Zero-knowledge identity verification in a distributed computing system
Assigneesalesforce.com, inc.
InventorsHal Scott Hildebrand, Prithvi Krishnan Padmanabhan
Life of this patent
Estimating the term…
Abstract
For each data value associated with a data object, a respective object value identification query message that includes the data value may be sent to each of a plurality of identity nodes via a network. For each of the data values, a respective object value identification response message that includes a respective network identifier corresponding with the respective data value may be received. A local identifier may be determined based on the object value identification response messages, and a response query message including the local identifier may be transmitted.
Claims14
A method comprising:
- receiving via a communications interface a request to identify a data object that includes a first plurality of data values;
- for each of the first plurality of data values, transmitting a respective object value identification query message that includes the data value to each of a plurality of identity nodes via a gossip communication protocol defining a peer-to-peer procedure for transmitting information among the plurality of identity nodes;
- for each of the first plurality of data values, receiving a respective object value identification response message that includes a respective network identifier corresponding with the respective data value, wherein the respective network identifier is stored in a trust ledger shared among the plurality of identity nodes, the respective network identifier being associated in the trust ledger with a respective second one or more data values;
- determining via a processor a local identifier based on the object value identification response messages, wherein the local identifier is selected by identifying a designated network identifier as the most common network identifier among the object value identification response messages;
- and
- transmitting a query response message including the local identifier via the communications interface.
A database system implemented via a server system comprising:
- a communications interface operable to:
- receive a request to identify a data object that includes a first plurality of data values,
- for each of the first plurality of data values, transmit a respective object value identification query message that includes the data value to each of a plurality of identity nodes via a gossip communication protocol defining a peer-to-peer procedure for transmitting information among the plurality of identity nodes, and
- for each of the first plurality of data values, receive a respective object value identification response message that includes a respective network identifier corresponding with the respective data value, wherein the respective network identifier is stored in a trust ledger shared among the plurality of identity nodes, the respective network identifier being associated in the trust ledger with a respective second one or more data values;
- and
- a processor operable to:
- determine a local identifier based on the object value identification response messages, wherein the local identifier is selected by identifying a designated network identifier as the most common network identifier among the object value identification response messages, and
- instruct the communications interface to transmit a query response message including the local identifier via the communications interface.
A computer program product comprising computer-readable program code capable of being executed by one or more processors when retrieved from a non-transitory computer-readable medium, the program code configurable to cause:
- processing a request received via a communications interface to identify a data object that includes a first plurality of data values;
- for each of the first plurality of data values, transmitting a respective object value identification query message that includes the data value to each of a plurality of identity nodes via a gossip communication protocol defining a peer-to-peer procedure for transmitting information among the plurality of identity nodes;
- for each of the first plurality of data values, receiving a respective object value identification response message that includes a respective network identifier corresponding with the respective data value, wherein the respective network identifier is stored in a trust ledger shared among the plurality of identity nodes, the respective network identifier being associated in the trust ledger with a respective second one or more data values;
- determining via a processor a local identifier based on the object value identification response messages, wherein the local identifier is selected by identifying a designated network identifier as the most common network identifier among the object value identification response messages;
- and
- transmitting a query response message including the local identifier via the communications interface.
Dependencies are inferred from the claim text.