Public key infrastructure system for validating digitally signed data structures across communication channels

A system comprising:

• at least one hardware processor;
• and
• at least one non-transitory memory storing instructions, which, when executed by the at least one hardware processor, cause the system to perform operations including:
• receiving a request for access by an entity to a plurality of communication channels,
• wherein the request includes information identifying the entity and a type of the entity;
• selecting, based on the type of the entity, a verification agent from a plurality of verification agents,
• wherein the verification agent is associated with a verification protocol corresponding to the type of the entity;
• routing, via an external interface, the information to the selected verification agent for verifying an identity of the entity;
• receiving, from the verification agent, a first verification result indicating that the identity of the entity is verified,
• wherein the first verification result is generated by the verification agent using the information according to the verification protocol;
• generating, using the first verification result and the information, a digitally signed data structure indicating that the identity of the entity is verified;
• transmitting, via the external interface, the digitally signed data structure to a verification endpoint associated with a particular communication channel of the plurality of communication channels,
• wherein the digitally signed data structure is configured for ingestion by the verification endpoint to verify one or more channel assets associated with the particular communication channel while avoiding re-verification of the identity of the entity;
• receiving, from the verification endpoint, a second verification result indicating that the one or more channel assets are verified;
• and
• enabling, based on receiving the second verification result, access by the entity to the particular communication channel.

A method comprising:

• receiving, at a computer system, a digitally signed data structure comprising a header, a payload, and a digital signature;
• extracting, from the header, one or more parameters identifying at least one of (i) a cryptographic algorithm used to generate the digital signature, (ii) a certificate chain including a public key associated with a private key used to generate the digital signature, and (iii) a uniform resource identifier identifying a network resource that is communicably coupled to the computer system;
• retrieving, from the network resource, the certificate chain;
• extracting, from the payload, one or more verification claims comprising a universally unique identifier (UUID) identifying an entity, and an expiration time for the digitally signed data structure;
• determining that the certificate chain chains to a root certificate authority;
• verifying, using the public key and the cryptographic algorithm, the digital signature;
• and
• prior to the expiration time, transmitting, to a verification endpoint associated with a communication channel, the one or more verification claims to enable the entity to access the communication channel.