Method and system for blockchain-based combined identity, ownership, integrity and custody management

A method of issuing blockchain-based digital certificates comprising:

• receiving from a user a user certification record address, hashed user identification information that has been signed with a private key of the user defined as received user identification information, hashed object information defined as received object information, and a user public key;
• recording to a digital certificate smart contract deployed at a digital certificate smart contract address on a blockchain network the received user identification information and the received object information and a timestamp of when the received user identification information and the received object information were received, defined as a received timestamp;
• signing the digital certificate smart contract with an issuer signature;
• performing a user validation process comprising:
• obtaining each of a sealed user record address, a sealed verification record address, and a token from a user certification record address at the user certification record address;
• retrieving hashed user identification information from a sealed user record at the sealed user record address, defining retrieved user identification information;
• decrypting the received user identification information using the user public key, defining decrypted user identification information;
• comparing the decrypted user identification information with the retrieved user identification information;
• retrieving a hashed verification record from a sealed verification record at the sealed verification record address, defining a retrieved verification record;
• determining if the token from the user certification record address is valid;
• upon determining the token from the user certification record address is valid, generating a generated verification record comprising the retrieved user identification information and the token;
• generating a hashed verification record by applying a hash function to the generated verification record;
• comparing the hashed verification record with the retrieved verification record;
• and
• confirming a user identity by determining the decrypted user identification information and the retrieved user identification information are at least a partial match and the hashed verification record and the retrieved verification record are at least a partial match;
• upon confirming the user identity, generating a combination certificate comprising the user's certification record address, the object information, and the timestamp, configured to be shared by the user to verify the user's ownership of an object associated with the object information;
• generating a combination certificate hash value from a hash function including the combination certificate as an input;
• encrypting the combination certificate hash value with an issuer private key, defining an issuer signature;
• signing the combination certificate with the issuer signature, defining a signed combination certificate;
• recording the signed combination certificate to the digital certificate smart contract;
• and
• sending the combination certificate to the user.

A system for issuing blockchain-based digital certificates comprising:

• a processor;
• a data store positioned in communication with the processor;
• and
• a network communication device positioned in communication with each of the processor, the data store, and a network;
• wherein the network communication device is operable to receive from a user hashed user identification information, object information, and a user public key;
• wherein the processor is operable to record to a digital certificate smart contract deployed at a digital certificate smart contract address on a blockchain network the hashed user identification information and object information and a timestamp of when the hashed user identification information and the object information were received, defined as a received timestamp;
• wherein the processor is operable to sign the digital certificate smart contract with an issuer signature;
• wherein the system is operable to perform a user identity verification process to confirm a user identity, comprising:
• the network communication device obtaining each of a sealed user record address, a sealed verification record address, and a token from a user certification record address at the user certification record address;
• the network communication device retrieving hashed user identification information from a sealed user record at the sealed user record address, defining retrieved user identification information;
• the processor decrypting the received user identification information using the user public key, defining decrypted user identification information;
• the processor comparing the decrypted user identification information with the retrieved user identification information;
• the network communication device retrieving a hashed verification record from a sealed verification record at the sealed verification record address, defining a retrieved verification record;
• the processor determining if the token from the user certification record address is valid;
• upon determining the token from the user certification record address is valid, the processor generating a generated verification record comprising the retrieved user identification information and the token;
• the processor generating a hashed verification record by applying a hash function to the generated verification record;
• the processor comparing the hashed verification record with the retrieved verification record;
• and
• the processor confirming a user identity by determining the decrypted user identification information and the retrieved user identification information are at least a partial match and the hashed verification record and the retrieved verification record are at least a partial match;
• wherein the processor is operable to, upon the user identity being confirmed, generate a combination certificate configured to be shared by the user to verify the user's ownership of an object associated with the object information;
• and
• wherein the network communication device is operable to send the combination certificate to the user.