Decentralized identity methods and systems
The present techniques relate to, inter alia, cryptographically-verifiable insurance credentials and cryptographically-verifiable property transfer. The novel methods and systems of decentralized identity discussed herein improve user experience (whether individual or organizational) by moving control over identity from the hands of centralized entities, back to where it belongs—i.e., to the hands of individual organizations and users. In one aspect, a method includes obtaining a scanned image; processing the scanned image; transmitting a claim request; and receiving and storing an attestation response, and a computing system includes a processor; and a memory having stored thereon computer-executable instructions that, when executed by the one or more processors, cause the computing system to: receive a claim request; cryptographically verify the claim; and transmit an attestation response.
1. A computer-implemented method for obtaining a cryptographically-signed credential, comprising:
obtaining, in response to a user scan action of a user with respect to a graphical user interface scan element displayed on a mobile computing device, via a camera device of the mobile computing device, a scanned image of a quick response code;
processing the scanned image of the quick response code to extract code information including a uniform resource identifier to establish a decentralized identifier (DID) protocol, wherein establishing the DID protocol includes determining the DID protocol from among a plurality of DID protocols based upon at least a portion of the uniform resource identifier;
transmitting a DID communication request to a software agent of an issuing party according to the DID protocol, the DID communication request including at least a cryptographic key of the user and security data;
receiving an attestation response from the software agent including at least the cryptographically-signed credential; and
storing, in response to a user accept action with respect to a graphical user interface accept element displayed on the mobile computing device, the cryptographically-signed credential in an electronic database of a digital wallet application in a memory of the mobile computing device.
2. The computer-implemented method of claim 1 , further comprising:
transmitting a verification request to a service provider;
receiving, in response to the transmitting, a credential proof request from the service provider, the credential proof request including one or more credential proof parameters;
displaying a proof request graphical user interface including the one or more credential proof parameters; and
transmitting, in response to a user present credentials action with respect to a graphical user interface present credentials element, one or more credentials of the user to the service provider, the one or more credentials corresponding to the one or more credential proof request parameters.
3. The computer-implemented method of claim 2 , further comprising:
receiving an electronic form including at least one field including values corresponding to the credential proof request parameters; and
causing, in response to receiving a user submission of the electronic form, the electronic form to be transmitted to the service provider, to complete a decentralized identity checkout process.
4. The computer-implemented method of claim 1 , wherein the cryptographically-signed credential is a proof-of-insurance credential.
5. The computer-implemented method of claim 4 ,
wherein the proof-of-insurance credential is a vehicle proof-of-insurance credential, and
wherein the vehicle proof-of-insurance credential includes insurance description information including at least a policy number, a named insured, a policy effective date, a policy expiration date, a vehicle identification number, a vehicle make and a vehicle year.
6. The computer-implemented method of claim 4 ,
wherein the proof-of-insurance credential is a homeowners' proof-of-insurance credential, and
wherein the homeowners' proof-of-insurance credential includes insurance description information including at least a policy number, a named insured, a policy effective date, a policy expiration date, a coverage limit, a liability limit, a deductible and a policy premium.
7. The computer-implemented method of claim 1 ,
wherein the cryptographic key is a public key, and
wherein the security data includes a session cookie identifying an authenticated web session of the user.
8. A computing system for obtaining a cryptographically- signed credential, comprising:
one or more processors; and
one or more memories having stored thereon computer-executable instructions that, when executed by the one or more processors, cause the computing system to:
obtain, in response to a user scan action of a user with respect to a graphical user interface scan element displayed on a mobile computing device, via a camera device of the mobile computing device, a scanned image of a quick response code;
process the scanned image of the quick response code to extract code information including a uniform resource identifier to establish a decentralized identifier (DID) protocol, wherein establishing the DID protocol includes determining the DID protocol from among a plurality of DID protocols based upon at least a portion of the uniform resource identifier;
transmit a DID communication request to a software agent of an issuing party according to the DID protocol, the DID communication request including at least a cryptographic key of the user and security data;
receive an attestation response from the software agent including at least the cryptographically-signed credential; and
store, in response to a user accept action with respect to a graphical user interface accept element displayed on the mobile computing device, the cryptographically-signed credential in an electronic database of a digital wallet application in a memory of the mobile computing device.
