Methods and systems for a digital trust architecture
In some aspects, methods and systems for a digital trust architecture are provided. In some aspects, the architecture includes a user account provisioning process. The provisioning process may make use of in person verifications of some personal information to ensure authenticity of the user information. Once the authenticity of user information is established, an account may be created. The user account may include a user email account, with integrated access to digital certificates linked to the user account. Account creation may also automatically publish the new user's public key in a publicly accessible directory, enabling encrypted email information to be easily sent to the new user.
1. A digital trust architecture system comprising:
a memory configured to store a sender account and a private key of the sender;
a hardware processor configured to:
receive the private key of the sender;
identify electronic data associated with the sender, wherein the electronic data is to be communicated electronically to a recipient;
search a public directory for a public key associated with the recipient;
encrypt the electronic data with the public key associated with the recipient;
sign the electronic data using the private key of the sender;
create a digital token based on the contents of the signed electronic data;
receive input indicating whether information indicating that the encrypted electronic data is to be stored in a blockchain;
send the digital token to one or more blockchains; and
convey the electronic data over the network to the recipient.
2. The system of claim 1 , wherein the encrypted electronic data is configured to be decrypted by a private key of the recipient.
3. The system of claim 1 , wherein the encrypted electronic data is configured to be decrypted using a public key of a sender, wherein successful decryption of the electronic data using the public key of the sender verifies that the electronic data is from the sender.
4. The system of claim 1 , wherein the public directory contains digital certificates for users and senders, and wherein the digital certificates comprise public keys for the users and senders.
5. The system of claim 4 , wherein the public directory comprises user and sender accounts for the users and senders and the digital certificates, and wherein the user and sender accounts are configurable to be selectively searchable by the hardware processor.
6. The system of claim 1 , wherein the hardware processor is configured to search the public directory using a recipient identifier.
7. The system of claim 6 , wherein the recipient identifier comprises a recipient email address.
8. A method of secure electronic data transfer, the method comprising:
storing, in a memory, a sender account and a private key of the sender;
receiving the private key of the sender;
identifying electronic data associated with the sender, wherein the electronic data is to be communicated electronically to a recipient;
searching a public directory for a public key associated with the recipient;
encrypting the electronic data with the public key associated with the recipient;
signing the electronic data using the private key of the sender;
creating a digital token based on contents of the signed electronic data;
receiving input indicating whether information indicating that the encrypted electronic data is to be stored in a blockchain;
sending the digital token to one or more blockchains; and
conveying the electronic data over the network to the recipient.
9. The method of claim 8 , wherein the encrypted electronic data is decryptable by a private key of the recipient.
10. The method of claim 8 , further comprising:
decrypting the encrypted electronic data using a public key of a sender; and
verifying that the electronic data is from the sender based on successful decryption of the encrypted data.
11. The method of claim 8 , wherein the public directory contains digital certificates for users and senders, and wherein the digital certificates comprise public keys for the users and senders.
12. The method of claim 11 , wherein the public directory comprises user and sender accounts for the users and senders and the digital certificates, and wherein the user and sender accounts are configurable to be selectively searchable by the hardware processor.
13. The method of claim 8 , wherein searching the public directory comprises searching the public directory using a recipient identifier.
14. The method of claim 13 , wherein the recipient identifier comprises a recipient email address.