Methods and systems for a digital trust architecture
AssigneeUnited States Postal Service
InventorClayton C Bonnell
Life of this patent
Estimating the term…
Abstract
In some aspects, methods and systems for a digital trust architecture are provided. In some aspects, the architecture includes a user account provisioning process. The provisioning process may make use of in person verifications of some personal information to ensure authenticity of the user information. Once the authenticity of user information is established, an account may be created. The user account may include a user email account, with integrated access to digital certificates linked to the user account. Account creation may also automatically publish the new user's public key in a publicly accessible directory, enabling encrypted email information to be easily sent to the new user.
Claims10
A system for authenticating access to personal information, comprising:
- user data stored in a non-volatile electronic memory, the user data associated with a user;
- one or more electronic hardware processors, the one or more electronic hardware processors configured to implement:
- a digital trust architecture;
- configured to:
- receive the user data and a private key associated with the user;
- and
- generate a digital certificate based on the private key and a digital token of the digital trust architecture;
- a data broker, the data broker configured to conditionally provide a network application access to the user data upon request based on receipt of the digital certificate from the network application;
- and
- wherein the data broker is further configured to revoke network application access to the user data based on reception of a revoke message, and to deny further requests for access to the user data based on the reception of the revoke message.
A method of authenticating access to personal information, comprising:
- storing user data associated with a user in a non-volatile electronic memory;
- receiving, in a digital trust architecture, the user data and a private key associated with the user;
- generating a digital certificate based on the received private key and a digital token associated with the digital trust architecture;
- conditionally providing a network application access to the stored user data upon request based on the receiving the digital certificate from the network application;
- receiving, in the digital trust architecture, a revoke message;
- revoking access to the stored user data based on the received revoke message;
- and
- denying further requests for access to the stored user data based on the received revoke message.
Dependencies are inferred from the claim text.