Granted Patent B2

US 11,128,467 · App. 15/997,467 · Granted Sep 21, 2021

Inventors: Justin Chapman (London, GB); Andrew Czupek (Chicago, IL); Andrew Monks (Chicago, IL); Anthony Stevens (Herefordshire, GB); Arijit Das (Naperville, IL); Christopher Price (Plainfield, IL); Wayne Hannaway (Westclif-On-Sea, GB); Zabrina Smith (London, GB)

Assignee: Northern Trust Corporation

H04L9/3226G06F21/32G06F21/604G06F21/64H04L9/3231H04L9/3236H04L63/0428H04L63/0861H04L63/102H04L9/14H04L2209/38

Abstract

Claims (66)

1. A computer-implemented method for generating an encrypted digital identity record in a blockchain, the method comprising:

receiving, by a network node, a request to generate a digital identity record within a blockchain for an entity, wherein the request contains an entity type of the entity;

retrieving, by the network node, a digital identity record template containing multiple data fields and associated with the entity type from the blockchain;

receiving, by the network node, information for at least one data field of the multiple data fields and a reference document from a client device associated with the entity;

generating, by the network node, a digital identity record for the entity by associating the received information to one or more data fields in the digital identity record template;

associating, by the network node, a first data field of the one or more data fields in the digital identity record with the reference document;

generating, by the network node, a one directional cryptographic hash of the reference document;

storing, by the network node, the reference document in a non-blockchain document repository;

storing, by the network node, the one directional cryptographic hash of the reference document in the digital identity record in association with the first data field;

encrypting, by the network node, the digital identity record using one or more encryption keys;

generating, by the network node, a digital identity record block containing the encrypted digital identity record on the blockchain; and

setting, by the network node, permission controls for the digital identity record based on the entity type and the received information, wherein the permission controls delimit the entity's access to information within the blockchain and rights to initiate blockchain based events.

2. The method of claim 1 , further comprising:

receiving, by the network node via a biometric web application, biometric information associated with the entity;

storing, by the network node, the received biometric information to a non-blockchain biometric repository;

generating, by the network node, a one directional cryptographic hash of the received biometric information; and

storing, by the network node, the one directional cryptographic hash of the received biometric information in the digital identity record.

3. The method of claim 1 , wherein the multiple data fields comprise at least one of: entity name, registered address, jurisdiction, identity document hash, identity biometric hash, permission controls, relationship, and hierarchy.

4. The method of claim 1 , further comprising:

assigning, by the network, a status identifier to the one or more data fields based on the corresponding associated information, wherein the status identifier comprises at least one of verified and unverified.

5. The method of claim 4 , further comprising:

updating, by the network node, the status identifier from unverified to verified.

6. The method of claim 1 , wherein encrypting the digital identity record comprises:

encrypting, by the network node, a first set of data fields using a first encryption key; and

encrypting, by the network node, a second set of data fields using a second encryption key.

7. The method of claim 1 , further comprising:

associating, by the network node, a globally unique random digital identity reference with the entity; and

storing, by the network node, the globally unique random digital identity reference in the digital identity record.

8. The method of claim 1 , further comprising:

associating, by the network node, the digital identity record with a smart contract in the blockchain.

9. The method claim 1 , further comprising:

generating, by the network node, a second digital identity record hierarchically below the digital identity record.

10. A system for generating an encrypted digital identity record in a blockchain, the system comprising:

a plurality of distributed network nodes, each including a non-transitory storage medium storing a respective local copy of a blockchain;

at least one of the plurality of distributed network nodes having a processor configured to:

receive a request to generate a digital identity record within the blockchain for an entity, wherein the request contains an entity type of the entity;

retrieve a digital identity record template containing multiple data fields and associated with the entity type from the blockchain;

receive information for at least one data field of the multiple data fields and a reference document from a client device associated with the entity;

generate a digital identity record for the entity by associating the received information to one or more data fields in the digital identity record template;

associate a first data field of the one or more data fields in the digital identity record with the reference document;

generate a one directional cryptographic hash of the reference document;

store the reference document in a non-blockchain document repository;

store the one directional cryptographic hash of the reference document in the digital identity record in association with the first data field;

encrypt the digital identity record using one or more encryption keys;

generate a digital identity record block containing the encrypted digital identity record on the blockchain; and

set permission controls for the digital identity record based on the entity type and the received information, wherein the permission controls delimit the entity's access to information within the blockchain and rights to initiate blockchain based events.

11. The system of claim 10 , wherein the processor is further configured to:

receive, via a biometric web application, biometric information associated with the entity;

store the received biometric information to a non-blockchain biometric repository;

generate a one directional cryptographic hash of the received biometric information; and

store the one directional cryptographic hash of the received biometric information to the digital identity record.

12. The system of claim 10 , wherein the multiple data fields comprise at least one of: entity name, registered address, jurisdiction, identity document hash, identity biometric hash, permission controls, relationship, and hierarchy.

13. The system of claim 10 , wherein the processor is further configured to:

assign a status identifier to the one or more data fields based on the corresponding associated information, wherein the status identifier comprises at least one of verified or unverified.

14. The system of claim 13 , wherein the processor is further configured to:

update the status identifier from unverified to verified.

15. The system of claim 1 , wherein the processor is further configured to encrypt the digital identity record by:

encrypt a first set of data fields using a first encryption key; and

encrypt a second set of data fields using a second encryption key.

16. The system of claim 10 , wherein the processor is further configured to:

associate a globally unique random digital identity reference with the entity; and

store the globally unique random digital identity reference in the digital identity record.

17. The system of claim 10 , wherein the processor is further configured to:

associate the digital identity record with a smart contract in the blockchain.

18. The system claim 10 , wherein the processor is further configured to:

generate a second digital identity record hierarchically below the digital identity record.

Assignments (1)

Continuity (3)

Cited By (9)

US 12,200,132 US 12,248,545 US 12,284,172 US 12,299,093 US 12,301,558 US 12,347,095 US 12,401,650 US 12,470,552 US 12,500,769