IP Library Granted Patent US 11,799,668
Granted Patent B2
US 11,799,668 · App. 17/732,746 · Granted Oct 24, 2023

Electronic identification verification methods and systems with storage of certification records to a side chain

Inventors: Armin Ebrahimi (Los Gatos, CA); Gaurav Khot (Cupertino, CA); Vladimir Reshetnikov (San Jose, CA); Robert Gadbois (Los Gatos, CA)
Assignee: Ping Identity Corporation
H04L9/3263G06K7/1417G06Q20/065G06Q20/3827G06Q20/38215H04L9/0643H04L9/3236H04L9/3247H04L9/3297G06F7/588G06Q2220/00H04L9/50
View Patent ↗
Loading inventors, assignments & file history…
Monitor This Case
Get email alerts when status or documents change.
Order Certified Copies
Most orders are placed with the USPTO same day — all within 24 business hours.
Order via The Patent Place →
Pre-filled with this patent's details
Quick Facts
Patent No.
US 11,799,668
App. No.
17/732,746
Granted
Oct 24, 2023
Kind
B2
Abstract

Method of certification including receiving user data at a device of a certifying entity. The method includes generating a salt that is unique. The method includes hashing the data combined with the salt to create a generated hashed data. The method includes generating a certification record based on signing the generated hashed data using a private key of the certifying entity to create a signed certification of the data. The method includes hashing the certification record. The method includes transmitting the hashed certification record to a blockchain for storing. The method includes receiving a certification tx-ID of the hashed certification record. The method includes generating a certification data block including the certification record and the certification tx-ID. The method includes storing the certification data block to a side chain.

Claims (52)

1. A method, comprising:

receiving data of a user at a certifying device;

hashing the data to define generated hashed data;

signing the generated hashed data using a private key associated with the certifying device to define a signed certification;

generating a certification record including the signed certification;

hashing the certification record to define a hashed certification record;

sending the hashed certification record to a first distributed database such that the first distributed database stores the hashed certification record;

receiving, from the first distributed database, a transaction identifier associated with the hashed certification record;

defining a certification data block including the certification record and the transaction identifier; and

sending the certification data block to a second distributed database different than the first distributed database such that the second distributed database stores the certification data block.

2. The method of claim 1 , wherein the hashing the data includes hashing the data combined with a salt to define the generated hashed data.

3. The method of claim 1 , wherein the second distributed database is a side chain.

4. The method of claim 1 , further comprising:

receiving, from the second distributed database, a certification data block identifier that references the certification data block at the second distributed database.

5. The method of claim 1 , wherein the data is first data and the signed certification is a first signed certification, the certification record including a second signed certification, the second signed certification including a hash of second data.

6. The method of claim 1 , wherein the data is biometric data of the user.

7. The method of claim 1 , wherein the first distributed database is a blockchain.

8. A non-transitory processor-readable medium storing code representing instructions to be executed by a processor, the instructions comprising code to cause the processor to:

receive data of a user at a certifying device;

generate a salt;

hash the data combined with the salt to define generated hashed data;

send the generated hashed data to a first distributed database such that the first distributed database stores the generated hashed data;

receive, from the first distributed database, a transaction identifier associated with the generated hashed data;

define a certification data block including the generated hashed data and the transaction identifier; and

send the certification data block to a second distributed database different than the first distributed database such that the second distributed database stores the certification data block.

9. The non-transitory processor-readable medium of claim 8 , wherein the data is biometric data of the user.

10. The non-transitory processor-readable medium of claim 8 , further comprising code to cause the processor to:

sign the generated hashed data using a private key associated with the certifying device prior to sending the generated hashed data to the first distributed database.

11. The non-transitory processor-readable medium of claim 8 , wherein the first distributed database is a blockchain.

12. The non-transitory processor-readable medium of claim 8 , further comprising code to cause the processor to:

receive, from the second distributed database, a certification data block identifier that references the certification data block at the second distributed database.

13. The non-transitory processor-readable medium of claim 8 , wherein the generated hashed data is first generated hashed data, the code further comprising code to cause the processor to:

generate a certification record including the first generated hashed data and second generated hashed data; and

hash the certification record to define a hashed certification record, the code to cause the processor to send the generated hashed data to the first distributed database includes code to cause the processor to send the hashed certification record to the first distributed database.

14. The non-transitory processor-readable medium of claim 8 , wherein the data is associated with an identification of the user.

15. An apparatus, comprising:

a memory; and

a processor operatively coupled to the memory, the processor configured to:

receive data of a user at a certifying device, the data having a plurality of portions;

hash each portion from the plurality of portions to define a plurality of hash values;

generate a certification record including the plurality of hash values;

hash the certification record to define a hashed certification record;

send the hashed certification record to a first distributed database such that the first distributed database stores the hashed certification record;

receive, from the first distributed database, a transaction identifier associated with the hashed certification record;

define a certification data block including the certification record and the transaction identifier; and

send the certification data block to a second distributed database different than the first distributed database such that the second distributed database stores the certification data block.

16. The apparatus of claim 15 , wherein the processor is configured to generate a plurality of salts, the processor configured to hash each portion from the plurality of portions by hashing each portion with an associated salt from the plurality of salts to define the plurality of hash values.

17. The apparatus of claim 15 , wherein the data is biometric data of the user.

18. The apparatus of claim 15 , wherein the processor is configured to:

sign each hash value from the plurality of hash values using a private key associated with the certifying device prior to including the plurality of hash values in the certification record.

19. The apparatus of claim 15 , wherein the second distributed database is a side chain.

20. The apparatus of claim 15 , wherein the processor is configured to receive, from the second distributed database, a certification data block identifier that references the certification data block at the second distributed database.

Assignments (7)
RELEASE OF SECURITY INTEREST AT R/F 61703/0988 Recorded Nov 14, 2025
From: BLUE OWL CAPITAL CORPORATION
To: PING IDENTITY CORPORATION
Reel/Frame 073570/0777 →
SECURITY INTEREST Recorded Nov 13, 2025
From: PING IDENTITY CORPORATION; PING IDENTITY INTERNATIONAL, INC.
To: JPMORGAN CHASE BANK, N.A.
Reel/Frame 073557/0093 →
GRANT OF SECURITY INTEREST IN PATENT RIGHTS Recorded Oct 18, 2022
From: PING IDENTITY CORPORATION
To: OWL ROCK CAPITAL CORPORATION, AS COLLATERAL AGENT
Reel/Frame 061703/0988 →
CHANGE OF NAME Recorded May 5, 2022
From: SHOCARD, INC.
To: SHOCARD, LLC
Reel/Frame 059858/0024 →
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded May 5, 2022
From: EBRAHIMI, ARMIN; KHOT, GAURAV
To: SHOCARD, INC.
Reel/Frame 059826/0147 →
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded May 5, 2022
From: EBRAHIMI, ARMIN; KHOT, GAURAV; RESHETNIKOV, VLADIMIR; GADBOIS, ROBERT
To: SHOCARD, INC.
Reel/Frame 059826/0060 →
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded May 5, 2022
From: SHOCARD, LLC
To: PING IDENTITY CORPORATION
Reel/Frame 059831/0332 →
Continuity (6)
Continuation 16697131 · Nov 26, 2019
Continuation 15893479 · Feb 9, 2018
Continuation In Part 15890333 · Feb 6, 2018
Provisional Application 62596434 · Dec 8, 2017
Provisional Application 62455199 · Feb 6, 2017
Related Publication 20220407720A1 · Dec 22, 2022
Cited By (1)
US 12,518,278