Granted Patent B2

US 12,518,278 · App. 18/068,083 · Granted Jan 6, 2026

Inventor: Armin Ebrahimi (Los Gatos, CA)

Assignee: Ping Identity Corporation

G06Q20/4014G06F21/31G06F21/32G06F21/33G06F21/34G06F21/64G06F21/645G06K19/06028G06K19/06037G06Q20/02G06Q20/3276G06Q20/3825G06Q20/3827H04L9/0637H04L9/0643H04L9/14H04L9/30H04L9/302H04L9/3066H04L9/3231H04L9/3236H04L9/3239H04L9/3247H04L9/3249H04L9/3252H04L9/3268H04L63/0861H04W12/04H04W12/06G06Q2220/00H04L9/50H04W12/77

Abstract

Claims (52)

1 . An apparatus, comprising:

a memory; and

a processor operatively coupled to a public storage facility and the memory, the processor configured to:

receive, from a compute device, identity data associated with a user;

hash the identity data using a hashing algorithm to obtain a first hash value;

receive a first transaction identifier, the first transaction identifier associated with a second hash value in the public storage facility;

obtain, using the first transaction identifier, the second hash value from the public storage facility;

validate an identity of the user in response to verifying that the first hash value corresponds with the second hash value;

define a certification record based on the validating;

store the certification record in the public storage facility; and

provide, to the compute device, a second transaction identifier, the second transaction identifier associated with the certification record in the public storage facility such that the compute device can provide the second transaction identifier to a verifier.

2 . The apparatus of claim 1 , wherein the processor is configured to receive the identity data from the compute device as encrypted identity data, the processor configured to decrypt the encrypted identity data using a private key associated with the processor to obtain the identity data prior to hashing the identity data.

3 . The apparatus of claim 1 , wherein the processor is configured to digitally sign the certification record using a private key associated with the processor prior to storing the certification record in the public storage facility.

4 . The apparatus of claim 1 , wherein the public storage facility is a blockchain.

5 . The apparatus of claim 1 , wherein the identity data is from at least one of a driver license, a passport, an employee badge, a military identification, a political identification, a student identification, a library card or a social club card.

6 . The apparatus of claim 1 , wherein the processor is configured to:

obtain, using the second transaction identifier, the certification record from the public storage facility; and

validate, based on the certification record, that the identity of the user has been certified.

7 . A method, comprising:

receiving, from a compute device, identity data associated with a user;

hashing the identity data using a hashing algorithm to obtain a first hash value;

obtaining a second hash value from a public storage facility;

validating an identity of the user in response to verifying that (1) the first hash value corresponds with the second hash value and (2) the second hash value is signed with a private key associated with the compute device;

defining a certification record based on the validating; and

providing, to the compute device, a transaction identifier, the transaction identifier associated with the certification record in the public storage facility such that the compute device can provide the transaction identifier to a verifier.

8 . The method of claim 7 , wherein the transaction identifier is a first transaction identifier, the method further comprising:

receiving a second transaction identifier, the second transaction identifier associated with the second hash value in the public storage facility, the obtaining the second hash value including obtaining the second hash value using the second transaction identifier.

9 . The method of claim 7 , wherein the receiving includes receiving the identity data as encrypted identity data, the method further comprising:

decrypting the encrypted identity data to obtain the identity data.

10 . The method of claim 7 , wherein the public storage facility is a blockchain.

11 . The method of claim 7 , wherein the identity data is from at least one of a driver license, a passport, an employee badge, a military identification, a political identification, a student identification, a library card or a social club card.

12 . The method of claim 7 , further comprising:

digitally signing the certification record using a private key prior to storing the certification record in the public storage facility.

13 . The method of claim 7 , further comprising:

obtaining, using the transaction identifier, the certification record from the public storage facility; and

validating, based on the certification record, that the identity of the user has been certified.

14 . A non-transitory processor-readable medium storing code representing instructions to be executed by a processor, the code comprising code to cause the processor to:

receive, from a compute device, encrypted identity data associated with a user;

decrypt the encrypted identity data using a private key associated with the processor to obtain identity data;

hash the identity data using a hashing algorithm to obtain a first hash value;

obtain a second hash value from a public storage facility;

validate an identity of the user in response to verifying that the first hash value corresponds with the second hash value;

define a certification record based on the validating; and

provide, to the compute device, a transaction identifier, the transaction identifier associated with the certification record in the public storage facility such that the compute device can provide the transaction identifier to a verifier.

15 . The non-transitory processor-readable medium of claim 14 , wherein the code to cause the processor to validate includes code to cause the processor to validate the identity of the user in response to (1) verifying that the first hash value corresponds with the second hash value and (2) verifying that the second hash value is signed with a private key associated with the compute device.

16 . The non-transitory processor-readable medium of claim 14 , wherein the public storage facility is a blockchain.

17 . The non-transitory processor-readable medium of claim 14 , wherein the identity data is from at least one of a driver license, a passport, an employee badge, a military identification, a political identification, a student identification, a library card or a social club card.

18 . The non-transitory processor-readable medium of claim 14 , further comprising code to cause the processor to:

digitally sign the certification record using a private key associated with the processor prior to storing the certification record in the public storage facility.

19 . The non-transitory processor-readable medium of claim 14 , wherein the encrypted identity data is encrypted using at least one of Rivest-Shamir-Adleman (RSA) encryption algorithm or Elliptic Curve Digital Signature Algorithm (ECDSA).

20 . The non-transitory processor-readable medium of claim 14 , wherein the transaction identifier is a first transaction identifier, the code further comprising code to cause the processor to:

receive a second transaction identifier, the second transaction identifier associated with the second hash value in the public storage facility, the code to cause the processor to obtain includes code to cause the processor to obtain the second hash value using the second transaction identifier.

Assignments (5)

Continuity (8)

References Cited (387)