Digital identity lock
Described herein is an identity network for authenticating a user for a relying party and providing access to the user's credit report. The identity network may receive an unlock request for the digital identity and credit report of a user from a relying party. In response, the identity network may provide an identity provider link for accessing the identity provider application. The user may login to the identity provider application and provide consent for obtaining the user's credit report. The identity provider provides the identity network with verification of the digital identity of the user and the consent response from the user. The identity network can request access from a credit reporting agency and receive a credit report key in response. The identity network can provide the credit report key to the relying party, which can use the key to access the user's credit report from the credit reporting agency.
1. A method for controlling access to an authenticated, universal digital identity for a user, the method comprising:
receiving, at an identity network, an unlock request for a digital identity for a user from a relying party;
providing, by the identity network to the relying party, a session identifier and an identity provider link;
launching, by the identity network using a software development kit of a relying party application and the identity provider link, an identity provider application of an identity provider associated with the identity provider link, wherein launching the identity provider application comprises providing the session identifier;
receiving, at the identity network from the identity provider, validation of the digital identity for the user and a consent response from the user for unlocking a credit report of the user for the relying party;
transmitting, by the identity network, the consent response and the session identifier to a credit reporting agency;
receiving, at the identity network from the credit reporting agency, a credit report key for the credit report of the user for use by the relying party and the session identifier; and
transmitting, by the identity network to the relying party, the credit report key and the session identifier.
2. The method of claim 1 , further comprising:
receiving, at the identity network, a device identifier of a device being used by the user; and
identifying the identity provider based on the device identifier.
3. The method of claim 1 , wherein receiving validation of the digital identity for the user comprises receiving an indication that the digital identity of the user was authenticated by the identity provider.
4. The method of claim 1 , further comprising:
receiving, at the identity network, a device identifier of a device being used by the user; and
performing, by the identity network, a device check based on the device identifier.
5. The method of claim 4 , wherein performing the device check comprises:
obtaining activity associated with the device identifier;
calculating a confidence score based on the activity associated with the device identifier and the unlock request; and
transmitting the confidence score to the relying party with the credit report key.
6. The method of claim 1 , further comprising:
receiving, at the identity network from the identity provider, a detail request; and
transmitting, by the identity network, at least a portion of the unlock request to the identity provider.
7. The method of claim 1 , wherein the relying party uses the credit report key to obtain the credit report of the user from the credit reporting agency.
8. A system for controlling access to an authenticated, universal digital identity for a user, the system comprising:
one or more processors; and
a memory having stored thereon instructions that, upon execution by the one or more processors, cause the one or more processors to:
receive an unlock request for a digital identity for a user from a relying party;
provide, to the relying party, a session identifier and an identity provider link;
launch, using a software development kit of a relying party application and the identity provider link, an identity provider application of an identity provider associated with the identity provider link, wherein launching the identity provider application comprises providing the session identifier;
receive, from the identity provider, validation of the digital identity for the user and a consent response from the user for unlocking a credit report of the user for the relying party;
transmit the consent response and the session identifier to a credit reporting agency;
receive, from the credit reporting agency, the session identifier and a credit report key for the credit report of the user for use by the relying party; and
transmit, to the relying party, the credit report key and the session identifier.
9. The system of claim 8 , wherein the instructions comprise further instructions that, upon execution by the one or more processors, cause the one or more processors to:
receive a device identifier of a device being used by the user; and
identify the identity provider based on the device identifier.
10. The system of claim 8 , wherein receiving validation of the digital identity for the user comprises receiving an indication that the digital identity of the user was authenticated by the identity provider.
11. The system of claim 8 , wherein the instructions comprise further instructions that, upon execution by the one or more processors, cause the one or more processors to:
receive a device identifier of a device being used by the user; and
perform a device check based on the device identifier.
12. The system of claim 11 , wherein the instructions to perform the device check comprises further instructions that, upon execution by the one or more processors, cause the one or more processors to:
obtain activity associated with the device identifier;
calculate a confidence score based on the activity associated with the device identifier and the unlock request; and
transmit the confidence score to the relying party with the credit report key.
13. The system of claim 8 , wherein the instructions comprise further instructions that, upon execution by the one or more processors, cause the one or more processors to:
receive, from the identity provider, a detail request; and
transmit at least a portion of the unlock request to the identity provider.
14. The system of claim 8 , wherein the relying party uses the credit report key to obtain the credit report of the user from the credit reporting agency.
15. A non-transitory, computer readable memory device having stored thereon instructions that, upon execution by one or more processors, cause the one or more processors to:
receive an unlock request for a digital identity for a user from a relying party;
provide, to the relying party, a session identifier and an identity provider link;
launch, using a software development kit of a relying party application and the identity provider link, an identity provider application of an identity provider associated with the identity provider link, wherein launching the identity provider application comprises providing the session identifier;
receive, from the identity provider, validation of the digital identity for the user and a consent response from the user for unlocking a credit report of the user for the relying party;
transmit the consent response and the session identifier to a credit reporting agency;
receive, from the credit reporting agency, the session identifier and a credit report key for the credit report of the user for use by the relying party; and
transmit, to the relying party, the credit report key and the session identifier.
16. The memory device of claim 15 , wherein the instructions comprise further instructions that, upon execution by the one or more processors, cause the one or more processors to:
receive a device identifier of a device being used by the user; and
identify the identity provider based on the device identifier.
17. The memory device of claim 15 , wherein receiving validation of the digital identity for the user comprises receiving an indication that the digital identity of the user was authenticated by the identity provider.
18. The memory device of claim 15 , wherein the instructions comprise further instructions that, upon execution by the one or more processors, cause the one or more processors to:
receive a device identifier of a device being used by the user; and
perform a device check based on the device identifier.
19. The memory device of claim 18 , wherein the instructions to perform the device check comprises further instructions that, upon execution by the one or more processors, cause the one or more processors to:
obtain activity associated with the device identifier;
calculate a confidence score based on the activity associated with the device identifier and the unlock request; and
transmit the confidence score to the relying party with the credit report key.
20. The memory device of claim 15 , wherein the instructions comprise further instructions that, upon execution by the one or more processors, cause the one or more processors to:
receive, from the identity provider, a detail request; and
transmit at least a portion of the unlock request to the identity provider.