Systems and methods for managing digital identities associated with mobile devices

A non-transitory computer readable storage media comprising computer-executable instructions for managing digital identities, that when executed by at least one processor of a mobile communication device, cause the at least one processor of the mobile communication device to:

• capture an image of a physical document associated with a user of the mobile communication device, the image including a biometric of the user;
• extract the biometric from the image and convert the biometric to a biometric template;
• capture a biometric of the user and compare the captured biometric of the user to the biometric template;
• when the captured biometric of the user matches the biometric template, encrypt a message with a public key included in the mobile communication device and known to an identification provider, the encrypted message including at least the image of the physical document and the biometric template, and transmit the message to the identification provider, whereby the biometric template is verified by the identification provider against a repository of biometric data;
• receive a signed result from the identification provider, the signed result indicative of verification of the biometric template;
• and
• in response to the signed result:
• bind data representative of the mobile communication device, a mobile application included in the mobile communication device, and at least one of the biometric template and the captured biometric of the user into a token;
• and
• store the token in a trusted execution environment (TEE) of the mobile communication device, thereby enabling the mobile application to provide a digital identity associated with the user to one or more relying parties based on authentication of the user through use of the token.

A mobile communication device comprising:

• a memory including executable instructions;
• and
• a processor coupled to the memory, wherein the processor is configured, by the executable instructions, to:
• capture an image of a physical document, the image including a biometric of a user associated with the physical document;
• extract the biometric from the image and convert the biometric to a biometric template;
• capture, via an input device of the mobile communication device, a biometric of the user;
• compare the captured biometric of the user to the biometric template;
• and
• in response to a match between the captured biometric of the user and the biometric template:
• encrypt a message with a public key included in the mobile communication device and known to an identification provider, the message comprising at least the image of the physical document and the biometric template;
• and
• transmit the encrypted message to the identification provider, whereby the biometric template is decrypted and verified;
• and then
• receive a result from the identification provider, which is signed by the identification provider and indicative of a verification of the biometric template;
• and
• in response to the signed result:
• bind data representative of the mobile communication device, a mobile application included in the mobile communication device, and at least one of the biometric template and the captured biometric of the user into a token;
• and
• retain the token in a trusted execution environment (TEE) of a memory of the mobile communication device as a basis to subsequently authenticate the user at the mobile communication device, thereby enabling the mobile application to provide a digital identity associated with the user to one or more relying parties when the user is authenticated at the mobile communication device based on the token.