Systems and methods for distributed ledger-based institutional identity management

A computer-based method for providing attestations for an identity consumer from an identity provider to a relying party, comprising:

• providing, by the identity consumer to an identity provider server for the identity provider, identity consumer information;
• validating, by the identity provider server, the identity consumer information;
• receiving, by the identity provider server, a root attestation from a system operator that authorizes the identity provider server to issue identity provider attestations;
• generating, by the identity provider server, an identity provider attestation comprising an attestation about the identity consumer information;
• generating, by the identity provider server, a nested attestation comprising the identity provider attestation and the root attestation, wherein the nested attestation establishes a chain of trust by building the identity provider attestation on the root attestation in a single attestation;
• receiving, by an identity consumer computer program executed by an electronic device for the identity consumer and from the identity provider server, a notification that the nested attestation is available;
• requesting, by the identity consumer computer program, the nested attestation from the identity provider server;
• downloading, by the identity consumer computer program, the nested attestation to an identity consumer electronic wallet for the identity consumer;
• committing, by the identity provider server, the nested attestation to a distributed ledger, wherein the distributed ledger maintains a current status for the root attestation and the identity provider attestation;
• receiving, by the identity consumer computer program and from a relying party computer application for the relying party, a request for the nested attestation;
• generating, by the identity consumer computer program, a machine-readable code for the nested attestation that is stored in the identity consumer electronic wallet;
• communicating, by the identity consumer computer program and to the relying party computer application, the machine-readable code for the nested attestation;
• extracting, by the relying party computer application, the nested attestation from the machine-readable code;
• identifying, by the relying party computer application, the root attestation and the identity provider attestation from the nested attestation;
• verifying, by the relying party computer application and on the distributed ledger, that the root attestation and the identity provider attestation are valid and active;
• and
• executing, by the relying party computer application, an action based on reliance on the verification.