Back to results
US 10,897,356 B2Granted
System and method for creating decentralized identifiers
AssigneeAdvanced New Technologies Co., Ltd.
InventorsJiawei Liu, Renhui Yang, Yuan Chen, Yuqi Lin
Life of this patent
Estimating the term…
Abstract
Methods, systems, and apparatus, including computer programs encoded on computer storage media, for decentralized-identifier creation. One of the methods includes: receiving a request for obtaining a decentralized identifier (DID), wherein the request comprises an account identifier; obtaining, in response to receiving the request, a public key of a cryptographic key pair; obtaining the DID based on the public key; and storing a mapping relationship between the account identifier and the obtained DID.
Claims20
A computer-implemented method for decentralized-identifier creation, comprising:
- receiving, by a server system, a request from a first entity for obtaining a new decentralized identifier (DID) for a second entity, wherein the request comprises an account identifier corresponding to the second entity and a proof of identity authentication of the second entity;
- determining, by the server system, an existing DID associated with the first entity based on the request;
- determining, by the server system, that the first entity is trusted to provide the proof of identity authentication of the second entity based on a verifiable claim associated with the first entity, wherein the verifiable claim comprises the existing DID associated with the first entity;
- generating, by the server system in response to the determining the existing DID associated with the first entity and the determining that the first entity is trusted to provide the proof of identity authentication of the second entity, a cryptographic key pair associated with the second entity comprising a public key and a private key;
- sending, by the server system to a blockchain node associated with a blockchain, a first blockchain transaction for creating the new DID for the blockchain node to add to the blockchain;
- creating, by the server system based on the public key, a DID document associated with the new DID, wherein the DID document comprises:
- the existing DID associated with the first entity,
- the proof of identity authentication of the second entity, and
- the public key of the cryptographic key pair associated with the second entity;
- generating, by the server system, a second blockchain transaction for adding the DID document to the blockchain;
- signing, by the server system, the second blockchain transaction using the private key of the cryptographic key pair associated with the second entity;
- sending, by the server system to a blockchain node associated with the blockchain, the signed second blockchain transaction for the blockchain node to add to the blockchain;
- and
- storing, by the server system, a mapping relationship between the account identifier and the new DID.
11 more elements
A non-transitory computer-readable storage medium for decentralized-identifier creation, configured with instructions executable by one or more processors to cause the one or more processors to perform operations comprising:
- receiving a request from a first entity for obtaining a new decentralized identifier (DID) for a second entity, wherein the request comprises an account identifier corresponding to the second entity and a proof of identity authentication of the second entity;
- determining an existing DID associated with the first entity based on the request;
- determining that the first entity is trusted to provide the proof of identity authentication of the second entity based on a verifiable claim associated with the first entity, wherein the verifiable claim comprises the existing DID associated with the first entity;
- generating, in response to the determining the existing DID associated with the first entity and the determining that the first entity is trusted to provide the proof of identity authentication of the second entity, a cryptographic key pair associated with the second entity comprising a public key and a private key;
- sending, to a blockchain node associated with a blockchain, a first blockchain transaction for creating the new DID for the blockchain node to add to the blockchain;
- creating, based on the public key, a DID document associated with the new DID, wherein the DID document comprises:
- the existing DID associated with the first entity,
- the proof of identity authentication of the second entity, and
- the public key of the cryptographic key pair associated with the second entity;
- generating a second blockchain transaction for adding the DID document to the blockchain;
- signing the second blockchain transaction using the private key of the cryptographic key pair associated with the second entity;
- sending, to a blockchain node associated with the blockchain, the signed second blockchain transaction for the blockchain node to add to the blockchain;
- and
- storing a mapping relationship between the account identifier and the new DID.
11 more elements
A system for decentralized-identifier creation, comprising a processor and a non-transitory computer-readable storage medium storing instructions executable by the processor to cause the system to perform operations comprising:
- receiving a request from a first entity for obtaining a new decentralized identifier (DID) for a second entity, wherein the request comprises an account identifier corresponding to the second entity and a proof of identity authentication of the second entity;
- determining an existing DID associated with the first entity based on the request;
- determining that the first entity is trusted to provide the proof of identity authentication of the second entity based on a verifiable claim associated with the first entity, wherein the verifiable claim comprises the existing DID associated with the first entity;
- generating, in response to the determining the existing DID associated with the first entity and the determining that the first entity is trusted to provide the proof of identity authentication of the second entity, a cryptographic key pair associated with the second entity comprising a public key and a private key;
- sending, to a blockchain node associated with a blockchain, a first blockchain transaction for creating the new DID for the blockchain node to add to the blockchain;
- creating, based on the public key, a DID document associated with the new DID, wherein the DID document comprises:
- the existing DID associated with the first entity,
- the proof of identity authentication of the second entity, and
- the public key of the cryptographic key pair associated with the second entity;
- generating a second blockchain transaction for adding the DID document to the blockchain;
- signing the second blockchain transaction using the private key of the cryptographic key pair associated with the second entity;
- sending, to a blockchain node associated with the blockchain, the signed second blockchain transaction for the blockchain node to add to the blockchain;
- and
- storing a mapping relationship between the account identifier and the new DID.
11 more elements
Dependencies are inferred from the claim text.