# US 12,192,370 B2 · Computer-implemented method to provide secure interactions between users in a network > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 12,192,370 B2 - Document ID: US12192370B2 - Status: Granted - Kind: B2 - Application number: 17/629,342 - Filed: 2020-06-24 - Published: 2022-08-11 - Granted: 2025-01-07 - Earliest claimed: 2019-07-24 - Assignees: Robert Bosch GmbH - Applicants: Robert Bosch GmbH - Inventors: Claudio Cinaqui Pereira; Sibel Tezelli-Yilmaz - Web page: https://patentgrep.com/patent/US12192370B2 ## CPC - G06F 21/32: using biometric data, e.g. fingerprints, iris scans or voiceprints - H04L 9/3231: {Biological data, e.g. fingerprint, voice or retina (network architectures or network communication protocols for supporting authentication of entities using biometrical features in a packet data network H04L63/0861)} - G06F 21/64: Protecting data integrity, e.g. using checksums, certificates or signatures - H04L 9/088: {Usage controlling of secret information, e.g. techniques for restricting cryptographic keys to pre-authorized uses, different access levels, validity of crypto-period, different key- or password length, or different strong and weak cryptographic algorithms (network architectures or network communication protocols for using time-dependent keys in a packet data network H04L63/068)} - H04L 9/0891: {Revocation or update of secret information, e.g. encryption key update or rekeying} - H04L 9/3263: {involving certificates, e.g. public key certificate [PKC] or attribute certificate [AC]; Public key infrastructure [PKI] arrangements (network architectures or network communication protocols for supporting authentication of entities using certificates in a packet data network H04L63/0823)} - H04L 9/50: {using hash chains, e.g. blockchains or hash trees} - G06F: ELECTRIC DIGITAL DATA PROCESSING (computer systems based on specific computational models G06N) - H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M) ## Abstract A computer-implemented method for securing an interaction between users of a computer network. A first digital identity for a first user of the users is created based on an input provided by the first user over a user interface of a first network node. The user input includes a first consent to create the first digital identity and includes a first secret information provided by the first user. The first consent and the first secret information are merged to form a first root string and whereas the first digital identity is created dependent on the first root string and stored in the network in encrypted form. The first user interacts with other users in the network using the first digital identity. ## Claims ### Claim 1 A computer-implemented method for securing an interaction between users of a computer network, the method comprising the following steps: creating a first digital identity for a first user of the users based on an input provided by the first user over a user interface of a first network node, the input provided by the first user including a first consent to create the first digital identity and a first secret information, the first consent being a value of a digital binary parameter whose value is settable to only either of a first predefined value representing a positive indication and a second predefined value representing a negative indication, the creating of the first digital identity including: merging the first consent and the first secret information to form a first root string, and creating the first digital identity dependent on the first root string; storing the first digital identity in the network in encrypted form; and interacting by the first user with other users in the network using the first digital identity. ### Claim 2 (depends on 1) The method according to claim 1, wherein the first user uses the first digital identity for authentication. ### Claim 3 (depends on 1) The method according to claim 1, wherein the users interact over the network via network nodes. ### Claim 4 (depends on 1) The method according to claim 1, wherein the first secret information includes a first biometric information, the first biometric information including at least one of an iris sample of the first user, or a fingerprint sample of the first user, or a palm veins sample of the first user, or a specific gesture of the first user, or a voice sample of the first user. ### Claim 5 (depends on 4) The method according to claim 4, wherein: the first user connects to the network via the first network node, the first user creates in the network the first digital identity corresponding to the first user via a software application running on the first network node, a second user accesses the network via a second network node, the second user requests via the network consent of the first user to: (i) the second user accessing the secret information of the first user, or (ii) the second user sending information, other than the secret information, to the first user, or (iii) the first digital identity corresponding to the first user being connected with a second identity corresponding to the second user, or (iv) the second user is granted access to control a software application assigned to the first digital identity, the request is sent via the identity management system, and the first user denies or approves the request of the second user via the software application. ### Claim 6 (depends on 5) The method according to claim 5, wherein the first user authenticates to the identity management system by providing the first biometric information via the software application, and after the authentication, the first user alters the first digital identity or information stored with the first digital identity corresponding to the first user via the software application running on the first network node, the altering including: adding or removing further biometric information corresponding to the first user, or adding to or removing from the secret information, or adding or removing a certificate. ### Claim 7 (depends on 5) The method according to claim 5, wherein to deny or approve the request, the first user authenticates to the identity management system by again providing via the software application the first biometric information or by providing a further biometric information or by providing the secret information. ### Claim 8 (depends on 5) The method according to claim 5, wherein the denial or approval by the first user of the request of the second user is stored by the software application as one of recorded consents. ### Claim 9 (depends on 8) The method according to claim 8, wherein an overview over at least one of recorded and still open consent requests is provided to the first user, and wherein one of the requests can be accessed by the first user to deny, grant or revoke the corresponding consent. ### Claim 10 A computer-implemented method for securing an interaction between users of a computer network, the method comprising the following steps: creating a first digital identity for a first user of the users based on an input provided by the first user over a user interface of a first network node, the input provided by the first user including a first consent to create the first digital identity and a first secret content, the creating of the first digital identity including: merging the first consent and the first secret content to form a first root string, and creating the first digital identity dependent on the first root string; storing the first digital identity in the network in encrypted form; and interacting by the first user with other users in the network using the first digital identity; wherein: the first digital identity corresponding to the first user is stored in encrypted form in the identity management system, a second identity corresponding to a second user is created and stored in encrypted form in the identity management system, a first right to access first information or to access a first software function or to access a first product is assigned to the first digital identity, and the method further comprises: requesting by the second user an access to the first information or the first software function or the first product from the first user by sending a request to the identity management system, checking by the identity management system authentication of the second user based on the second identity, sending by the identity management system the request to the first user, denying or approving the request, by the first user, by responding to the identity management system, checking by the identity management system authentication of the first user based on the first digital identity, dependent on the check of the authentication of the first user, sharing secret access-rights information stored in encrypted form with the second user, the secret access-rights information allowing the second user to access the first information, the first software function or the first product, accessing by the second user the first information or the first software function or the first product. ### Claim 11 A non-transitory computer-readable storage medium on which is stored a computer program for securing an interaction between users of a computer network, the computer program, when executed by a computer, causing the computer to perform the following steps: creating a first digital identity for a first user of the users based on an input provided by the first user over a user interface of a first network node, the input provided by the first user including a first consent to create the first digital identity and a first secret information, the first consent being a value of a digital binary parameter whose value is settable to only either of a first predefined value representing a positive indication and a second predefined value representing a negative indication, the creating of the first digital identity including: merging the first consent and the first secret information to form a first root string, and creating the first digital identity dependent on the first root string; storing the first digital identity in the network in encrypted form; and interacting by the first user with other users in the network using the first digital identity.