Decentralized identification with third-party issued identification
AssigneeAmerican Express Travel Related Services Company, Inc.
InventorsAjay Babu Maddukuri, Mukund Shankar SimhaRaghu
Life of this patent
Estimating the term…
Abstract
Disclosed are various embodiments for providing verifiable credentials representing a driver's license or other form of identification issued by a government or a third-party. A wallet application can request a third-party issued identification of a user from a third-party application installed on the computing device. The wallet application can then receive the third-party issued identification from the third-party application. Subsequently, the wallet application can verify the third-party issued identification and then establish a secure communications channel with an issuer service. The wallet application can then request a verifiable credential that represents the third-party issued identification.
Claims20
A system, comprising:
- a computing device comprising a processor and a memory;
- and
- a wallet application comprising machine-readable instructions stored in the memory that, when executed by the processor, cause the computing device to at least:
- request a third-party issued identification of a user from a third-party application installed on the computing device, wherein the third-party application is a mobile driver's license (MDL) application and the third-party issued identification is a mobile driver's license issued to the user;
- receive the third-party issued identification from the third-party application, wherein the third-party issued identification is cryptographically signed by the third-party application using a third-party private key;
- verify the third-party issued identification using a third-party public key corresponding to the third-party private key;
- establish a secure communications channel with an issuer service;
- and
- request, through the secure communications channel, from an issuer service, a verifiable credential, wherein the request includes a decentralized identifier (DID) that represents the user and information obtained from the third-party issued identification, and wherein the verifiable credential represents the third-party issued identification.
A method, comprising:
- requesting a third-party issued identification of a user from a third-party application installed on a computing device, wherein the third-party application is a mobile driver's license (MDL) application and the third-party issued identification is a mobile driver's license issued to the user;
- receiving the third-party issued identification from the third-party application, wherein the third-party issued identification is cryptographically signed by the third-party application using a third-party private key;
- verifying the third-party issued identification using a third-party public key corresponding to the third-party private key;
- establishing a secure communications channel with an issuer service;
- and
- requesting, through the secure communications channel, from an issuer service, a verifiable credential, wherein the request includes a decentralized identifier (DID) that represents the user and information obtained from the third-party issued identification, and wherein the verifiable credential represents the third-party issued identification.
A non-transitory, computer-readable medium, comprising machine-readable instructions for a wallet application that, when executed by a processor of a computing device, cause the computing device to at least:
- request a third-party issued identification of a user from a third-party application installed on the computing device, wherein the third-party application is a mobile driver's license (MDL) application and the third-party issued identification is a mobile driver's license issued to the user;
- receive the third-party issued identification from the third-party application, wherein the third-party issued identification is cryptographically signed by the third-party application using a third-party private key;
- verify the third-party issued identification using a third-party public key corresponding to the third party-private key;
- establish a secure communications channel with an issuer service;
- and
- request, through the secure communications channel, from an issuer service, a verifiable credential, wherein the request includes a decentralized identifier (DID) that represents the user and information obtained from the third-party issued identification, and wherein the verifiable credential represents the third-party issued identification.
Dependencies are inferred from the claim text.