Selectively verifying personal data

A computer program stored on a non-transitory medium and comprising instructions that, when executed by a computer, cause the computer to:

• receiving, by an identity application of a client device, personal data of a user;
• computing, via a cryptographic hash function, one or more cryptographic hashes from elements of the personal data;
• storing the cryptographic hashes, an internal identifier and a timestamp as an entry in a distributed database,
• wherein the internal identifier is unique within the distributed database;
• receiving a user request from the user;
• selecting one or more of the elements of personal data for verification;
• requesting verification of the selected elements of personal data;
• determining an authorization indication in response to the verification request, wherein the authorization indication is received from the identity application or a distribution service, and when received from the distribution service, the authorization indication is based on information received from the identity application by the distribution service;
• when the authorization indication indicates that the verification request has been allowed, verifying the selected elements of personal data using cryptographic hashes from the entry in the distributed database;
• storing the personal data and the internal identifier in a memory of the client device by encrypting the personal data and the internal identifier in an encrypted database in the memory of the client device;
• when the user request is received by a provider device, the verifying comprises sending one or more messages from the distribution service to the provider device via an application protocol;
• when the user request is received by the provider device and the provider device includes a remote computer, authenticating, by the provider device and prior to requesting the verification, the user by means of the internal identifier;
• when the user request is received by the provider device, receiving, by the distribution service from the client, a deletion request to delete at least one element of the personal data from the provider device, and to revoke authorization for the provider device to access the element of personal data in the deletion request;
• and
• instructing, by the distribution service, the provider device to remove the element of personal data according to the deletion request.

A computer system for selectively verifying personal data, comprising:

• a client device comprising an identity application, the identity application being configured to receive personal data of a user;
• at least one distribution service configured to:
• receive the personal data from the client device;
• and
• compute, via a cryptographic hash function, one or more cryptographic hashes from elements of the personal data;
• a distributed database configured to:
• store, upon request from the distribution service, the cryptographic hashes, an internal identifier and a timestamp as an entry, wherein the internal identifier is unique within the distributed database;
• a provider device configured to:
• receive a user request from the user;
• select one or more elements of the personal data for verification;
• request verification of the selected elements of personal data;
• and
• determine an authorization indication in response to the verification request, wherein the authorization indication is received from the identity application or a distribution service, and when received from the distribution service, the authorization indication is based on information received from the identity application by the distribution service;
• wherein the distribution service is further configured to:
• when the authorization indication indicates that the verification request has been allowed, verify the selected elements of personal data using cryptographic hashes from the entry in the distributed database
• store the personal data and the internal identifier in a memory of the client device by encrypting the personal data and the internal identifier in an encrypted database in the memory of the client device;
• when the user request is received by a provider device, the verification comprises sending one or more messages from the distribution service to the provider device via an application protocol;
• when the user request is received by the provider device and the provider device includes a remote computer, authenticate, by the provider device and prior to requesting the verification, the user by means of the internal identifier;
• when the user request is received by the provider device, receive, by the distribution service from the client, a deletion request to delete at least one element of the personal data from the provider device, and to revoke authorization for the provider device to access the element of personal data in the deletion request;
• and
• instruct, by the distribution service, the provider device to remove the element of personal data according to the deletion request.