Decentralized identifier based authentication with verifiable credentials
AssigneeAmerican Express Travel Related Services Company, Inc.
InventorAjay Babu Maddukuri
Life of this patent
Estimating the term…
Abstract
Disclosed are various approaches for authenticating users using verifiable credentials. An enrollment request is received from a browser. In response to the enrollment request, a set of authentication questions can be selected. The set of authentication questions can then be sent to the browser. Next, a set of answers to a subset of the set of authentication questions is received. Subsequently, a decentralized identifier communication (DIDComm) protocol connection is established with a wallet application. Then, a verifiable credential that represents the set of answers to the subset of the set of authentication questions is issued to the wallet application.
Claims20
A system, comprising:
- a computing device comprising a processor and a memory;
- and
- machine-readable instructions stored in the memory that, when executed by the processor, cause the computing device to at least:
- receive an enrollment request from a browser;
- in response to the enrollment request, select a set of authentication questions by using a generative artificial intelligence to select the set of authentication questions to be different from a previous set of authentication questions sent to a previous user;
- send the set of authentication questions to the browser;
- receive a set of answers to a subset of the set of authentication questions;
- establish a decentralized identifier communication (DIDComm) protocol connection with a wallet application;
- and
- issue, to the wallet application, a verifiable credential that comprises the set of answers to the subset of the set of authentication questions, the issuance comprising transmitting the verifiable credential to the wallet application via the DIDComm protocol.
A method implemented by a computing device, comprising:
- receiving an enrollment request from a browser;
- in response to the enrollment request, selecting a set of authentication questions by using a generative artificial intelligence to select the set of authentication questions to be different from a previous set of authentication questions sent to a previous user;
- sending the set of authentication questions to the browser;
- receiving a set of answers to a subset of the set of authentication questions;
- establishing a decentralized identifier communication (DIDComm) protocol connection with a wallet application;
- and
- issuing, to the wallet application, a verifiable credential that comprises the set of answers to the subset of the set of authentication questions, the issuance comprising transmitting the verifiable credential to the wallet application via the DIDComm protocol.
A non-transitory, computer-readable medium comprising machine-readable instructions that, when executed by a processor of a computing device, further cause the computing device to at least:
- receive an enrollment request from a browser;
- in response to the enrollment request, select a set of authentication questions by using a generative artificial intelligence to select the set of authentication questions to be different from a previous set of authentication questions sent to a previous user;
- send the set of authentication questions to the browser;
- receive a set of answers to a subset of the set of authentication questions;
- establish a decentralized identifier communication (DIDComm) protocol connection with a wallet application;
- and
- issue, to the wallet application, a verifiable credential that comprises the set of answers to the subset of the set of authentication questions, the issuance comprising transmitting the verifiable credential to the wallet application via the DIDComm protocol.
Dependencies are inferred from the claim text.