Systems and methods for sharing verified identity documents
A method for sharing identity information is disclosed. The method is performed at one or more devices. The one or more devices obtain identity information of a user and facilitate storing, at a first device, a document that includes the identity information of the user. The document is stored in one or more encrypted containers. The one or more devices receive, from a second device of a third party, a request for at least a part of the identity information of the user. A request is sent to a client device, requesting authorization to release the requested part of the identity information to the third party. Device authorization to release the requested part of the information to the third party is received from the client device. In response to receiving the authorization, the one or more devices facilitate sending the requested part of the information to the third party.
1. A method for sharing identity information, comprising:
at one or more devices with one or more processors and memory storing one or more programs for execution by the one or more processors:
obtaining identity information of a user;
facilitating storing, at a first device of the one or more devices, a document that includes the identity information of the user, wherein the document is stored in one or more encrypted containers;
receiving, from a second device of a third party that is distinct from the first device and a client device of the user, a request for at least a part of the identity information of the user;
sending a request to the client device requesting authorization to release the requested part of the identity information to the third party;
receiving, from the client device, authorization to release the requested part of the identity information to the third party; and
in response to receiving the authorization, facilitating sending of the requested part of the identity information to the third party.
2. The method of claim 1 , wherein the request for identity information of the user identifies one or more distinct information items.
3. The method of claim 1 , wherein:
the authorization to release the requested part of the identity information to the third party includes a scope of the access that is to be granted to the requestor, and
the scope of the access that is to be granted to the requestor includes one or more access limits, specified by the user, for the information.
4. The method of claim 3 , wherein the one or more access limits include a limit on a number of times that the third party may access the information.
5. The method of claim 3 , wherein the one or more access limits include a limit on a duration during which the third party may access the information.
6. The method of claim 1 , wherein the authorization to release the requested part of the identity information includes an approval for releasing a portion, less than all, of the requested part of the identity information.
7. The method of claim 1 , wherein the request for at least a part of the identity information of the user includes an indication of minimum access requirements.
8. The method of claim 1 , including generating a first decryption key.
9. The method of claim 8 , wherein a second decryption key is generated by the client device.
10. The method of claim 8 , wherein the first decryption key is sent with the requested part of the identification information.
11. The method of claim 8 , including, after the requested part of the identity information is sent to the third party, facilitating sending the first decryption key to the third party.
12. The method of claim 1 , including, after the requested part of the identity information is sent to the third party, facilitating sending the decryption key to the third party.
13. An electronic device, comprising:
one or more processors;
memory; and
one or more programs, wherein the one or more programs are stored in the memory and configured to be executed by the one or more processors, the one or more programs including instructions for:
obtaining identity information of a user;
facilitating storing, at the electronic device, a document that includes the identity information of the user, wherein the document is stored in one or more encrypted containers;
receiving, from a second device of a third party that is distinct from the electronic device and a client device of the user, a request for at least a part of the identity information of the user;
sending a request to the client device requesting authorization to release the requested part of the identity information to the third party;
receiving, from the client device, authorization to release the requested part of the identity information to the third party; and
in response to receiving the authorization, facilitating sending of the requested part of the identity information to the third party.
14. A non-transitory computer readable storage medium storing one or more programs, the one or more programs comprising instructions, which when executed by one or more devices, cause the one or more devices to:
obtain identity information of a user;
facilitate storing, at a first device of the one or more devices, a document that includes the identity information of the user, wherein the document is stored in one or more encrypted containers;
receive, from a second device of a third party that is distinct from the first device and a client device of the user, a request for at least a part of the identity information of the user;
send a request to the client device requesting authorization to release the requested part of the identity information to the third party;
receive, from the client device, authorization to release the requested part of the identity information to the third party; and
in response to receiving the authorization, facilitate sending of the requested part of the identity information to the third party.
15. The non-transitory computer readable storage medium of claim 14 , wherein the request for identity information of the user identifies one or more distinct information items.
16. The non-transitory computer readable storage medium of claim 14 , wherein:
the authorization to release the requested part of the identity information to the third party includes a scope of the access that is to be granted to the requestor, and
the scope of the access that is to be granted to the requestor includes one or more access limits, specified by the user, for the information.
17. The non-transitory computer readable storage medium of claim 14 , wherein the authorization to release the requested part of the identity information includes an approval for releasing a portion, less than all, of the requested part of the identity information.
18. The non-transitory computer readable storage medium of claim 14 , wherein the request for at least a part of the identity information of the user includes an indication of minimum access requirements.
19. The non-transitory computer readable storage medium of claim 14 , wherein the one or more programs cause the one or more devices to generate a first decryption key.
20. The non-transitory computer readable storage medium of claim 19 , wherein the first decryption key is sent with the requested part of the identification information.