Self-sovereign identification via digital credentials for identity attributes
Disclosed are example methods, systems, and devices that allow for the generation and provisioning of digital credentials, which may demonstrate that a trusted entity has validated individual identity attributes, or sets of attributes, of a user. Digital credentials may also demonstrate one or more extrapolations resulting from deductions or inductions from validated identity attributes. A receiver device may indicate which identity attributes or extrapolations are sought by displaying a QR or other code and/or via a transmission using NFC or other wireless communication, and a user device may access corresponding digital attributes in an ID wallet to be provisioned via code or transmission. Digital credentials may restrict uses and usability of identity attributes. Cryptographic keys and/or distributed ledger records may allow recipients to verify authenticity of digital credentials. The same identity attribute may be proven by showing validation by multiple selectable trusted entities.
1 . A method implemented via a mobile device running a mobile application having access to a first digital credential and a second digital credential, the method comprising:
receiving, by the mobile device from a receiver device, a first signal indicative of a request to prove an identity attribute;
displaying, by the mobile device, via one or more user interfaces of the mobile computing device, a graphical user interface (GUI) comprising a plurality of selectable digital credentials, wherein the GUI presents a first digital credential and a second digital credential, wherein both the first digital credential and the second digital credential attest to the identity attribute to be proven to the receiver device, the first digital credential having been validated by a first trusted entity and the second digital credential having been validated by a second trusted entity distinct from the first trusted entity;
receiving, by the mobile device, via the one or more user interfaces of the mobile computing device, a second signal indicating selection of at least one of the plurality of selectable digital credentials in the GUI; and
provisioning, by the mobile device to the receiver device, the at least one of the plurality of selectable digital credentials based on the second signal.
2 . The method of claim 1 , wherein the provisioned digital credential is the first digital credential, the method further comprising provisioning, by the mobile device to the receiver device, the second digital credential.
3 . The method of claim 1 , wherein the GUI is configured to allow a user to select from among multiple digital certificates of multiple trusted entities for proving multiple identity attributes to the receiver device.
4 . The method of claim 1 , wherein the first signal is a code displayed on a display screen of the receiver device, and wherein receiving the first signal comprises scanning the displayed code using an imager of the mobile device.
5 . The method of claim 4 , wherein the code is a QR code displayed by the receiver device, and wherein determining that the QR code includes the request for the identity attribute comprises deciphering the QR code.
6 . The method of claim 1 , wherein the first signal is a wireless communication transmitted by the receiver device directly to the mobile device.
7 . The method of claim 1 , wherein provisioning the at least one of the plurality of selectable digital credentials comprises generating a code with the at least one of the plurality of selectable digital credentials, and wherein the method further comprises displaying the code via the one or more user interfaces of the mobile device.
8 . The method of claim 1 , wherein provisioning the at least one of the plurality of selectable digital credentials comprises generating a message with the first credential, and wirelessly transmitting the message to the receiver device.
9 . The method of claim 8 , wherein wirelessly transmitting the message comprises directly transmitting the message to the receiver device via near-field communication.
10 . The method of claim 1 , wherein the identity attribute is an extrapolation from data elements of a user.
11 . The method of claim 10 , wherein the extrapolation is a determination, based on a birthdate of the user, as to whether the user has reached a minimum age, and wherein the one or more provisioned digital credential attest to the user having reached the minimum age.
12 . The method of claim 11 , further comprising displaying, by the mobile device, an image of the user, an icon indicating that the user is at least the minimum age, and an identification of one or more trusted entities corresponding to the one or more provisioned digital credentials.
13 . A method implemented via a mobile device with access to a plurality of digital credentials, the method comprising:
presenting, by the mobile device, a first graphical user interface (GUI) via one or more user interfaces of the mobile device, the first GUI comprising selectable identity attributes;
detecting, by the mobile device, one or more selections of one or more of the identity attributes;
presenting, by the mobile device, a second GUI via the one or more user interfaces, the second GUI comprising selectable digital credentials identified for proving validation of the selected identity attributes;
detecting, by the mobile device, one or more selections of one or more of the digital credentials; and
provisioning, by the mobile device to a receiver device, the one or more selected digital credentials.
14 . The method of claim 13 , wherein the second GUI comprises a first digital credential corresponding to validation of an identity attribute by a first trusted entity, and a second digital credential corresponding to validation of the same identity attribute by a second trusted entity.
15 . The method of claim 13 , further comprising generating a QR code with the digital credentials selected via the second GUI, wherein provisioning the one or more credentials to the receiver device comprises displaying the QR code for scanning by the receiver device.
16 . The method of claim 13 , wherein provisioning the one or more credentials to the receiver device comprises displaying one or more codes via the one or more user interfaces of the mobile device, the one or more codes comprising the one or more credentials attesting to the selected identity attributes.
17 . The method of claim 13 , wherein provisioning the one or more credentials to the receiver device comprises wirelessly transmitting, to the receiver device by the mobile device, the one or more credentials attesting to the selected identity attributes.
18 . A mobile device with access to multiple digital credentials validated by multiple trusted entities, the mobile device comprising:
a wireless communications interface;
an imager configured to detect ambient imagery;
one or more user interfaces configured for visually presenting graphical elements and receiving user inputs, the one or more user interfaces comprising a display device; and
a processor configured to:
receive, via at least one of the wireless communications interface or the imager, a request for one or more identity attributes;
identify a plurality of digital credentials that attest to the one or more identity attributes, the plurality of digital credentials having been validated by multiple trusted entities;
display, via the one or more user interfaces, a graphical user interface (GUI) comprising the plurality of digital credentials that attest to the identity attributes, wherein one or more of the plurality of digital credentials are selectable via the one or more user interfaces;
receive, via the one or more user interfaces, a selection of one or more of the plurality of digital credentials presented by the GUI; and
provision to the receiver device, via at least one of the wireless communications interface or the one or more user interfaces, the selected one or more digital credentials attesting to the one or more identity attributes corresponding to the request.
19 . The device of claim 18 , wherein receiving the request comprises detecting, using the imager, a code identifying the one or more identity attributes being requested.
20 . The device of claim 18 , wherein provisioning the selected one or more digital credentials comprises displaying at least one of:
one or more of the requested identity attributes; or
one or more machine-readable codes which, when scanned and analyzed by the receiver device, reveal one or more of the requested identity attributes.