Authorization code for access
A method for sharing digital identity data, the method comprising, using the identity network, receiving an indication of consent from a user device to share a plurality of identity attributes with a relying party, wherein the plurality of identity attributes are associated with a user of the user device, generating an internal authorization code after receiving the consent, providing the internal authorization code to the user device, receiving the internal authorization code from the relying party, in response to receiving the internal authorization code, providing an internal access token to the relying party, receiving the internal access token from the relying party, and in response to receiving the access token, providing the plurality of identity attributes to the relying party.
1 . A method for sharing digital identity data, the method comprising, using an identity network:
receiving an indication of consent from a user device to share a plurality of identity attributes with a relying party, wherein the plurality of identity attributes are associated with a user of the user device;
receiving, from a selected identity provider, an identity provider authorization code that indicates that the selected identity provider authorizes the identity network to access the plurality of identity attributes from the selected identity provider;
generating an internal authorization code after receiving the consent;
providing the internal authorization code to the user device;
receiving the internal authorization code from the relying party;
in response to receiving the internal authorization code, providing an internal access token to the relying party;
receiving the internal access token from the relying party;
providing the identity provider authorization code to the selected identity provider;
in response to providing the identity provider authorization code, retrieving the plurality of identity attributes from the selected identity provider; and
in response to receiving the access token, providing the plurality of identity attributes to the relying party.
2 . The method of claim 1 , further comprising:
receiving a sign-up request for the user from the relying party;
displaying, within a user interface of a user device, a list of identity providers;
receiving a selection of the selected identity provider from the list of identity providers;
in response to receiving the selection, causing the user interface to display a login page associated with the selected identity provider; and
receiving a validation of authentication of the user.
3 . The method of claim 2 , further comprising:
receiving, from the identity provider, a plurality of identity attributes associated with the user; and
in response to receiving the validation, displaying, within the user interface, the plurality of identity attributes associated with the user.
4 . The method of claim 1 , wherein the identity provider authorization code is received after or during receipt of the consent from the user device.
5 . The method of claim 1 , wherein:
providing the plurality of identity attributes to the relying party comprises encrypting the plurality of identity attributes and transmitting the plurality of identity attributes to the relying party.
6 . The method of claim 1 , wherein:
the plurality of identity attributes comprise at least one identity attribute selected from a group comprising of a name of the user, an address of the user, a telephone number of the user, an email address of the user, a gender of the user, a birthdate of the user, a peer to peer payment account token of the user, a driver's license number of the user, and a social security number of the user.
7 . An identity network for sharing digital identity data, comprising:
one or more processors; and
a memory having stored thereon instructions that, upon execution by the one or more processors, cause the one or more processors to:
receive consent from a user device to share a plurality of identity attributes with a relying party, wherein the plurality of identity attributes are associated with a user of the user device;
receive, from a selected identity provider, an identity provider authorization code that indicates that the selected identity provider authorizes the identity network to access the plurality of identity attributes from the selected identity provider;
generate an internal authorization code after receiving the consent;
provide the internal authorization code to the user device;
receive the internal authorization code from the relying party;
in response to receiving the internal authorization code, provide an access token to the relying party;
receive the access token from the relying party;
provide the identity provider authorization code to the selected identity provider;
in response to providing the identity provider authorization code, retrieve the plurality of identity attributes from the selected identity provider; and
in response to receiving the access token, provide the plurality of identity attributes to the relying party.
8 . The identity network for sharing digital identity data of claim 7 , wherein the instructions further cause the one or more processors to:
receive a sign-up request for the user from the relying party;
display within a user interface of a user device, a list of identity providers;
receive a selection of the selected identity provider from the list of identity providers;
in response to receiving the selection, cause the user interface to display a login page associated with the selected identity provider; and
receive a validation of authentication of the user.
9 . The identity network for sharing digital identity data of claim 8 , wherein the instructions further cause the one or more processors to:
receive from the identity provider, the plurality of identity attributes associated with the user; and
in response to receiving the validation, display the plurality of identity attributes associated with the user within the user interface.
10 . The identity network for sharing digital identity data of claim 7 , wherein:
providing the plurality of identity attributes to the relying party comprises encrypting the plurality of identity attributes and transmitting the plurality of identity attributes to the relying party.
11 . The identity network for sharing digital identity data of claim 7 , wherein:
the plurality of identity attributes comprise at least one identity attribute selected from a group comprising of a name of the user, an address of the user, a telephone number of the user, an email address of the user, a gender of the user, a birthdate of the user, a peer to peer payment account token of the user, a driver's license number of the user, and a social security number of the user.
12 . The identity network for sharing digital identity data of claim 7 , wherein the identity provider authorization code is received after or during receipt of the consent from the user device.
13 . A non-transitory computing-device readable storage medium on which computing-device readable instructions of a program are stored, the instructions, when executed by one or more computing devices of an identity network, causing the one or more computing devices to perform a method, comprising:
receiving an indication of consent from a user device to share a plurality of identity attributes with a relying party, wherein the plurality of identity attributes are associated with a user of the user device;
receiving, from a selected identity provider, an identity provider authorization code that indicates that the selected identity provider authorizes the identity network to access the plurality of identity attributes from the selected identity provider;
generating an internal authorization code after receiving the consent;
providing the internal authorization code to the user device;
receiving the internal authorization code from the relying party;
in response to receiving the internal authorization code, providing an internal access token to the relying party;
receiving the internal access token from the relying party;
providing the identity provider authorization code to the selected identity provider;
in response to providing the identity provider authorization code, retrieving the plurality of identity attributes from the selected identity provider; and
in response to receiving the access token, providing the plurality of identity attributes to the relying party.
14 . The non-transitory computing-device readable storage medium of claim 13 , further comprising:
receiving a sign-up request for the user from the relying party;
displaying, within a user interface of a user device, a list of identity providers;
receiving a selection of the selected identity provider from the list of identity providers;
in response to receiving the selection, causing the user interface to display a login page associated with the selected identity provider; and
receiving a validation of authentication of the user.
15 . The non-transitory computing-device readable storage medium of claim 14 , further comprising:
receiving, from the identity provider, a plurality of identity attributes associated with the user; and
in response to receiving the validation, displaying, within the user interface, the plurality of identity attributes associated with the user.
16 . The non-transitory computing-device readable storage medium of claim 13 , wherein:
providing the plurality of identity attributes to the relying party comprises encrypting the plurality of identity attributes and transmitting the plurality of identity attributes to the relying party.
17 . The non-transitory computing-device readable storage medium of claim 13 , wherein:
the plurality of identity attributes comprise at least one identity attribute selected from a group comprising of a name of the user, an address of the user, a telephone number of the user, an email address of the user, a gender of the user, a birthdate of the user, a peer to peer payment account token of the user, a driver's license number of the user, and a social security number of the user.