# US 11,115,207 B2 · Identity systems, methods, and media for auditing and notifying users concerning verifiable claims > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 11,115,207 B2 - Document ID: US11115207B2 - Status: Granted - Kind: B2 - Application number: 16/704,544 - Filed: 2019-12-05 - Published: 2020-06-11 - Granted: 2021-09-07 - Earliest claimed: 2018-12-05 - Assignees: Sidewalk Labs LLC - Applicants: Sidewalk Labs LLC - Inventors: David Stein; John Wittrock - Web page: https://patentgrep.com/patent/US11115207B2 ## CPC - H04L 9/0894: {Escrow, recovery or storing of secret information, e.g. secret key escrow or cryptographic key storage} - H04L 9/3239: {involving non-keyed hash functions, e.g. modification detection codes [MDCs], MD5, SHA or RIPEMD} - H04L 9/0825: {using asymmetric-key encryption or public key infrastructure [PKI], e.g. key signature or public key certificates} - H04L 9/321: {involving a third party or a trusted authority} - H04L 9/50: {using hash chains, e.g. blockchains or hash trees} - H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M) ## Abstract Identity systems, methods, and media for auditing and notifying users concerning verifiable claims are provided. In some embodiments, the method comprises: prior to engaging with a verifier needing information held in escrow on behalf of a holder, receiving a request to store the information associated with the holder in escrow; causing a user interface to be presented, wherein the user interface allows the holder to select an escrow provider from a plurality of escrow providers for storing the information associated with the holder in escrow; transmitting the information to the selected escrow provider, wherein a public-private key pair for signing with the information associated with the holder is generated, wherein the public-private key pair includes a public key and a private key, wherein the private key and the information associated with the holder is distributed to the plurality of escrow providers, and wherein the public key is transmitted to an auditable ledger system; receiving from each of the plurality of escrow providers, an escrow identifier corresponding to a location where the information is stored in escrow to obtain a set of escrow identifiers; and transmitting the set of escrow identifiers to a verifier device for verifying a claim. ## Claims ### Claim 1 A method for identity escrow, the method comprising: prior to engaging with a verifier needing information held in escrow on behalf of a holder, receiving, using a hardware processor, a request to store the information associated with the holder in escrow; causing, using the hardware processor, a user interface to be presented, wherein the user interface allows the holder to select an escrow provider from a plurality of escrow providers for storing the information associated with the holder in escrow; transmitting, using the hardware processor, the information to the selected escrow provider, wherein a public-private key pair for signing with the information associated with the holder is generated, wherein the public-private key pair includes a public key and a private key, wherein the private key and the information associated with the holder is distributed to the plurality of escrow providers, and wherein the public key is transmitted to an auditable ledger system; receiving, using the hardware processor, from each of the plurality of escrow providers, an escrow identifier corresponding to a location where the information is stored in escrow to obtain a set of escrow identifiers; and transmitting, using the hardware processor, the set of escrow identifiers to a verifier device for verifying a claim. ### Claim 2 (depends on 1) The method of claim 1, further comprising transmitting a request to access a service in which the verifier at the verifier device is accessing the information associated with the holder in escrow using the set of escrow identifiers. ### Claim 3 (depends on 1) The method of claim 1, wherein the information associated with the holder is received from an identity application executing on a computing device associated with the holder and wherein the identity application causes the user interface to be presented. ### Claim 4 (depends on 1) The method of claim 1, wherein the escrow identifier is received from an escrow provider in response to the escrow provider verifying the received information and wherein metadata indicating one or more fields in which the information is stored is received from the escrow provider. ### Claim 5 (depends on 1) The method of claim 1, wherein signed metadata and escrow key information associated with the escrow identifiers are transmitted to the verifier device. ### Claim 6 (depends on 5) The method of claim 5, wherein the escrow key information includes a generation date and an expiration date. ### Claim 7 (depends on 1) The method of claim 1, further comprising transmitting a query to the auditable ledger system to determine whether the set of escrow identifiers have been posted to a ledger of the auditable ledger system. ### Claim 8 (depends on 7) The method of claim 7, further comprising receiving an alert that the verifier is accessing the information associated with the holder that is being held in escrow based on the transmitted query. ### Claim 9 A system for identity escrow, the system comprising: a hardware processor that is configured to: prior to engaging with a verifier needing information held in escrow on behalf of a holder, receive a request to store the information associated with the holder in escrow; cause a user interface to be presented, wherein the user interface allows the holder to select an escrow provider from a plurality of escrow providers for storing the information associated with the holder in escrow; transmit the information to the selected escrow provider, wherein a public-private key pair for signing with the information associated with the holder is generated, wherein the public-private key pair includes a public key and a private key, wherein the private key and the information associated with the holder is distributed to the plurality of escrow providers, and wherein the public key is transmitted to an auditable ledger system; receive, from each of the plurality of escrow providers, an escrow identifier corresponding to a location where the information is stored in escrow to obtain a set of escrow identifiers; and transmit the set of escrow identifiers to a verifier device for verifying a claim. ### Claim 10 (depends on 9) The system of claim 9, wherein the hardware processor is further configured to transmit a request to access a service in which the verifier at the verifier device is accessing the information associated with the holder in escrow using the set of escrow identifiers. ### Claim 11 (depends on 9) The system of claim 9, wherein the information associated with the holder is received from an identity application executing on a computing device associated with the holder and wherein the identity application causes the user interface to be presented. ### Claim 12 (depends on 9) The system of claim 9, wherein the escrow identifier is received from an escrow provider in response to the escrow provider verifying the received information and wherein metadata indicating one or more fields in which the information is stored is received from the escrow provider. ### Claim 13 (depends on 9) The system of claim 9, wherein signed metadata and escrow key information associated with the escrow identifiers are transmitted to the verifier device. ### Claim 14 (depends on 13) The system of claim 13, wherein the escrow key information includes a generation date and an expiration date. ### Claim 15 (depends on 9) The system of claim 9, wherein the hardware processor is further configured to transmit a query to the auditable ledger system to determine whether the set of escrow identifiers have been posted to a ledger of the auditable ledger system. ### Claim 16 (depends on 15) The system of claim 15, wherein the hardware processor is further configured to receive an alert that the verifier is accessing the information associated with the holder that is being held in escrow based on the transmitted query. ### Claim 17 A non-transitory computer-readable medium containing computer executable instructions that, when executed by a processor, cause the processor to perform a method for identity escrow, the method comprising: prior to engaging with a verifier needing information held in escrow on behalf of a holder, receiving a request to store the information associated with the holder in escrow; causing a user interface to be presented, wherein the user interface allows the holder to select an escrow provider from a plurality of escrow providers for storing the information associated with the holder in escrow; transmitting the information to the selected escrow provider, wherein a public-private key pair for signing with the information associated with the holder is generated, wherein the public-private key pair includes a public key and a private key, wherein the private key and the information associated with the holder is distributed to the plurality of escrow providers, and wherein the public key is transmitted to an auditable ledger system; receiving from each of the plurality of escrow providers, an escrow identifier corresponding to a location where the information is stored in escrow to obtain a set of escrow identifiers; and transmitting the set of escrow identifiers to a verifier device for verifying a claim.