Block chain proof for identification
Implementations efficiently verify an identity claim for an entity. An example method includes receiving a query key and a property identifying an entity and identifying a possible match for the property from graph access records, the possible match being a node in an identity chain. The method also includes verifying a complete chain from the possible match to a genesis node in the chain. The query key is used to find a next node in the chain. Failure to identify the genesis node results in an unsuccessful verification. The method also includes generating a response that indicates a successful verification request responsive to locating the genesis node and generating a response that indicates an unsuccessful verification request otherwise.
1. A method comprising:
receiving an identity factor for an entity and genesis data that includes data capturing a unique physical property of the entity;
receiving a signature key from a keeper of the entity, the keeper having provided the identity factor;
generating an identity chain for the entity, the identity chain having nodes that include a genesis node having content that includes the genesis data and includes a second node having content that includes the identity factor, wherein the signature key is used to compute hash results used to link the nodes in the identity chain; and
storing a graph access record for accessing the identity chain, the graph access record including a key property used to locate the identity chain in response to a verification request for the entity and including a hash result of the hash results used to initiate traversal of the identity chain.
2. The method of claim 1 , wherein using the signature key to compute the hash results comprises:
generating a first hash result using the content of a node in the identity chain and the signature key as input, and
storing the first hash result in the content of a next node of the identity chain.
3. The method of claim 1 , wherein using the signature key to compute the hash results comprises:
generating a first hash result using content for a node of the identity chain as input;
encrypting the content of the node using the signature key and storing the node; and
including the first hash result in content of a next node of the identity chain.
4. The method of claim 1 , wherein the graph access record is a node in the identity chain.
5. The method of claim 1 , wherein the graph access record is an entry in a table.
6. The method of claim 1 , wherein the method further includes:
receiving a verification request that includes the key property for the entity and a query key;
locating the identity chain using the key property;
using the query key and the hash result included in the graph access record to attempt to traverse the identity chain to the genesis node;
sending an indication of an unsuccessful request responsive to in response to failure to traverse the identity chain to the genesis node using the query key; and
sending an indication of a successful request responsive to in response to failure to traverse the identity chain to the genesis node using the query key.
7. The method of claim 6 , further comprising, responsive to failure to traverse the identity chain to the genesis node using the query key:
adding a node in the identity chain using the query key to link the added node to the identity chain.
8. The method of claim 6 , wherein the graph access record is a first graph access record and the method further comprises, responsive to in response to failure to traverse the identity chain to the genesis node using the query key:
receiving a second key property that differs from the key property in the first graph access record; and
storing a second graph access record, the second graph access record including the hash result from the first graph access record and the second key property.
9. The method of claim 1 , wherein the genesis data includes image data for the entity.
10. The method of claim 1 , wherein the genesis data includes biometric data for the entity.
11. The method of claim 1 , wherein the genesis data includes data from a specific memory location of a device.
12. The method of claim 1 , wherein the genesis data includes a location for the entity.
13. A system comprising:
at least one processor;
memory storing graph access records and identity chains; and
memory storing instructions that, when executed by the at least one processor, cause the system to perform operations including:
receiving an identity factor for an entity and genesis data that includes data capturing a unique physical property of the entity;
receiving a signature key from a keeper of the entity, the keeper having provided the identity factor;
generating an identity chain for the entity, the identity chain having nodes that include a genesis node having content that includes the genesis data and includes a second node having content that includes the identity factor, wherein the signature key is used to compute hash results used to link the nodes in the identity chain;
storing the identity chain in the memory storing identity chains; and
storing a graph access record for accessing the identity chain in the memory storing graph access records, the graph access record including a key property used to locate the identity chain in response to a verification request for the entity and including a hash result of the hash results used to initiate traversal of the identity chain.
14. The system of claim 13 , wherein using the signature key to compute the hash results comprises:
generating a first hash result using the content of a node in the identity chain and the signature key as input, and
storing the first hash result in the content of a next node of the identity chain.
15. The system of claim 13 , wherein using the signature key to compute the hash results comprises:
generating a first hash result using content for a node of the identity chain as input;
encrypting the content of the node using the signature key and storing the node; and
including the first hash result in content of a next node of the identity chain.
16. The system of claim 13 , wherein the operations further include:
using the identity chain and the graph access record to respond to a verification request for the entity.
17. The system of claim 16 , wherein using the identity chain and the graph access record to respond to the verification request includes:
receiving the verification request, which includes the key property for the entity and a query key;
locating the identity chain using the key property;
using the query key and the hash result included in the graph access record to attempt to traverse the identity chain to the genesis node;
sending an indication of an unsuccessful request responsive to in response to failure to traverse the identity chain to the genesis node using the query key; and
sending an indication of a successful request responsive to in response to failure to traverse the identity chain to the genesis node using the query key.
18. The system of claim 17 , wherein the operations further include, responsive to failure to traverse the identity chain to the genesis node using the query key:
adding a node in the identity chain using the query key to link the added node to the identity chain.
19. The system of claim 17 , wherein the graph access record is a first graph access record and the operations further include, responsive to in response to failure to traverse the identity chain to the genesis node using the query key:
receiving a second key property that differs from the key property in the first graph access record; and
storing a second graph access record, the second graph access record including the hash result from the first graph access record and the second key property.
20. The system of claim 13 , wherein the genesis data includes image data for the entity or biometric data for the entity.
21. The system of claim 13 , wherein the genesis data includes data from a specific memory location of a device.
22. The system of claim 13 , wherein the genesis data includes a location for the entity.