Delegation using pairwise decentralized identifier
AssigneeMicrosoft Technology Licensing, LLC
InventorsBrandon Murdoch, Ankur Patel
Life of this patent
Estimating the term…
Abstract
Delegating a scope of permission between pairwise DIDs. First, a computing system determines a relationship between the first DID and a second DID. The first DID and the second DID are pairwise DIDs. Based on the relationship, the computing system delegates a scope of permission owned by the first DID to the second DID. In particular, the computing system defines the scope of permission, grants a public key of the second DID the scope of the permission. The delegation of the defined scope of permission is signed by a private key of the first DID, such that the signature is a proof of the delegation. A portion of data related to the delegation is then propagated onto the distributed ledger.
Claims20
A computing system comprising:
- one or more processors;
- and
- one or more computer-readable media having thereon computer-executable instructions that are structured such that, when executed by the one or more processors, cause the computing system to perform the following:
- determine a relationship between a first decentralized identifier (DID) owner of a first DID and a second DID owner of a second DID, the first DID and the second DID being pairwise DIDs;
- and
- based on the relationship, delegate a scope of permission owned by the first DID to the second DID, comprising:
- define the scope of permission;
- grant a public key of the second DID the defined scope of permission;
- generate a signature by a private key of the first DID, proving the delegation of the defined scope of permission to the public key of the second DID;
- and
- propagate a portion of data related to the delegation onto a distributed ledger.
A method implemented at a computing system for delegating a scope of permission owned by a first decentralized identifier (DID) to a second DID, the first DID and the second DID are pairwise DIDs, comprising:
- determining a relationship between the first DID and a second DID, the first DID and the second DID are pairwise DIDs;
- and
- based on the relationship, delegating a scope of permission owned by the first DID to the second DID, comprising:
- defining the scope of permission;
- granting a public key of the second DID the defined scope of permission;
- generating a signature by a private key of the first DID, proving the delegation of the defined scope of permission to the public key of the second DID;
- and
- propagating a portion of data related to the delegation onto a distributed ledger.
A computer program product comprising one or more hardware storage devices having stored thereon computer-executable instructions that are structured such that, when executed by one or more processors of a computing system, the computer-executable instructions cause the computer system to perform at least:
- determine a relationship between a first decentralized identifier (DID) and a second DID, the first DID and the second DID are pairwise DIDs;
- and
- based on the relationship, delegate a particular scope of permission owned by the first DID to the second DID, comprising:
- defining the scope of permission;
- granting a public key of the second DID the defined scope of permission;
- generating a signature by a private key of the first DID, proving the delegation of the defined scope of permission to the public key of the second DID;
- and
- propagating a portion of data related to the delegation onto a distributed ledger.
Dependencies are inferred from the claim text.