# US 10,771,251 B1 · Identity management service via virtual passport

> Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt

- Number: US 10,771,251 B1
- Document ID: US10771251B1
- Status: Granted
- Kind: B1
- Application number: 16/412,089
- Filed: 2019-05-14
- Granted: 2020-09-08
- Earliest claimed: 2015-11-10
- Assignees: Wells Fargo Bank, N.A.
- Applicants: Wells Fargo Bank, N.A.
- Inventors: Ashish B. Kurani; Wayne Barakat; Martin Barrs; Dominik Vltavsky
- Web page: https://patentgrep.com/patent/US10771251B1

## CPC

- H04L 9/3226: {using a predetermined code, e.g. password, passphrase or PIN (network architectures or network communication protocols for supporting authentication of entities using passwords in a packet data network H04L63/083)}
- H04L 9/50: {using hash chains, e.g. blockchains or hash trees}
- G06F 21/31: User authentication
- G06F 21/32: using biometric data, e.g. fingerprints, iris scans or voiceprints
- G06F 21/33: using certificates
- H04L 9/3231: {Biological data, e.g. fingerprint, voice or retina (network architectures or network communication protocols for supporting authentication of entities using biometrical features in a packet data network H04L63/0861)}
- H04L 9/3239: {involving non-keyed hash functions, e.g. modification detection codes [MDCs], MD5, SHA or RIPEMD}
- H04L 9/3268: {using certificate validation, registration, distribution or revocation, e.g. certificate revocation list [CRL]}
- H04L 63/0442: {wherein the sending and receiving network entities apply asymmetric encryption, i.e. different keys for encryption and decryption (cryptographic mechanisms or cryptographic arrangements for public-key encryption H04L9/30)}
- H04L 63/08: {for authentication of entities (cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32)}
- H04L 63/083: {using passwords (cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226)}
- H04L 63/0861: {using biometrical features, e.g. fingerprint, retina-scan (cryptographic mechanisms or cryptographic arrangements for entity authentication using biological data H04L9/3231)}
- H04L 63/123: {received data contents, e.g. message integrity}
- H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M)
- G06F: ELECTRIC DIGITAL DATA PROCESSING (computer systems based on specific computational models G06N)

## Abstract

A method includes verifying the identity of an individual. A virtual passport for the individual is created upon verifying the identity of the individual. The virtual passport uniquely identifies the individual. A public/private key pair associated with the individual is generated. The virtual passport is signed with the private key. The signed virtual passport is entered in a public block chain. The signed virtual passport may be retrieved from the public block chain. The authenticity of the signed virtual passport may be determined via the public key.

## Claims

### Claim 1

A computer-implemented method performed by an identity verification computing system, the method comprising:
creating a virtual passport for an individual, the virtual passport uniquely identifying the individual, the virtual passport comprising a first unique identifier generated for the individual and a first verification code, a copy of the first verification code being stored relationally to the first unique identifier;
providing, by the identity verification computing system, a public/private key pair for the individual;
signing the virtual passport with a private key of the public/private key pair;
entering a signed virtual passport in a public block chain, the signed virtual passport being retrievable from the public block chain;
receiving, from an entity computing system, an identity verification request comprising a second unique identifier and a second verification code retrieved from the signed virtual passport stored in the public block chain using a public key of the public/private key pair;
based on a match between the second unique identifier and the first unique identifier, retrieving the copy of the first verification code stored relationally to the first unique identifier;
determining whether the second verification code matches the copy of the first verification code;
when the second verification code matches the copy of the first verification code, transmitting an identity verification approval message to the entity computing system; and
when the second verification code does not match the copy of the first verification code, transmitting an identity verification denial message to the entity computing system;
authenticity of the signed virtual passport being determined via the public key of the public/private key pair, the second unique identifier and the first verification code by, responsive to the identity verification request inclusive of the second verification code retrieved from the signed virtual passport stored in the public block chain using the public key of the public/private key pair, comparing the second verification code to the copy of the first verification code to ensure the match.

