System and method for generation and verification of a subject's identity based on the subject's association with an organization

A system for generation and verification of identity of a subject associated with an organization, said system comprising:

• an identity generation tool installable in a memory of a first electronic device associated with said subject, said identity generation tool configured to facilitate generation of an ephemeral identity instance for said subject upon receiving a request for identity verification from a verifier, said identity generation tool comprising:
• i. a first repository configured to store subject's association record, a digital signature of said association record, and a secret value associated with said subject, wherein said association record includes ID of said organization, user ID of said subject, and association details of said subject with said organization;
• and ii. an identity generation module comprising:
• a first token generator module configured to cooperate with said first repository to receive said secret value, and further configured to feed said secret value and the current time-stamp to a pseudo random number generator as a seed to generate a first one-time token;
• and iii. a combining module configured to cooperate with said first repository and said first token generator module to receive and combine said association record, said digital signature, and said first one-time token to generate said identity instance for said subject,
• an identity verification tool installable in a memory of a second electronic device associated with said verifier, said second electronic device comprising a first transceiver configured to receive said identity instance from said first electronic device, said identity verification tool configured to perform a first level authentication of said subject, said identity verification tool comprising:
• i. a second repository configured to store a first lookup table having a list of organizations IDs and associated public keys;
• ii. a first extractor module configured to cooperate with said first transceiver to receive said identity instance, and further configured to extract said association record, said digital signature, and said first one-time token from said identity instance;
• iii. a second extractor module configured to cooperate with said first extractor module to receive said extracted association record, and further configured to extract organization ID of said subject from said received association record;
• iv. a first crawler and extractor module configured to cooperate with said second extractor module to receive said organization ID of organization associated with said subject, and further configured to crawl through said first lookup table of said second repository to extract the public key of said organization;
• v. a decrypting module configured to cooperate with said first crawler and extractor module and said first extractor module to receive said extracted public key and said extracted digital signature respectively, and further configured to decrypt said digital signature using said public key to generate a decrypted data;
• vi. a digital signature verification module configured to cooperate with said decrypting module and said first extractor module to receive said decrypted data and said association record for said subject respectively, and further configured to compare said decrypted data with hash values of said association record to verify said digital signature;
• and
• vii. a validity status requesting module configured to generate a validity status request upon successful verification of said digital signature, and further configured to cooperate with said first extractor module and said second extractor module to transmit said organization ID, said user ID, said first one-time token, and said validity status request to a validating server via said first transceiver for verifying the current status of said association record, wherein said first extractor module, said second extractor module, said first crawler and extractor module, said decrypting module, said digital signature verification module, and said validity status requesting module are implemented using one or more processors,
• and said validating server, comprising a memory and a processor, communicatively coupled with said identity generation tool, said identity verification tool, and an identity server associated with said organization, said validating server configured to perform a second level authentication of said subject, said validating server comprising:
• i. a database configured to store a second lookup table having a list of organization IDs, user IDs of subjects associated with the organizations having said organization IDs, and secret values associated with said subjects;
• ii. a second transceiver configured to receive said validity status request, said organization ID, said user ID, and said first one-time token from said validity status requesting module;
• iii. a second crawler and extractor module configured to cooperate with said second transceiver to receive said organization ID and user ID of said subject, and further configured to cooperate with said database to crawl through said second lookup table and extract secret value associated with said organization ID and user ID;
• iv. a second token generator module configured to cooperate with said second crawler and extractor module to generate a second one-time token using the current time stamp and said extracted secret value;
• and v. a comparator configured to cooperate with said second token generator module and said second transceiver to receive said second one-time token and said first one-time token respectively, and further configured to compare said second one-time token with said first one-time token to verify the validity status of said association record, said comparator configured to communicate said validity status to said identity verification tool via said second transceiver, wherein said second crawler and extractor module, said second token generator module, and said comparator are implemented using one or more processors.