the image of the physical document; and

transmit the confirmation of the changed attribute to the computing device in response to confirming the physical document based on the image of the physical document.

6. The system of claim 5 , wherein the processor is further configured to identify the relying party in the memory as associated with the second digital identity, prior to broadcasting the pending approval status of the first digital identity to the relying party.

7. The system of claim 5 , wherein the processor is configured, in connection with generating the first hash of the first digital identity, to generate said first hash based on the second digital identity retrieved from the memory and the at least one changed attribute included in the encrypted message.

8. The system of claim 5 , further comprising a payment network, the payment network including the processor.

Assignments (1)
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Aug 24, 2021
From: IYER, RANJITA SHANKAR; REANY, ROBERT D.; KAMAL, ASHFAQ
To: MASTERCARD INTERNATIONAL INCORPORATED
Reel/Frame 057265/0079 →
Continuity (2)
Continuation 15891062 · Feb 7, 2018
Related Publication 20210383388A1 · Dec 9, 2021