System for credential storage and verification

A method for credential storing and verifying comprising:

• receiving an indication to register a credential transmitted to a holder device that is associated with a holder identifier;
• storing, using a processor, in a distributed ledger a decentralized identifier (DID) document associated with the holder identifier using a smart contract, wherein storing using the smart contract employs a dual signature authentication scheme to authorize storing the DID in the distributed ledger based at least in part on determining that a signature associated with the holder identifier is valid and that a signature of a ledger writer of the distributed ledger is valid;
• storing in the distributed ledger schema information associated with an issuer of the credential using the smart contract, wherein the schema information is received from the issuer;
• storing in the distributed ledger a credential definition associated with the schema information using the smart contract, wherein the credential definition is received from the issuer;
• receiving from a verifier an indication to check the distributed ledger, wherein the verifier receives a presentation regarding the credential from the holder device associated with the holder identifier, wherein the presentation comprises the credential and a schema of the credential, wherein the credential and the schema of the credential were provided by the issuer to a user to hold in the holder device, and
• checking the distributed ledger, wherein checking the distributed ledger comprises:
• receiving the schema information and the credential definition stored in the distributed ledger;
• determining whether the schema information stored in the distributed ledger matches the schema of the credential;
• determining whether the credential definition stored in the distributed ledger matches the credential;
• determining whether a revocation registry stored in the distributed ledger associated with the presentation regarding the credential indicates the credential is revoked;
• and
• in response to a determination that the schema information matches the schema of the credential, the credential definition matches the credential, and the credential is not revoked, indicating the credential is verified.

A computer program product for credential storing and verifying, the computer program product being embodied in a non-transitory computer readable storage medium and comprising computer instructions for:

• receiving an indication to register a credential transmitted to a holder device that is associated with a holder identifier;
• storing, using a processor, in a distributed ledger a decentralized identifier (DID) document associated with the holder identifier using a smart contract, wherein storing using the smart contract employs a dual signature authentication scheme to authorize storing the DID in the distributed ledger based at least in part on determining that a signature associated with the holder identifier is valid and that a signature of a ledger writer of the distributed ledger is valid;
• storing in the distributed ledger schema information associated with an issuer of the credential using the smart contract, wherein the schema information is received from the issuer;
• storing in the distributed ledger a credential definition associated with the schema information using the smart contract, wherein the credential definition is received from the issuer;
• receiving from a verifier an indication to check the distributed ledger, wherein the verifier receives a presentation regarding the credential from the holder device associated with the holder identifier, wherein the presentation comprises the credential and a schema of the credential, wherein the credential and the schema of the credential were provided by the issuer to a user to hold in the holder device, and
• checking the distributed ledger, wherein checking the distributed ledger comprises:
• receiving the schema information and the credential definition stored in the distributed ledger;
• determining whether the schema information stored in the distributed ledger matches the schema of the credential;
• determining whether the credential definition stored in the distributed ledger matches the credential;
• determining whether a revocation registry stored in the distributed ledger associated with the presentation regarding the credential indicates the credential is revoked;
• and
• in response to a determination that the schema information matches the schema of the credential, the credential definition matches the credential, and the credential is not revoked, indicating the credential is verified.