Granted Patent B2

US 12,401,509 · App. 17/793,901 · Granted Aug 26, 2025

Inventor: Kim Cameron (Toronto, CA)

Assignee: Microsoft Technology Licensing, LLC

H04L9/3073H04L9/0825H04L9/3236H04L9/50

Abstract

Claims (72)

1. A computing system for issuing and managing verifiable claims, comprising:

one or more processors; and

one or more computer-readable media having thereon computer-executable instructions that are executable by the one or more processors to cause the computing system to:

receive a first request for issuing a first pairwise verifiable claim that is associated with a subject entity and that is verifiable by a first verifying entity, the first request including at least an encrypted portion using a particular type of cryptography;

based on receiving the first request:

verify that the subject entity is a subject of the first pairwise verifiable claim based on decrypting the encrypted portion using the particular type of cryptography; and

in response to verifying that the subject entity is the subject of the first pairwise verifiable claim, issue the first pairwise verifiable claim to the first verifying entity, including encrypting the first pairwise verifiable claim using a first cryptographic public key uniquely associated with the first verifying entity, allowing decryption solely by a first private key of the first verifying entity;

receive a second request for issuing a second pairwise verifiable claim associated with the subject entity, and that is verifiable by a second verifying entity, the second request including at least an encrypted portion using a particular type of cryptography; and

based on receiving the second request:

verify the subject entity as the subject of the second pairwise verifiable claim based on decrypting the encrypted portion using the particular type of cryptography; and

in response to verifying that the subject entity is the subject of the second pairwise verifiable claim, issue the second pairwise verifiable claim to the second verifying entity, including encrypting the second pairwise verifiable claim using a second cryptographic public key uniquely associated with the second verifying entity, allowing decryption solely by a second private key of the second verifying entity,

wherein the first pairwise verifiable claim and the second pairwise verifiable claim are issued to their respective verifying entities using a same decentralized identifier (DID) of the subject entity.

2. The computing system of claim 1 , wherein the computer-executable instructions are also executable by the one or more processors to cause the computing system to:

impose a condition for accessing a verifiable claim; and

when a requesting entity requests for accessing the verifiable claim, determine whether the condition is met.

3. The computing system of claim 2 , wherein the computer-executable instructions are also executable by the one or more processors to cause the computing system to:

in response to a determination that the condition is met, send the verifiable claim to the subject entity; and

cause the subject entity to pass on the verifiable claim to the requesting entity.

4. The computing system of claim 2 , wherein the computer-executable instructions are also executable by the one or more processors to cause the computing system to:

in response to a determination that the condition is met, send the verifiable claim to the requesting entity directly.

5. The computing system of claim 2 , wherein:

the condition includes verifying that an identity of the requesting entity is one of one or more predetermined verifying entities.

6. The computing system of claim 5 , wherein:

at least one verifying entity is associated with a decentralized identifier (DID), and

verifying the identity of the requesting entity includes verifying that the requesting entity is a holder of the DID.

7. The computing system of claim 2 , wherein the condition comprises receiving an amount of anonymous digital asset.

8. The computing system of claim 2 , wherein the condition comprises a predetermined number of times that the verifiable claim is allowed to be accessed and/or an expiration time for allowing the verifiable claim to be accessed.

9. The computing system of claim 2 , wherein the computer-executable instructions are also executable by the one or more processors to cause the computing system to encrypt the verifiable claim by one or more keys to create an encrypted verifiable claim.

10. The computing system of claim 9 , wherein the one or more keys includes a public key of a verifying entity, so that the encrypted verifiable claim can only be decrypted by a private key of the verifying sentity.

11. The computing system of claim 9 , wherein the computer-executable instructions are also executable by the one or more processors to cause the computing system to:

the encrypted verifiable claim to the subject entity; and

cause the subject entity to pass on the verifiable claim to a verifying entity.

12. The computing system of claim 9 , wherein the computer-executable instructions are also executable by the one or more processors to cause the computing system to:

receive a request for accessing the encrypted verifiable claim from a requesting entity;

determine whether the condition is met; and

in response to a determination that the condition is met, cause the requesting entity to receive the one or more keys.

