IP Library Granted Patent US 12,143,503
Granted Patent B2
US 12,143,503 · App. 17/956,706 · Granted Nov 12, 2024

Verifying ownership using decentralized verification

Inventor: David Luna (San Francisco, CA)
Assignee: Ping Identity International, Inc.
H04L9/3247H04L9/30G06K7/1417
View Patent ↗
Loading inventors, assignments & file history…
Monitor This Case
Get email alerts when status or documents change.
Order Certified Copies
Most orders are placed with the USPTO same day — all within 24 business hours.
Order via The Patent Place →
Pre-filled with this patent's details
Quick Facts
Patent No.
US 12,143,503
App. No.
17/956,706
Granted
Nov 12, 2024
Kind
B2
Abstract

Disclosed is technology that verifies, in pairwise manner, proof of ownership-association of decentralized online resources owned by or affiliated with a single entity by visiting a first resource using a first location identifier, ingesting a first scannable image that contains a first plurality of assertions of ownership of online resources by a single entity and extracting a first public key of the first resource. The technology also visits a second resource using a second location identifier, ingests a second scannable image that contains a second plurality of assertions and extracts a second public key of the second resource. Then, the technology verifies, using the first public key, a signature from the first complementary assertion, verifies, using the second public key, a signature from the second complementary assertion, and determines, based on the pair of verifications, whether the first and second resources are owned by a single entity.

Claims (74)

1. A computer-implemented method of verifying, in pairwise manner, proof of ownership-association of decentralized online resources owned by or affiliated with a single entity, the method including:

visiting a first resource using a first location identifier;

ingesting, from the first resource, a first scannable image that contains a first plurality of assertions of ownership of online resources by a single entity, including:

a first self-assertion of ownership of the first resource including a first signed self-location identifier; and

a second complementary assertion of ownership of a second resource including a second signed remote location identifier;

extracting a first public key of the first resource;

visiting the second resource using a second location identifier;

ingesting, from the second resource, a second scannable image that contains a second plurality of assertions, including:

a first complementary assertion of ownership of the first resource including a first signed remote location identifier; and

a second self-assertion of ownership of the second resource including a second signed self-location identifier;

extracting a second public key of the second resource;

verifying, using the first public key, a signature from the first complementary assertion;

verifying, using the second public key, a signature from the second complementary assertion; and

determining, based on the verifying the signature from the first complementary assertion and the verifying the signature from the second complementary assertion, a verification result of whether the first resource and second the resource are owned by a single entity.

2. The method of claim 1 , wherein the first complementary assertion is signed by a first private key, and the second complementary assertion is signed by a second private key.

3. The method of claim 1 , wherein one of the first signed remote location identifier or the second signed remote location identifier comprises a Universal Resource Name (URN).

4. The method of claim 1 , wherein one of the first scannable image or the second scannable image includes a barcode.

5. The method of claim 4 , wherein the barcode includes a QR code.

6. The method of claim 1 , further including:

visiting a third resource using a third location identifier;

ingesting, from the third resource, a third scannable image that contains a third plurality of assertions, including:

a third self-assertion to the third resource; and

a third complimentary assertion to the first resource;

wherein the first scannable image further includes a fourth complimentary assertion to the third resource.

7. The method of claim 6 , wherein a basis of the verification result further includes: pairwise analysis between assertion related to the first resource and the third resource.

8. The method of claim 1 , wherein ingesting the first resource occurs by a camera.

9. The method of claim 1 , wherein ingesting the first resource occurs by a web browser plugin.

10. A non-transitory computer readable storage medium impressed with computer program instructions to verify, in pairwise manner, proof of ownership-association of decentralized online resources owned by or affiliated with a single entity, the instructions, when executed on a processor, implement a method comprising:

visiting a first resource using a first location identifier;

ingesting, from the first resource, a first scannable image that contains a first plurality of assertions of ownership of online resources by a single entity, including:

a first self-assertion of ownership of the first resource including a first signed self-location identifier; and

a second complementary assertion of ownership of a second resource including a second signed remote location identifier;

extracting a first public key of the first resource;

visiting the second resource using a second location identifier;

ingesting, from the second resource, a second scannable image that contains a second plurality of assertions, including:

a first complementary assertion of ownership of the first resource including a first signed remote location identifier; and

a second self-assertion of ownership of the second resource including a second signed self-location identifier;

extracting a second public key of the second resource;

verifying, using the first public key, a signature from the first complementary assertion;

verifying, using the second public key, a signature from the second complementary assertion; and

determining, based on the verifying the signature from the first complementary assertion and the verifying the signature from the second complementary assertion, a verification result of whether the first resource and the second resource are owned by a single entity.

