Securely sharing private information
Various systems and methods for securely sharing private information are described herein. A mobile device comprises instruction to configured the mobile device to identify a verifier device having an available wireless connection, the wireless connection having a wireless connection strength; determine that a triggering event occurs, the triggering event based on the wireless connection strength; when the triggering event occurs; connect to the verifier device; transmit a digital credential to the verifier device, each of a plurality of data elements of the digital credential separately encrypted using distinct encryption keys; receive a request to access a requested data element of the digital credential; prompt a user of the mobile device for consent to share the requested data element; and transmit information to the verifier device when the user consents sharing the requested data element, the information used to decrypt only the requested data element.
1. A verifier device comprising:
memory; and
at least one processor, which when configured by instructions stored on the memory, is operable to perform the operations comprising:
interrogating a user device over a wireless connection for a digital credential;
receiving the digital credential from the user device, wherein the digital credential includes a plurality of data elements, the plurality of data elements received as a plurality of separately encrypted parts, each of the separately encrypted parts comprising one or more of the data elements;
determining which of the data elements are to be used to verify the user device;
transmitting a request to the user device for access to one or more of the data elements that are determined to be used to verify the user device; and
receiving information from the user device, the information enabling decryption of one or more of the separately encrypted parts comprising the one or more data elements corresponding to the request.
2. The verifier device of claim 1 , wherein the operations further comprise:
decrypting the one or more separately encrypted parts comprising the one or more data elements corresponding to the request using the information received from the user device; and
verifying the user device based on the one or more data elements corresponding to the request.
3. The verifier device of claim 2 , wherein verifying the user device is performed in conjunction with a secondary verifier device.
4. The verifier device of claim 1 , wherein the operations further comprise:
transmitting at least a portion of the digital credential and the information received from the user device to a secondary verifier device, wherein the secondary verifier device is configured to decrypt one or more of the separately encrypted parts based on the information received from the user device;
receiving one or more data elements from the secondary verifier device; and
verifying the user device based on the one or more data elements.
5. The verifier device of claim 1 , wherein the operations further comprise:
transmitting at least a portion of the digital credential and the information received from the user device to a secondary verifier device; and
receiving a result of verification of the user device from the secondary verifier device.
6. The verifier device of claim 1 , wherein transmitting the request to the user device for access to one or more of the data elements that are determined to be used to verify the user device comprises transmitting a request for a secondary verifier device to transmit an access token along with information corresponding to the one or more of the data elements that are determined to be used to verify the user device.
7. The verifier device of claim 1 , wherein the information received from the user device comprises an access token, and wherein the operations further comprise:
transmitting the access token to a secondary verifier device; and
receiving one or more decryption keys from the secondary verifier device for decrypting the one or more separately encrypted parts comprising the one or more data elements corresponding to the request using the information received from the user device.
8. The verifier device of claim 7 , wherein the access token comprises key derivation information enabling the secondary verifier device to generate the one or more decryption keys.
9. The verifier device of claim 7 , wherein the operations further comprise:
decrypting the one or more separately encrypted parts comprising the one or more data elements corresponding to the request using the one or more decryption keys received from the secondary verifier device; and
verifying the user device based on the data elements corresponding to the request.
10. The verifier device of claim 1 , wherein each of the plurality of separately encrypted parts is encrypted using an independent encryption key.
11. The verifier device of claim 1 , wherein the operations further comprise:
assessing a signal strength of a wireless signal of the user device; and
determining that a triggering event occurred based on the signal strength;
wherein interrogating the user device over the wireless connection for the digital credential occurs in response to the triggering event.
12. The verifier device of claim 11 , wherein the triggering event comprises the signal strength being greater than a threshold amount.
13. The verifier device of claim 11 , wherein the triggering event comprises a rate of change of the signal strength being greater than a threshold amount.
14. A method for securely receiving a digital credential from a user device, the method comprising:
interrogating the user device over a wireless connection for the digital credential;
receiving the digital credential from the user device, wherein the digital credential includes a plurality of data elements, the plurality of data elements received as a plurality of separately encrypted parts, each of the separately encrypted parts comprising one or more of the data elements;
determining which of the data elements are to be used to verify the user device;
transmitting a request to the user device for access to one or more of the data elements that are determined to be used to verify the user device; and
receiving information from the user device, the information enabling decryption of one or more of the separately encrypted parts comprising the one or more data elements corresponding to the request.
15. The method of claim 14 , further comprising:
decrypting the one or more separately encrypted parts comprising the one or more data elements corresponding to the request using the information received from the user device; and
verifying the user device based on the one or more data elements corresponding to the request.
16. The method of claim 14 , further comprising:
transmitting at least a portion of the digital credential and the information received from the user device to a secondary verifier device, wherein the secondary verifier device is configured to decrypt one or more of the separately encrypted parts based on the information received from the user device;
receiving one or more data elements from the secondary verifier device; and
verifying the user device based on the one or more data elements.
17. The method of claim 14 , further comprising:
transmitting at least a portion of the digital credential and the information received from the user device to a secondary verifier device; and
receiving a result of verification of the user device from the secondary verifier device.
18. The method of claim 14 , wherein transmitting the request to the user device for access to one or more of the data elements that are determined to be used to verify the user device comprises transmitting a request for a secondary verifier device to transmit an access token along with information corresponding to the one or more of the data elements that are determined to be used to verify the user device.
19. The method of claim 14 , wherein the information received from the user device comprises an access token, and the method further comprises:
transmitting the access token to a secondary verifier device; and
receiving one or more decryption keys from the secondary verifier device for decrypting the one or more separately encrypted parts comprising the one or more data elements corresponding to the request using the information received from the user device.
20. A non-transitory computer-readable medium including instructions for securely receiving a digital credential from a user device, which when executed by a verifier device, cause the verifier device to perform operations comprising:
interrogating the user device over a wireless connection for the digital credential;
receiving the digital credential from the user device, wherein the digital credential includes a plurality of data elements, the plurality of data elements received as a plurality of separately encrypted parts, each of the separately encrypted parts comprising one or more of the data elements;
determining which of the data elements are to be used to verify the user device;
transmitting a request to the user device for access to one or more of the data elements that are determined to be used to verify the user device; and
receiving information from the user device, the information enabling decryption of one or more of the separately encrypted parts comprising the one or more data elements corresponding to the request.