Systems and methods for managing relationships among digital identities

A system, comprising:

• at least one computer processor;
• and
• at least one non-transitory computer-readable medium having encoded thereon instructions which, when executed, cause the at least one computer processor to perform a method, the method comprising:
• receiving an access request to access a first entity, wherein the first entity comprises an identifiable object or a physical space;
• identifying, based at least in part on the access request, a pointer associated with a second entity attempting to access the first entity;
• using the pointer associated with the second entity to access, from a distributed ledger system, at least one attestation for at least one attribute of the second entity, wherein the at least one attestation is movable between at least two states in the distributed ledger system, the at least two states comprising a state indicating that the at least one attribute of the second entity has been verified;
• determining whether the at least one attestation is in the state indicating that the at least one attribute of the second entity has been verified;
• determining whether to trust a third entity indicated as being responsible for verifying the at least one attribute of the second entity;
• determining whether a cryptographic proof in the at least one attestation is a valid proof of at least one value of the at least one attribute of the second entity, wherein the at least one value of the at least one attribute comprises at least one privilege label of the second entity;
• determining whether one or more access rules of the first entity are satisfied, at least in part by applying at least one access rule of the one or more access rules to the at least one privilege label of the second entity;
• and
• allowing the second entity to access the first entity in response to determining:
• (i) that the at least one attestation is in the state indicating that the at least one attribute of the second entity has been verified, (ii) that the third entity is to be trusted for verifying the at least one attribute of the second entity, (iii) that the cryptographic proof is a valid proof of the at least one privilege label of the second entity, and (iv) that the one or more access rules of the first entity are satisfied.

At least one non-transitory computer-readable medium having encoded thereon instructions which, when executed by at least one computer processor, cause the at least one computer processor to perform a method, the method comprising:

• receiving an access request to access a first entity, wherein the first entity comprises an identifiable object or a physical space;
• identifying, based at least in part on the access request, a pointer associated with a second entity attempting to access the first entity;
• using the pointer associated with the second entity to access, from a distributed ledger system, at least one attestation for at least one attribute of the second entity, wherein the at least one attestation is movable between at least two states in the distributed ledger system, the at least two states comprising a state indicating that the at least one attribute of the second entity has been verified;
• determining whether the at least one attestation is in the state indicating that the at least one attribute of the second entity has been verified;
• determining whether to trust a third entity indicated as being responsible for verifying the at least one attribute of the second entity;
• determining whether a cryptographic proof in the at least one attestation is a valid proof of at least one value of the at least one attribute of the second entity, wherein the at least one value of the at least one attribute comprises at least one privilege label of the second entity;
• determining whether one or more access rules of the first entity are satisfied, at least in part by applying at least one access rule of the one or more access rules to the at least one privilege label of the second entity;
• and
• allowing the second entity to access the first entity in response to determining:
• (i) that the at least one attestation is in the state indicating that the at least one attribute of the second entity has been verified, (ii) that the third entity is to be trusted for verifying the at least one attribute of the second entity, (iii) that the cryptographic proof is a valid proof of the at least one privilege label of the second entity, and (iv) that the one or more access rules of the first entity are satisfied.