Back to results
US 11,887,112 B2Granted
Hybrid identity as a service for decentralized browser based wallets
AssigneeAmerican Express Travel Related Services Company, Inc.
InventorsJitendra Singh Dikhit, Alaric M. Eby, Andras L. Ferenczi, Ashish Kumar, Upendra Mardikar
Life of this patent
Estimating the term…
Abstract
A hybrid identity service system is disclosed. The system may receive a transaction request. The system may generate a first passcode and a second passcode. The system may decrypt a first encrypted private key with the first passcode to recover a private key. The system may sign the transaction request with the private key and may encrypt the private key with the second passcode to generate a second encrypted private key.
Claims20
A method, comprising:
- receiving, by a security provider, a user identifier and a password from a user device;
- hashing, by the security provider, the user identifier and the password to produce a password hash;
- comparing, by the security provider, the password hash to a stored password hash to determine that the password hash matches the stored password hash;
- hashing, by the security provider, account creation information associated with the stored password hash to create hashed account creation information, wherein the account creation information and the password are different values;
- decrypting an encrypted first passcode stored in association with the account creation information to generate a first passcode, wherein a cryptowallet on the user device can use the first passcode to perform cryptographic processes on one or more keys stored by the cryptowallet on the user device, wherein an encrypted private key is at least one of the one or more keys;
- generating, by the security provider, a second passcode in response to decrypting the encrypted first passcode, wherein the first passcode is different from the second passcode, wherein the cryptowallet on the user device can use the second passcode to perform cryptographic processes on the one or more keys stored by the cryptowallet on the user device;
- encrypting, by the security provider, the second passcode using the hashed account creation information as an encryption key to create an encrypted passcode;
- returning, by the security provider, the first passcode and the second passcode to the cryptowallet on the user device;
- decrypting, by the user device via the cryptowallet, the encrypted private key using the returned first passcode to generate a decrypted private key;
- signing, by the user device via the cryptowallet, a transaction request with the decrypted private key;
- and
- in response to signing the transaction request, re-encrypting, by the user device via the cryptowallet, the decrypted private key using the returned second passcode.
9 more elements
A system, comprising:
- a user device comprising a first processor, a first memory, first machine-readable instructions stored in the first memory, and a cryptowallet stored in the first memory;
- a computing device comprising a second processor, a second memory, and second machine-readable instructions stored in the second memory, the second machine-readable instructions, when executed by the second processor, cause the computing device to at least:
- receive a user identifier and a password from a user device;
- hash the user identifier and the password to produce a password hash;
- compare the password hash to a stored password hash to determine that the password hash matches the stored password hash;
- hash account creation information associated with the stored password hash to create hashed account creation information, wherein the account creation information and the password are different values;
- decrypt an encrypted first passcode stored in association with the account creation information to generate a first passcode;
- generate a second passcode in response to decrypting the encrypted first passcode, wherein the first passcode is different from the second passcode;
- encrypt the second passcode using the hashed account creation information as an encryption key to create an encrypted passcode;
- and
- return the first passcode and the second passcode to the cryptowallet on the user device;
- and
- wherein the cryptowallet can use the first passcode to perform cryptographic processes on one or more keys stored by the cryptowallet, an encrypted private key is at least one of the one or more keys, the cryptowallet can use a second passcode to perform cryptographic processes on the one or more keys stored by the cryptowallet, and the first machine-readable instructions, when executed by the first processor, cause the first processor to at least:
- decrypt, via the cryptowallet, the encrypted private key using the returned first passcode to generate a decrypted private key;
- sign, via the cryptowallet, a transaction request with the decrypted private key;
- and
- in response to signing the transaction request, re-encrypt, via the cryptowallet, the decrypted private key using the returned second passcode.
14 more elements
Dependencies are inferred from the claim text.