Zero-knowledge identity verification in a distributed computing system
Assigneesalesforce.com, inc.
InventorsHal Scott Hildebrand, Prithvi Krishnan Padmanabhan
Life of this patent
Estimating the term…
Abstract
For each data value associated with a data object, a respective object value identification query message that includes the data value may be sent to each of a plurality of identity nodes via a network. For each of the data values, a respective object value identification response message that includes a respective network identifier corresponding with the respective data value may be received. A local identifier may be determined based on the object value identification response messages, and a response query message including the local identifier may be transmitted.
Claims20
A method comprising:
- receiving via a communications interface a request to identify a data object that includes a plurality of data values;
- for each of the data values, transmitting a respective object value identification query message that includes the data value to each of a plurality of identity nodes via a network;
- for each of the data values, receiving a respective object value identification response message that includes a respective network identifier corresponding with the respective data value;
- determining via a processor a local identifier based on the object value identification response messages;
- and
- transmitting a query response message including the local identifier via the communications interface.
A database system implemented via a server system, the server system configurable to cause:
- processing a request received via a communications interface to identify a data object that includes a plurality of data values;
- for each of the data values, transmitting a respective object value identification query message that includes the data value to each of a plurality of identity nodes via a network;
- for each of the data values, receiving a respective object value identification response message that includes a respective network identifier corresponding with the respective data value;
- determining via a processor a local identifier based on the object value identification response messages;
- and
- transmitting a query response message including the local identifier via the communications interface.
A computer program product comprising computer-readable program code capable of being executed by one or more processors when retrieved from a non-transitory computer-readable medium, the program code configurable to cause:
- processing a request received via a communications interface to identify a data object that includes a plurality of data values;
- for each of the data values, transmitting a respective object value identification query message that includes the data value to each of a plurality of identity nodes via a network;
- for each of the data values, receiving a respective object value identification response message that includes a respective network identifier corresponding with the respective data value;
- determining via a processor a local identifier based on the object value identification response messages;
- and
- transmitting a query response message including the local identifier via the communications interface.
Dependencies are inferred from the claim text.