Decentralized biometric signing of digital contracts
AssigneeInternational Business Machines Corporation
InventorsAnthony M. Butler, Ghada Dulaim, Victor Usobiaga
Life of this patent
Estimating the term…
Abstract
A method and system for decentralized biometric signing of a digital contract. A digital identity including a private key is created. The private key was encrypted on a mobile device via use of captured biometric data. A digital hash of the digital contract is generated. A user using biometric data is authenticated. Usage of the biometric data is authorized. Responsive to the usage of the biometric data being authorized, the encrypted private key is decrypted. The digital hash is signed with the decrypted private key. The signed digital hash is stored in a blockchain.
Claims16
A method for decentralized biometric signing of a digital contract, said method comprising:
- capturing on a mobile device, by one or more processors of a computer system, biometric data from a user;
- storing, by the one or more processors, the captured biometric data on the mobile device;
- encrypting, by the one or more processors, a private key using the captured biometric data;
- storing, on the mobile device by the one or more processors, the encrypted private key, a public key associated with the private key, and a digital identity comprising (i) an identifier associated with the user and the captured biometric data and (ii) a certifier of the identifier;
- generating, by the one or more processors, a digital hash of the digital contract;
- authenticating, by the one or more processors, the user using the captured biometric data;
- authorizing, by the one or more processors, usage of the captured biometric data;
- responsive to the usage of the captured biometric data being authorized, decrypting, by the one or more processors using the captured biometric data, the encrypted private key;
- signing, by the one or more processors, the digital hash with the decrypted private key, which produces a signed digital hash of the digital contract;
- and
- storing in a blockchain, by the one or more processors, the signed digital hash of the digital contract, the digital contract prior to being hashed, the identifier, the certifier of the identifier, the public key, a certification of the public key by a third party, and a record of a successful authentication of the user using the biometric data.
A computer program product, comprising one or more computer readable hardware storage devices having computer readable program code stored therein, each hardware storage device not being a transitory signal, said program code containing instructions executable by one or more processors of a computer system to implement a method for
- capturing on a mobile device, by the one or more processors, biometric data from a user;
- storing, by the one or more processors, the captured biometric data on the mobile device;
- encrypting, by the one or more processors, a private key using the captured biometric data;
- storing, on the mobile device by the one or more processors, the encrypted private key, a public key associated with the private key, and a digital identity comprising (i) an identifier associated with the user and the captured biometric data and (ii) a certifier of the identifier;
- generating, by the one or more processors, a digital hash of the digital contract;
- authenticating, by the one or more processors, the user using the captured biometric data;
- authorizing, by the one or more processors, usage of the captured biometric data;
- responsive to the usage of the captured biometric data being authorized, decrypting, by the one or more processors using the captured biometric data, the encrypted private key;
- signing, by the one or more processors, the digital hash with the decrypted private key, which produces a signed digital hash of the digital contract;
- and
- storing in a blockchain, by the one or more processors, the signed digital hash of the digital contract, the digital contract prior to being hashed, the identifier, the certifier of the identifier, the public key, a certification of the public key by a third party, and a record of a successful authentication of the user using the biometric data.
A computer system, comprising one or more processors, one or more memories, and one or more computer readable hardware storage devices, said one or more hardware storage device storing program code executable by the one or more processors using the one or more memories to implement a method for decentralized biometric signing of a digital contract, said method comprising:
- capturing on a mobile device, by the one or more processors, biometric data from a user;
- storing, by the one or more processors, the captured biometric data on the mobile device;
- encrypting, by the one or more processors, a private key using the captured biometric data;
- storing, on the mobile device by the one or more processors, the encrypted private key, a public key associated with the private key, and a digital identity comprising (i) an identifier associated with the user and the captured biometric data and (ii) a certifier of the identifier;
- generating, by the one or more processors, a digital hash of the digital contract;
- authenticating, by the one or more processors, the user using the captured biometric data;
- authorizing, by the one or more processors, usage of the captured biometric data;
- responsive to the usage of the captured biometric data being authorized, decrypting, by the one or more processors using the captured biometric data, the encrypted private key;
- signing, by the one or more processors, the digital hash with the decrypted private key, which produces a signed digital hash of the digital contract;
- and
- storing in a blockchain, by the one or more processors, the signed digital hash of the digital contract, the digital contract prior to being hashed, the identifier, the certifier of the identifier, the public key, a certification of the public key by a third party, and a record of a successful authentication of the user using the biometric data.
Dependencies are inferred from the claim text.