### Claim 2 (depends on 1)

The method of claim 1, further comprising:
transmitting, to a computing device of the individual, an identity verification approval request, the identity verification approval request identifying the entity computing system;
receiving, from the computing device in response to the identity verification approval request, an identity verification approval indicator; and
transmitting the identity verification approval indicator to the entity computing system.

### Claim 3 (depends on 2)

The method of claim 2, the identity verification approval indicator received from the computing device further comprising at least one of a password and a biometric.

### Claim 4 (depends on 1)

The method of claim 1, the signed virtual passport being indexed in the public block chain via the public key.

### Claim 5 (depends on 1)

The method of claim 1, the signed virtual passport being indexed in the public block chain via the first unique identifier.

### Claim 6 (depends on 1)

The method of claim 1, the identity verification computing system being a financial institution at which the individual holds a financial account, and the virtual passport being created using customer identification data associated with the individual's financial account.

### Claim 7 (depends on 1)

The method of claim 1, storing a public virtual passport entry in the block chain comprising producing a valid proof of work.

### Claim 8 (depends on 1)

The method of claim 1, further comprising recording a result of the identity verification request to the public block chain.

### Claim 9 (depends on 1)

The method of claim 1, further comprising encrypting identifying information of the individual included in the virtual passport prior to entering the signed virtual passport in the public block chain.

### Claim 10

A system comprising a processor and instructions stored in non-transitory machine-readable media, the instructions configured to cause the system to:
create a virtual passport for an individual, the virtual passport uniquely identifying the individual, the virtual passport comprising a first unique identifier generated for the individual and a first verification code, a copy of the first verification code being stored relationally to the first unique identifier;
provide a public/private key pair for the individual;
sign the virtual passport with a private key of the public/private key pair;
enter a signed virtual passport in a public block chain, the signed virtual passport being retrievable from the public block chain;
receive, from an entity computing system, an identity verification request comprising a second unique identifier and a second verification code retrieved from the signed virtual passport stored in the public block chain using a public key of the public/private key pair;
based on a match between the second unique identifier and the first unique identifier, retrieve the copy of the first verification code stored relationally to the first unique identifier;
determine whether the second verification code matches the copy of the first verification code;
when the second verification code matches the copy of the first verification code, transmit an identity verification approval message to the entity computing system; and
when the second verification code does not match the copy of the first verification code, transmit an identity verification denial message to the entity computing system;
authenticity of the signed virtual passport being determined via the public key of the public/private key pair, the second unique identifier and the first verification code, by, responsive to the identity verification request inclusive of the second verification code retrieved from the signed virtual passport stored in the public block chain using the public key of the public/private key pair, comparing the second verification code to the copy of the first verification code to ensure the match.

### Claim 11 (depends on 10)

The system of claim 10, wherein the instructions are further configured to cause the system to:
transmit, to a computing device of the individual, an identity verification approval request, the identity verification approval request identifying the entity computing system;
receive, from the computing device in response to the identity verification approval request, an identity verification approval indicator; and
transmit the identity verification approval indicator to the entity computing system.

### Claim 12 (depends on 11)

The system of claim 11, the identity verification approval indicator received from the computing device further comprising at least one of a password and a biometric provided by the individual.

### Claim 13 (depends on 10)

The system of claim 10, the signed virtual passport being indexed in the public block chain via the public key.

### Claim 14 (depends on 10)

The system of claim 10, the signed virtual passport being indexed in the public block chain via the first unique identifier.

### Claim 15 (depends on 10)

The system of claim 10, the system being associated with a financial institution at which the individual holds a financial account, and the virtual passport being created using customer identification data associated with the individual's financial account.

### Claim 16 (depends on 10)

The system of claim 10, storing a public virtual passport entry in the block chain comprising producing a valid proof of work.

### Claim 17 (depends on 10)

The system of claim 10, the instructions being further configured to record a result of the identity verification request to the public block chain.