11. The non-transitory computer readable storage medium of claim 10 , wherein the first complementary assertion is signed by a first private key, and the second complementary assertion is signed by a second private key.

12. The non-transitory computer readable storage medium of claim 10 , wherein one of the first signed remote location identifier or the second signed remote location identifier comprises a Universal Resource Name (URN).

13. The non-transitory computer readable storage medium of claim 10 , wherein one of the first scannable image or the second scannable image includes a barcode.

14. The non-transitory computer readable storage medium of claim 13 , wherein the barcode includes a QR code.

15. The non-transitory computer readable storage medium of claim 10 , implementing the method further comprising:

visiting a third resource using a third location identifier;

ingesting, from the third resource, a third scannable image that contains a third plurality of assertions, including:

a third self-assertion to the third resource; and

a third complimentary assertion to the first resource;

wherein the first scannable image further includes a fourth complimentary assertion to the third resource.

16. The non-transitory computer readable storage medium of claim 15 , wherein a basis of the verification result further comprises: pairwise analysis between assertions related to the first resource and the third resource.

17. The non-transitory computer readable storage medium of claim 10 , wherein ingesting the first resource occurs by a camera.

18. The non-transitory computer readable storage medium of claim 10 , wherein ingesting the first resource occurs by a web browser plugin.

19. A system including one or more processors and a memory, the memory loaded with computer instructions to verify, in pairwise manner, proof of ownership-association of decentralized online resources owned by or affiliated with a single entity, the instructions, when executed on the one or more processors, implement actions comprising:

visiting a first resource using a first location identifier;

ingesting, from the first resource, a first scannable image that contains a first plurality of assertions of ownership of online resources by a single entity, including:

a first self-assertion of ownership of the first resource including a first signed self-location identifier; and

a second complementary assertion of ownership of a second resource including a second signed remote location identifier;

extracting a first public key of the first resource;

visiting the second resource using a second location identifier;

ingesting, from the second resource, a second scannable image that contains a second plurality of assertions, including:

a first complementary assertion of ownership of the first resource including a first signed remote location identifier; and

a second self-assertion of ownership of the second resource including a second signed self-location identifier;

extracting a second public key of the second resource;

verifying, using the first public key, a signature from the first complementary assertion;

verifying, using the second public key, a signature from the second complementary assertion; and

determining, based on the verifying the signature from the first complementary assertion and the verifying the signature from the second complementary assertion, a verification result of whether the first resource and the second resource are owned by a single entity.

20. The system of claim 19 , further implementing actions comprising:

visiting a third resource using a third location identifier;

ingesting, from the third resource, a third scannable image that contains a third plurality of assertions, including:

a third self-assertion to the third resource; and

a third complimentary assertion to the first resource;

wherein the first scannable image further includes a fourth complimentary assertion to the third resource.

Assignments (3)
SECURITY INTEREST Recorded Nov 13, 2025
From: PING IDENTITY CORPORATION; PING IDENTITY INTERNATIONAL, INC.
To: JPMORGAN CHASE BANK, N.A.
Reel/Frame 073557/0093 →
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Feb 6, 2024
From: FORGEROCK, INC.
To: PING IDENTITY INTERNATIONAL, INC.
Reel/Frame 066358/0483 →
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Oct 10, 2022
From: LUNA, DAVID
To: FORGEROCK, INC.
Reel/Frame 061363/0615 →
Continuity (1)
Related Publication 20240113889A1 · Apr 4, 2024
Cited By (1)
US 12,452,058