Techniques for generating and using nonlinkable digital credentials
A computing device can generate a set of transaction keys, the computing device configured to present a digital credential to a requesting device. The computing device can generate a request bundle. The request bundle can include the set of transaction keys. The computing device can transmit, to a first server, the request bundle. The first server can be configured to verify the request bundle. The first server can be configured to send the request bundle to a second server with a request for a set of credentials. Each credential of the set of credentials can correspond to a transaction key of the set of transaction keys. Each credential can include data elements and a security object. The data elements for each credential can be the same. The security object for each credential can be different. The computing device can receive, from the first server, the set of credentials. The computing device can store the set of credentials. The computing device can be configured to generate a response based on a particular credential of the set of credentials when a requesting device requests the digital credential.
1. A method comprising:
generating, on a computing device, a set of transaction keys, the computing device configured to present a digital credential to a requesting device;
generating, on the computing device, a request bundle, the request bundle including the set of transaction keys;
transmitting, by the computing device to a first server, the request bundle, wherein the first server is configured to verify the request bundle, wherein the first server is configured to send the request bundle to a second server with a request for a set of credentials, wherein each credential of the set of credentials corresponds to a transaction key of the set of transaction keys, wherein each credential includes data elements and a security object, wherein the data elements for each credential are the same, wherein the security object for each credential is different;
receiving, by the computing device from the first server, the set of credentials; and
storing, by the computing device, the set of credentials, wherein the computing device is configured to generate a response based on a particular credential of the set of credentials when a requesting device requests the digital credential.
2. The method of claim 1 , further comprising signing, on the computing device, each transaction key of the set of transaction keys.
3. The method of claim 1 , further comprising determining, on the computing device, to generate the set of credentials based on a threshold criterion being met regarding a previous set of credentials.
4. The method of claim 1 , wherein the requesting device is associated with a profile, wherein the computing device is configured to determine the computing device has received a previous request associated with the profile for data elements associated with the digital credential, wherein the computing device is configured to generate the response based on a same credential of the set of credentials used to generate a previous response to the previous request.
5. The method of claim 1 , wherein the security object comprises an issuer signature and a hash of at least a subset of data elements.
6. The method of claim 1 , wherein the security object comprises a corresponding transaction key.
7. The method of claim 1 , wherein the security object includes an expiration date.
8. The method of claim 1 , wherein the data elements are associated with a user, wherein the data elements include one or more of: a name, an age, a birthday, a residential address, a picture of the user, a gender, a hair color, an eye color, a height, and a weight.
9. A computing device, comprising:
a memory configured to store computer-executable instructions; and
one or more processors in communication with the memory and configured to access the memory and execute the computer-executable instructions to:
generate a set of transaction keys, the computing device configured to present a digital credential to a requesting device;
generate a request bundle, the request bundle including the set of transaction keys;
transmit, to a first server, the request bundle, wherein the first server is configured to verify the request bundle, wherein the first server is configured to send the request bundle to a second server with a request for a set of credentials, wherein each credential of the set of credentials corresponds to a transaction key of the set of transaction keys, wherein each credential includes data elements and a security object, wherein the data elements for each credential are the same, wherein the security object for each credential is different;
receive, from the first server, the set of credentials; and
store the set of credentials, wherein the computing device is configured to generate a response based on a particular credential of the set of credentials when a requesting device requests the digital credential.
10. The computing device of claim 9 , wherein the one or more processors is further configured to access the memory and execute the computer-executable instructions to determine to generate the set of credentials based on a threshold criterion being met regarding a previous set of credentials.
11. The computing device of claim 9 , wherein the requesting device is associated with a profile, wherein the computing device is configured to determine the computing device has received a previous request associated with the profile for data elements associated with the digital credential, wherein the computing device is configured to generate the response based on a same credential of the set of credentials used to generate a previous response to the previous request.
12. The computing device of claim 9 , wherein the security object comprises an issuer signature and a hash of at least a subset of data elements.
13. The computing device of claim 9 , wherein the security object comprises a corresponding transaction key.
14. The computing device of claim 9 , wherein the security object includes an expiration date.
15. One or more non-transitory computer-readable media comprising computer-executable instructions that, when executed by one or more processors, cause the one or more processors to perform operations comprising:
generating, on a computing device, a set of transaction keys, the computing device configured to present a digital credential to a requesting device;
generating, on the computing device, a request bundle, the request bundle including the set of transaction keys;
transmitting, by the computing device to a first server, the request bundle, wherein the first server is configured to verify the request bundle, wherein the first server is configured to send the request bundle to a second server with a request for a set of credentials, wherein each credential of the set of credentials corresponds to a transaction key of the set of transaction keys, wherein each credential includes data elements and a security object, wherein the data elements for each credential are the same, wherein the security object for each credential is different;
receiving, by the computing device from the first server, the set of credentials; and
storing, by the computing device, the set of credentials, wherein the computing device is configured to generate a response based on a particular credential of the set of credentials when a requesting device requests the digital credential.
16. The one or more non-transitory computer-readable media of claim 15 , wherein the operations further comprise determining, on the computing device, to generate the set of credentials based on a threshold criterion being met regarding a previous set of credentials.
17. The one or more non-transitory computer-readable media of claim 15 , wherein the requesting device is associated with a profile, wherein the computing device is configured to determine the computing device has received a previous request associated with the profile for data elements associated with the digital credential, wherein the computing device is configured to generate the response based on a same credential of the set of credentials used to generate a previous response to the previous request.
18. The one or more non-transitory computer-readable media of claim 15 , wherein the security object comprises an issuer signature and a hash of at least a subset of data elements.
19. The one or more non-transitory computer-readable media of claim 15 , wherein the security object comprises a corresponding transaction key.
20. The one or more non-transitory computer-readable media of claim 15 , wherein the security object includes an expiration date.