Decentralized database identity management system

1. An attribute custodian in blockchain network including an identify consumer and a shared ledger, the attribute custodian comprising:

a memory configured to store one or more instructions; and

a processor that when executing the one or more instructions is configured to:

receive attribute data associated with an attribute in a user profile of a user from a data store external to the blockchain network;

create a blockchain transaction to store metadata to the shared ledger, the metadata including a hash of the attribute data and non-hashed data;

grant access to the identity consumer in response to a query to the attribute custodian the user profile;

send, based on a smart contract, a transaction to the shared ledger to retrieve the metadata in response to the query;

retrieve the metadata in response to the transaction;

reconstruct, based on the smart contract, the user profile from the non-hashed data of the metadata; and

send, based on the smart contract, the attribute data to the identity consumer in response to the query.

2. The attribute custodian of claim 1 , wherein the metadata comprises a location of the attribute data in the data store.

3. The attribute custodian of claim 2 , wherein, when the attribute custodian is configured to reconstruct the user profile, the attribute custodian is configured to:

retrieve the attribute data from the storage location; and

validate the attribute data with the hash of the attribute data.

4. The attribute custodian of claim 1 , wherein the shared ledger comprises a logical view of the profile and manages the logical view through one or more application programming interfaces.

5. The attribute custodian of claim 4 , wherein the attribute custodian is further configured to:

modify metadata in the shared ledger via an application programming interface call to the smart contract.

6. The attribute custodian of claim 1 , wherein, when the attribute custodian is configured to receive the attribute data, the attribute custodian is further configured to:

approve inclusion of the attribute data to the user profile based on a policy associated with the user; and

select the data store.

7. A method, comprising:

receiving, by a blockchain node of a blockchain network including an identify consumer and a shared ledger, attribute data associated with an attribute in a profile of a user from a data store external to the blockchain network;

creating, by the blockchain node, a blockchain transaction to store metadata to the shared ledger, the metadata including a hash of the attribute data and non-hashed data;

granting, by the blockchain node, access to the identity consumer in response to a query regarding the profile;

retrieving, by the blockchain node, the metadata from the shared ledger in response to a transaction sent to the shared ledger in response to the query;

reconstructing, by the blockchain node, the user profile from the non-hashed data of the metadata; and

sending, by the blockchain node, the attribute data to the identity consumer in response to the query.

8. The method of claim 7 , wherein the metadata comprises a location for storing the attribute data in the data store.

9. The method of claim 8 , wherein the reconstructing the user profile from the metadata comprises:

retrieving the attribute data corresponding to the user profile from the storage location; and

validating attribute data with the hash of the attribute data.

10. The method of claim 7 , wherein the shared ledger comprises a logical view of the profile and manages the logical view through one or more application programming interfaces.

11. The method of claim 10 , further comprising:

modifying metadata in the shared ledger via an application programming interface call to the smart contract.

12. The method of claim 7 , wherein the receiving the attribute data further comprises:

approving inclusion of the attribute data to the user profile based on a policy associated with the user; and

selecting the data store.

13. A non-transitory computer readable medium configured to store one or more instructions that when executed by a processor of a blockchain node of a blockchain network including an identify consumer and a shared ledger causes the processor to perform:

receiving attribute data associated with an attribute in a profile of a user from a data store external to the blockchain network;

creating a blockchain transaction to store metadata to the shared ledger, the metadata including a hash of the attribute data and non-hashed data;

granting access to the identity consumer in response to a query regarding the profile;

retrieving the metadata from the shared ledger in response to a transaction sent to the shared ledger in response to the query;

reconstructing the user profile from the non-hashed data of the metadata; and

sending the attribute data to the identity consumer in response to the query.

14. The non-transitory computer readable medium of claim 13 , wherein the metadata comprises a location for storing the attribute data in the data store, and

wherein, when the processor is configured to perform the reconstructing the user profile, the processor is further configured to perform:

retrieving the attribute data corresponding to the user profile from the storage location; and

validating attribute data with the hash of the attribute data.

15. The non-transitory computer readable medium of claim 13 , wherein the shared ledger comprises a logical view of the profile and manages the logical view through one or more application programming interfaces.

16. The non-transitory computer readable medium of claim 15 , wherein the one or more instructions further configure the processor to perform:

modifying metadata in the shared ledger via an application programming interface call to the smart contract.

17. The non-transitory computer readable medium of claim 13 , wherein, when the processor is configured to perform the receiving the attribute data for the user profile, the processor is further configured to perform:

approving inclusion of the attribute data to the user profile based on a policy associated with the user; and

selecting the data store.