### Claim 18

An identity verification computing system, comprising:
a network interface;
a secure identity database;
a memory; and
at least one processor configured to:
create a virtual passport for an individual, the virtual passport uniquely identifying the individual, the virtual passport comprising a first unique identifier generated for the individual and a first verification code, a copy of the first verification code being stored in the secure identity database relationally to the first unique identifier;
sign the virtual passport with a private key of a public/private key pair;
enter a signed virtual passport in a public block chain, wherein the signed virtual passport is retrievable from the public block chain;
receive, from an entity computing system, an identity verification request comprising a second unique identifier and a second verification code retrieved from the signed virtual passport stored in the public block chain using a public key of the public/private key pair;
based on a match between the second unique identifier and the first unique identifier, retrieve the copy of the first verification code stored relationally to the first unique identifier;
determine whether the second verification code matches the copy of the first verification code;
when the second verification code matches the copy of the first verification code, transmit an identity verification approval message to the entity computing system; and
when the second verification code does not match the copy of the first verification code, transmit an identity verification denial message to the entity computing system;
authenticity of the signed virtual passport being determined via the public key of the public/private key pair, the second unique identifier and the first verification code by, responsive to the identity verification request inclusive of the second verification code retrieved from the signed virtual passport stored in the public block chain using the public key of the public/private key pair, comparing the second verification code to the copy of the first verification code to ensure the match.

### Claim 19 (depends on 18)

The system of claim 18, wherein the processor is further configured to:
transmit, to a computing device of the individual, an identity verification approval request, the identity verification approval request identifying the entity computing system;
receive, from the computing device in response to the identity verification approval request, an identity verification approval indicator; and
transmit the identity verification approval indicator to the entity computing system.

### Claim 20 (depends on 19)

The system of claim 19, the identity verification approval indicator received from the computing device further comprising at least one of a password and a biometric provided by the individual.

### Claim 21 (depends on 18)

The system of claim 18, the signed virtual passport being indexed in the public block chain via the public key.

### Claim 22 (depends on 18)

The system of claim 18, the signed virtual passport being indexed in the public block chain via the first unique identifier.

### Claim 23 (depends on 18)

The system of claim 18, the system being a financial institution at which the individual holds a financial account, and the virtual passport being created using customer identification data associated with the individual's financial account.

### Claim 24 (depends on 18)

The system of claim 18, storing a public virtual passport entry in the block chain comprising producing a valid proof of work.

### Claim 25 (depends on 18)

The system of claim 18, the processor being further configured to record a result of the identity verification request to the public block chain.

### Claim 26

A computer-implemented method performed by an entity computing system, the method comprising:
receiving a public key from a computing system associated with an individual, the public key being part of a public/private key pair provided by an identity verification computing system in connection with creating a virtual passport for the individual, the virtual passport comprising identifying information, a unique identifier generated for the individual and a first verification code generated as part of creating the virtual passport and included in the virtual passport, a copy of the first verification code being stored in a secure identity database of the identity verification computing system relationally to the unique identifier;
creating the virtual passport, comprising:
generating, by an identity verification circuit of the identity verification computing system, the public/private key pair,
storing, by the identity verification circuit of the identity verification computing system, a private key of the public/private key pair in the secure identity database of the identity verification computing system,
transmitting, by the identity verification circuit of the identity verification computing system, the public key of the public/private key pair to a computing device of the individual, and
signing the virtual passport with the private key retrieved from the secure identity database;
retrieving the virtual passport from a public block chain via the public key, the virtual passport having been signed by the private key of the public/private key pair; and
verifying authenticity of a signed virtual passport using the unique identifier and the first verification code, comprising:
transmitting, to the identity verification computing system, an identity verification request comprising the unique identifier and a second verification code received from the individual; and
receiving, from the identity verification computing system, an identity verification approval message generated in response to determining that the first verification code matches the second verification code.

### Claim 27 (depends on 26)

The method of claim 26, further comprising:
receiving, from the identity verification computing system, an identity verification approval indicator, the identity verification approval indicator transmitted in response to the identity verification computing system receiving identity verification approval from the computing device of the individual.

### Claim 28 (depends on 27)

The method of claim 27, the identity verification approval indicator being received from the computing device of the individual further includes at least one of a password and a biometric provided by the individual.