Secure disclosure of data attestations
This disclosure describes techniques for client-controlled and secure disclosure of attestations of identifying information of subjects. For example, a method includes obtaining, by a computing system, identifying information associated with a subject. The method also includes generating, by the computing system and based on the identifying information associated with the subject, a decentralized identifier (DID) associated with the subject and one or more attested claims of the identifying information associated with the subject. The method further includes receiving, by the computing system and from the subject, a request to send the identifying information to one or more relying parties, and in response, recording, by the computing system, the DID in a verifiable data registry, and sending, by the computing system, the one or more attested claims to the one or more relying parties.
1 . A method comprising:
obtaining, by a computing system, financial information and personal information associated with a subject;
generating, by the computing system and based on the financial information and the personal information associated with the subject, a decentralized identifier (DID) associated with the subject and one or more attested claims of the financial information and one or more attested claims of the personal information associated with the subject;
receiving, by the computing system and from the subject, a request indicating at least a selected portion of the financial information and the personal information associated with the subject to send to one or more relying parties; and
in response to receiving the request:
recording, by the computing system, the DID in a verifiable data registry; and
sending, by the computing system and based on the selected portion of the financial information and the personal information associated with the subject indicated in the request, at least a portion of the one or more attested claims of the financial information and the one or more attested claims of the personal information associated with the subject to the one or more relying parties.
2 . The method of claim 1 , wherein the one or more attested claims of the financial information and the one or more attested claims of the personal information are included in a verifiable credential that includes the DID associated with the subject.
3 . The method of claim 2 , wherein the verifiable credential includes a cryptographic proof of ownership of the DID.
4 . The method of claim 1 , further comprising:
prior to obtaining the financial information and the personal information associated with the subject, receiving, by the computing system, registration information associated with the subject; and
authenticating, by the computing system and based on the registration information associated with the subject, the subject to have access to the computing system.
5 . The method of claim 1 , wherein obtaining the personal information associated with the subject comprises:
receiving, from the subject, the personal information associated with the subject.
6 . The method of claim 1 , wherein obtaining the personal information associated with the subject comprises:
receiving, from a system of record, the personal information associated with the subject.
7 . The method of claim 1 , further comprising:
prior to generating the DID associated with the subject and one or more attested claims of the financial information and the one or more attested claims of the personal information associated with the subject, verifying, by the computing system, the personal information associated with the subject.
8 . The method of claim 1 , wherein the request comprises an indication of a particular relying party of the one or more relying parties to which to send at least the selected portion of the financial information and the personal information associated with the subject.
9 . The method of claim 1 , wherein the request comprises an indication of a particular portion of the financial information and a particular portion of the personal information associated with the subject that is to be sent to the one or more relying parties.
10 . The method of claim 1 , wherein sending at least the portion of the one or more attested claims of the financial information and the one or more attested claims of the personal information associated with the subject to the one or more relying parties comprises sending a quick response (QR) code associated with the portion of the one or more attested claims of the financial information and the one or more attested claims of the personal information.
11 . A computing system comprising:
a memory; and
processing circuitry in communication with the memory, the processing circuitry being configured to:
obtain financial information and personal information associated with a subject;
generate, based on the financial information and the personal information associated with the subject, a decentralized identifier (DID) associated with the subject and one or more attested claims of the financial information and one or more attested claims of the personal information associated with the subject;
receive, from the subject, a request indicating at least a selected portion of the financial information and the personal information associated with the subject to send to one or more relying parties; and
in response to receiving the request:
record the DID in a verifiable data registry; and
send, based on the selected portion of the financial information and the personal information associated with the subject indicated in the request, at least a portion of the one or more attested claims of the financial information and the one or more attested claims of the personal information to the one or more relying parties.
12 . The computing system of claim 11 , wherein the one or more attested claims of the financial information and the one or more attested claims of the personal information are included in a verifiable credential that includes the DID associated with the subject.
13 . The computing system of claim 11 , wherein the processing circuitry is further configured to:
prior to obtaining the financial information and the personal information associated with the subject, receive registration information associated with the subject; and
authenticate, based on the registration information associated with the subject, the subject to have access to the computing system.
14 . The computing system of claim 11 , wherein to obtain the financial information and the personal information associated with the subject, the processing circuitry is further configured to:
receive, from the subject, the personal information associated with the subject.
15 . The computing system of claim 11 , wherein to obtain the financial information and the personal information associated with the subject, the processing circuitry is further configured to:
receive, from a system of record, the personal information associated with the subject.
16 . The computing system of claim 11 , wherein the processing circuitry is further configured to:
prior to generating the DID associated with the subject and one or more attested claims of the financial information and the one or more attested claims of the personal information associated with the subject, verify the personal information associated with the subject.
17 . The computing system of claim 11 , wherein the request comprises an indication of a particular relying party of the one or more relying parties to which to send at least the selected portion of the financial information and the personal information associated with the subject.
18 . The computing system of claim 11 , wherein the request comprises an indication of a particular portion of the financial information and a particular portion of the personal information associated with the subject that is to be sent to the one or more relying parties.
19 . The computing system of claim 11 , wherein to send the portion of the one or more attested claims of the financial information and the one or more attested claims of the personal information to the one or more relying parties, the processing circuitry is further configured to send a quick response (QR) code associated with the portion of the one or more attested claims of the financial information and the one or more attested claims of the personal information associated with the subject.
20 . Non-transitory computer-readable media encoded with instructions that, when executed by processing circuitry, cause the processing circuitry to:
obtain financial information and personal information associated with a subject;
generate, based on the financial information and the personal information associated with the subject, a decentralized identifier (DID) associated with the subject and one or more attested claims of the financial information and one or more attested claims of the personal information associated with the subject;
receive, from the subject, a request indicating at least a selected portion of the financial information and the personal information associated with the subject to send to one or more relying parties; and
in response to receiving the request to:
record the DID in a verifiable data registry; and
send, based on the selected portion of the financial information and the personal information indicated in the request, at least a portion of the one or more attested claims of the financial information and the one or more attested claims of the personal information to the one or more relying parties.