13. The computing system of claim 1 , wherein the computer-executable instructions are also executable by the one or more processors to cause the computing system to:

impose a second condition for issuing the verifiable claim; and

when a request for issuing the verifiable claim is received, determine whether the second condition is met.

14. In a computing system that includes one or more processors, a method comprising:

receiving a first request for issuing a first pairwise verifiable claim that is associated with a subject entity and that is verifiable by a first verifying sentity, the first request including at least an encrypted portion using a particular type of cryptography;

based on receiving the first request:

verifying that the subject entity is a subject of the first pairwise verifiable claim based on decrypting the encrypted portion using the particular type of cryptography; and

in response to verifying that the subject entity is the subject of the first pairwise verifiable claim, issuing the first pairwise verifiable claim to the first verifying entity, including encrypting the first pairwise verifiable claim using a first cryptographic public key uniquely associated with the first verifying entity, allowing decryption solely by a first private key of the first verifying entity;

receive a second request for issuing a second pairwise verifiable claim associated with the subject entity, and that is verifiable by a second verifying entity, the second request including at least an encrypted portion using a particular type of cryptography; and

based on receiving the second request:

verify the subject entity as the subject of the second pairwise verifiable claim based on decrypting the encrypted portion using the particular type of cryptography; and

in response to verifying that the subject entity is the subject of the second pairwise verifiable claim, issue the second pairwise verifiable claim to the second verifying entity, including encrypting the second pairwise verifiable claim using a second cryptographic public key uniquely associated with the second verifying entity, allowing decryption solely by a second private key of the second verifying entity,

wherein the first pairwise verifiable claim and the second pairwise verifiable claim are issued to their respective verifying entities using a same decentralized identifier (DID) of the subject entity.

15. The method of claim 14 , further comprising:

imposing a condition for accessing a verifiable claim; and

when a requesting entity requests for accessing the verifiable claim, determining whether the condition is met.

16. The method of claim 15 , further comprising:

in response to a determination that the condition is met, sending the verifiable claim to the subject entity; and

causing the subject entity to pass on the verifiable claim to the requesting entity.

17. The method of claim 15 , further comprising:

in response to a determination that the condition is met, sending the verifiable claim to the requesting entity directly.

18. The method of claim 15 , wherein:

the condition includes verifying that an identity of the requesting entity is one of one or more predetermined verifying entities.

19. The method of claim 18 , wherein:

at least one verifying entity is associated with a decentralized identifier (DID), and

verifying the identity of the requesting entity includes verifying that the requesting entity is a holder of the DID.

20. A computer-readable physical storage medium having stored thereon computer-executable instructions that are structured such that, when executed by one or more processors, the computer-executable instructions cause a computing system to at least:

receive a first request for issuing a first pairwise verifiable claim that is associated with a subject entity and that is verifiable by a first verifying entity, the first request including at least an encrypted portion using a particular type of cryptography;

based on receiving the first request:

verify that the subject entity is a subject of the first pairwise verifiable claim based on decrypting the encrypted portion using the particular type of cryptography; and

in response to verifying that the subject entity is the subject of the first pairwise verifiable claim, issue the first pairwise verifiable claim to the first verifying entity, including encrypting the first pairwise verifiable claim using a first cryptographic public key uniquely associated with the first verifying entity, allowing decryption solely by a first private key of the first verifying entity;

receive a second request for issuing a second pairwise verifiable claim associated with the subject entity, and that is verifiable by a second verifying entity, the second request including at least an encrypted portion using a particular type of cryptography; and

based on receiving the second request:

verify the subject entity as the subject of the second pairwise verifiable claim based on decrypting the encrypted portion using the particular type of cryptography; and

in response to verifying that the subject entity is the subject of the second pairwise verifiable claim, issue the second pairwise verifiable claim to the second verifying entity, including encrypting the second pairwise verifiable claim using a second cryptographic public key uniquely associated with the second verifying entity, allowing decryption solely by a second private key of the second verifying entity,

wherein the first pairwise verifiable claim and the second pairwise verifiable claim are issued to their respective verifying entities using a same decentralized identifier (DID) of the subject entity.

Assignments (1)

Priority Claims (1)

Continuity (1)

References Cited (29)