Digital identity
Disclosed herein is an identity network that can provide a universal, digital identity for users that can be used to authenticate the user by an identity provider for relying parties. The identity network receives a request from a relying party that includes deep linking to an identity provider selected by the user. The request specifies the user as well as any other information about the user the relying party is requesting. A service of the identity network launches the application for the identity provider on the user's device using a software development kit. The user can log into the identity provider's application, which validates the user and provides the user authentication/validation and information about the user to the identity network. The identity network can then provide the indication of the user's authentication and the user information to the relying party.
1. A method for using an authenticated, universal digital identity for a user, the method comprising:
sending, by a user device, a request to sign up for access to a relying party using a digital identity of a user of the user device;
receiving, by the user device, a plurality of identity providers that are available for authentication of the digital identity of the user, wherein the user device comprises a unique device identifier for each of the plurality of identity providers;
receiving, by the user device, a selection from the user of an identity provider of the plurality of identity providers;
authenticating, by the user device, the user on an identity provider application associated with the identity provider selected by the user, wherein communications during authentication between the user device and the identity provider selected by the user comprise the unique device identifier of the device for the identity provider selected by the user;
providing, by the user device, consent information and an indication that the user was authenticated on the identity provider application to an identity network;
receiving, by the user device, identity attributes of the user from the identity network; and
populating, by the user device, a signup form of the relying party using the identity attributes of the user received from the identity network.
2. The method for using an authenticated, universal digital identity for a user of claim 1 , further comprising:
upon receiving the selection of the identity provider, automatically launching, by the user device, the identity provider application.
3. The method for using an authenticated, universal digital identity for a user of claim 2 , wherein:
the identity provider application is automatically launched using a deep link.
4. The method for using an authenticated, universal digital identity for a user of claim 1 , further comprising:
receiving, by the user device, an input from the user, the input comprising login information associated with the identity provider selected by the user, wherein the login information is authenticated by the identity provider application.
5. The method for using an authenticated, universal digital identity for a user of claim 1 , further comprising:
providing, by the user device, a prompt for the user to provide consent for the identity provider to provide identity attributes to the relying party; and
receiving, by the user device, the consent information from the user in response to the prompt.
6. The method for using an authenticated, universal digital identity for a user of claim 1 , further comprising:
displaying, by the user device, the plurality of identity providers on a display of the user device.
7. The method for using an authenticated, universal digital identity for a user of claim 1 , wherein:
the identity attributes received from the identity network are encrypted; and
the method further comprises decrypting, by the user device, the encrypted identity attributes to access the identity attributes of the user.
8. A user device, comprising:
one or more processors; and
a memory having stored thereon instructions that, upon execution by the one or more processors, cause the one or more processors to:
send a request to sign up for access to a relying party using a digital identity of a user of the user device;
receive a plurality of identity providers that are available for authentication of the digital identity of the user;
receive a selection from the user of an identity provider of the plurality of identity providers;
authenticate the user on an identity provider application associated with the identity provider selected by the user;
provide consent information and an indication that the user was authenticated on the identity provider application to an identity network, wherein a communication including the consent information and the indication that the user was authenticated comprises a device identifier of the user device that is unique to the identity network;
receive identity attributes of the user from the identity network, wherein a communication including the identity attributes comprises the device identifier; and
populate a signup form of the relying party using the identity attributes of the user received from the identity network.
9. The user device of claim 8 , wherein:
the user device executes a relying party application associated with the relying party; and
the relying party application sends the request to sign up, receives the identity attributes of the user from the identity network, and populates the signup form.
10. The user device of claim 8 , wherein:
the identity attributes received from the identity network are encrypted; and
the instructions further cause the one or more processors to decrypt the encrypted identity attributes to access the identity attributes of the user.
11. The user device of claim 10 , wherein the instructions comprise further instructions that, upon execution by the one or more processors, cause the one or more processors to:
receive an encryption key from the identity network, wherein the encryption key is used to decrypt the identity attributes of the user.
12. The user device of claim 10 , wherein:
the identity attributes are encrypted using an encryption key that is unique to a single transaction.
13. The user device of claim 8 , wherein:
authenticating the user is done using a biometric sensor of the user device.
14. The user device of claim 8 , further comprising:
a software development kit that includes a certificate binding between the software development kit within the identity provider application and the identity provider.
15. A non-transitory, computer-readable medium having stored thereon instructions that, upon execution by one or more processors of a user device, cause the one or more processors to:
request, from a user of the user device, to provide a standard identity document;
receive, a photograph of the standard identity document;
provide the photograph of the standard identity document to a document verification subsystem of an identity network;
send a request to sign up for access to a relying party using a digital identity of the user of the user device;
receive a plurality of identity providers that are available for authentication of the digital identity of the user;
receive a selection from the user of an identity provider of the plurality of identity providers;
authenticate the user on an identity provider application associated with the identity provider selected by the user;
provide consent information and an indication that the user was authenticated on the identity provider application to the identity network;
receive identity attributes of the user from the identity network; and
populate a signup form of the relying party using the identity attributes of the user received from the identity network.
16. The non-transitory, computer-readable medium of claim 15 , wherein:
the identity attributes comprise at least one of a name, a residential address, a business address, a phone number, an email address, or a credit score.
17. The non-transitory, computer-readable medium of claim 15 , wherein:
the identity provider selected by the user is an identity provider with which the user has an established relationship.
18. The non-transitory, computer-readable medium of claim 15 , wherein:
the identity attributes received from the identity network are encrypted using an encryption key that is unique to a single transaction; and
the instructions further cause the one or more processors to:
receive the encryption key from the identity network; and
decrypt the identity attributes using the encryption key.
19. The non-transitory, computer-readable medium of claim 15 , wherein:
the consent information indicates that the user consents to the identity provider sharing the identity attributes with the relying party.
20. The non-transitory, computer-readable medium of claim 15 , wherein:
the identity provider application comprises one or both of a mobile application and a website.