Privacy-preserving identity attribute verification using policy tokens

A relying party computer comprising:

• a processor;
• and
• a non-transitory computer readable medium coupled to the processor, the non-transitory computer readable medium comprising code, executable by the processor, for implementing a method comprising:
• providing, to a user device, a policy token, wherein the user device generates a zero-knowledge proof using the policy token and a set of identity attributes stored on the user device and transmits the zero-knowledge proof to an identity service provider computer, which verifies the zero-knowledge proof and generates a verification message;
• receiving the verification message;
• and
• performing, by the relying party computer, an interaction with the user device based on the verification message.

A system comprising:

• a relying party computer comprising
• a processor, and
• a non-transitory computer readable medium coupled to the processor, the non-transitory computer readable medium comprising code, executable by the processor, for implementing a method comprising
• providing, to a user device, a policy token, wherein the user device generates a zero-knowledge proof using the policy token and a set of identity attributes stored on the user device and transmits the zero-knowledge proof to an identity service provider computer, which verifies the zero-knowledge proof and generates a verification message,
• receiving the verification message, and
• performing, by the relying party computer, an interaction with the user device based on the verification message;
• and
• the user device.