9. The computing system of claim 8 , the memories having stored thereon further instructions that, when executed by the one or more processors, cause the computing system to:
transmit a verification request to a service provider;
receive, in response to the transmitting, a credential proof request from the service provider, the credential proof request including one or more credential proof parameters;
display a proof request graphical user interface including the one or more credential proof parameters; and
transmit, in response to a user present credentials action with respect to a graphical user interface present credentials element, one or more credentials of the user to the service provider, the one or more credentials corresponding to the one or more credential proof parameters.
10. The computing system of claim 9 , the memories having stored thereon further instructions that, when executed by the one or more processors, cause the computing system to:
receive an electronic form including at least one field including values corresponding to the credential proof parameters; and
cause, in response to receiving a user submission of the electronic form, the electronic form to be transmitted to the service provider, to complete a decentralized identity checkout process.
11. The computing system of claim 8 , wherein the cryptographically-signed credential is a proof-of-insurance credential.
12. The computing system of claim 11 ,
wherein the proof-of-insurance credential is a vehicle proof-of-insurance credential, and
wherein the vehicle proof-of-insurance credential includes insurance description information including at least a policy number, a named insured, a policy effective date, a policy expiration data, a vehicle identification number, a vehicle make and a vehicle year.
13. The computing system of claim 11 ,
wherein the proof-of-insurance credential is a homeowners' proof-of-insurance credential, and
wherein the homeowners' proof-of-insurance credential includes insurance description information including at least a policy number, a named insured, a policy effective date, a policy expiration date, a coverage limit, a liability limit, a deductible and a policy premium.
14. The computing system of claim 8 ,
wherein the cryptographic key is a public key, and
wherein the security data includes a session cookie identifying an authenticated web session of the user.
15. A non-transitory computer-readable medium having stored thereon computer-executable instructions, that when executed, cause a computer to:
obtain, in response to a user scan action of a user with respect to a graphical user interface scan element displayed on a mobile computing device, via a camera device of the mobile computing device, a scanned image of a quick response code;
process the scanned image of the quick response code to extract code information including a uniform resource identifier to establish a decentralized identifier (DID) protocol, wherein establishing the DID protocol includes determining the DID protocol from among a plurality of DID protocols based upon at least a portion of the uniform resource identifier;
transmit a DID communication request to a software agent of an issuing party according to the DID protocol, the DID communication request including at least a cryptographic key of the user and security data;
receive an attestation response from the software agent including at least one cryptographically-signed credential; and
store, in response to a user accept action with respect to a graphical user interface accept element displayed on the mobile computing device, the cryptographically-signed credential in an electronic database of a digital wallet application in a memory of the mobile computing device.
16. The non-transitory computer-readable medium of claim 15 , having stored thereon further computer-executable instructions, that when executed, cause a computer to:
transmit a verification request to a service provider;
receive, in response to the transmitting, a credential proof request from the service provider, the credential proof request including one or more credential proof parameters;
display a proof request graphical user interface including the one or more credential proof parameters; and
transmit, in response to a user present credentials action with respect to a graphical user interface present credentials element, one or more credentials of the user to the service provider, the one or more credentials corresponding to the one or more credential proof parameters.
17. The non-transitory computer-readable medium of claim 16 , having stored thereon further computer-executable instructions, that when executed, cause a computer to:
receive an electronic form including at least one field including values corresponding to the credential proof parameters; and
cause, in response to receiving a user submission of the electronic form, the electronic form to be transmitted to the service provider, to complete a decentralized identity checkout process.
18. The non-transitory computer-readable medium of claim 15 , wherein the cryptographically-signed credential is a proof-of-insurance credential.
19. The non-transitory computer-readable medium of claim 18 ,
wherein the proof-of-insurance credential is a vehicle proof-of-insurance credential, and
wherein the vehicle proof-of-insurance credential includes insurance description information including at least a policy number, a named insured, a policy effective date, a policy expiration data, a vehicle identification number, a vehicle make and a vehicle year.
20. The non-transitory computer-readable medium of claim 18 ,
wherein the proof-of-insurance credential is a homeowners' proof-of-insurance credential, and
wherein the homeowners' proof-of-insurance credential includes insurance description information including at least a policy number, a named insured, a policy effective date, a policy expiration date, a coverage limit, a liability limit, a deductible and a policy premium.