Decentralized identity authentication framework for distributed data

A method of granting and sharing credentials in a shared private permissioned blockchain data structure shared among network members of a blockchain network, the method comprising:

• receiving, by a registry server and from a requesting application, a request to authenticate one or more identity claims of a requesting user to permit access to data stored in blocks in the shared private permissioned blockchain data structure shared among network members, the request including:
• (i) identity documentation identifying the requesting user and captured at a time of making the request and (ii) one or more claims made by an entity administrator supporting a role, as determined by rules of a trust framework adopted by the network members;
• storing in a private storage by the registry server, the (i) identity documentation and (ii) claims;
• redacting pictures captured of the requesting user from (i) the identity documentation and (ii) the one or more claims;
• sending the identity documentation and the one or more claims to a validator server;
• upon obtaining, by the registry server and from the validator server, an approval validating:
• (i) the identity documentation and (ii) the one or more claims made by an entity administrator, generating and sending a one-time token for creating a public-private key pair;
• and
• granting, by the registry server, a credential in the blockchain network based upon validation of (i) the identity documentation and (ii) the claims, the credential being stored in a public key registry at the registry server as a trusted triple data structure comprised of (a) a public key of the public-private key pair, (b) a link to an enterprise application on a server corresponding to the registry server, and (c) one or more third-party accreditations in the one or more claims as validated;
• and
• providing, by the registry server, the trusted triple data structure as verification of the credential to a blockchain network member as requested;
• thereby enabling the blockchain network member to restrict data from blocks stored in the shared private permissioned blockchain data structure to credentialed users.

A system comprising:

• a registry server including a processor and software that when executed implements processing including:
• receiving from a requestor, a first request by the requestor to access a permissioned blockchain network, wherein the first request includes:
• (i) identity documentation identifying the requestor, (ii) one or more claims, and (iii) one or more submissions of evidence;
• authenticating the requestor based at least in part upon the one or more submissions of evidence, including:
• redacting pictures captured of the requestor from at least (i) the identity documentation and (ii) the one or more claims;
• and
• sending the identity documentation and the one or more claims without pictures to a validator server.

A non-transitory computer readable medium storing instructions, which instructions when executed by one or more processors perform processing including:

• receiving from a requestor, a first request by the requestor to access a permissioned blockchain network, wherein the first request includes:
• (i) identity documentation identifying the requestor, (ii) one or more claims, and (iii) one or more submissions of evidence;
• authenticating the requestor based at least in part upon the one or more submissions of evidence, including:
• redacting pictures captured of the requestor from at least (i) the identity documentation and (ii) the one or more claims;
• and
• sending the identity documentation and the one or more claims without pictures to a validator server.