System and method for anonymous location verification
AssigneeRoyal Bank of Canada
InventorsArya Pourtabatabaie, Edison U. Ortiz, Margaret Inez Salter
Life of this patent
Estimating the term…
Abstract
A computer implemented system for anonymous electronic verification of location credentials including at least one processor and data storage is described in various embodiments. The system includes cryptographic mechanisms and electronic communication between one or more computing systems that in concert, provide verification of a prover's location credentials in accordance to logical conditions of a verifier's policy without providing additional information to a verifier entity.
Claims12
A computer implemented system for communicating data messages between a verifier computing device and a portable client computing device, the data messages establishing authentication of at least one client location characteristic of the portable client computing device, the system comprising:
- the portable client computing device including at least a client computing device processor and data storage, the data storage storing one or more token data objects received from or computed jointly in a multiparty protocol with an issuer computing device, the one or more token data objects generated using at least an issuer computing device private issuance key, the one or more token data objects each including one or more signed data elements representing at least one of the at least one client location characteristic of the portable client computing device;
- and
- the client computing device processor configured to:
- receive a verification request data message from the verifier computing device, the verification request data message comprising a request for confirmation that the portable client device is associated with a particular geographic location that is within a polygon shape defining an area representing the particular geographic location;
- and
- using a combination of the one or more token data objects and the verification request data message, generate one or more proof data messages without sending any data messages or requests to the issuer computing device, the client computing device processor configure to:
- generate commitments to planar approximations dx and dy of the particular geographic location;
- generate a first simulated proof portion that dx=rcosϕ0dθ and dy=rdϕ;
- generate commitments to signed values S(AiPAi+1);
- generate a second simulated proof portion that the signed values were formed correctly;
- and
- generate simulated proof portions that all the signed values S(AiPAi+1) are positive values.
A computer implemented method for communicating data messages between a verifier computing device and a portable client computing device, the data messages establishing authentication of at least one client location characteristic of the portable client computing device, the method comprising:
- storing one or more token data objects received from an issuer computing device, the one or more token data objects generated using at least an issuer computing device private issuance key, the one or more token data objects each including one or more signed data elements representing at least one of the at least one client location characteristic of the portable client computing device;
- receiving a verification request data message from the verifier computing device, the verification request data message comprising a request for confirmation that the portable client device is associated with a particular geographic location that is within a polygon shape defining an area representing the particular geographic location;
- and
- using a combination of the one or more token data objects and the verification request data message, generating one or more proof data messages without sending any data messages or requests to the issuer computing device by:
- generating commitments to planar approximations dx and dy of the particular geographic location;
- generating a first simulated proof portion that dx=rcosϕ0dθ and dy=rdϕ;
- generating commitments to signed values S(AiPAi+1);
- generating a second simulated proof portion that the signed values were formed correctly;
- and
- generating simulated proof portions that all the signed values S(AiPAi+1) are positive values.
Dependencies are inferred from the claim text.