# US 2023/0275884 A1 · Blockchain systems and methods for user authentication

> Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt

- Number: US 2023/0275884 A1
- Document ID: US20230275884A1
- Status: Published application
- Kind: A1
- Application number: 18/310,506
- Filed: 2023-05-01
- Published: 2023-08-31
- Earliest claimed: 2016-06-17
- Assignees: Capital One Services, LLC
- Applicants: Capital One Services, LLC
- Inventors: Jonathan WEIMER; Ryan FOX
- Web page: https://patentgrep.com/patent/US20230275884A1

## CPC

- H04L 63/08: {for authentication of entities (cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32)}
- G06F 21/31: User authentication
- H04L 9/3213: {using tickets or tokens, e.g. Kerberos (network architectures or network communication protocols for entities authentication using tickets in a packet data network H04L63/0807)}
- H04L 9/3239: {involving non-keyed hash functions, e.g. modification detection codes [MDCs], MD5, SHA or RIPEMD}
- H04L 9/3247: {involving digital signatures}
- H04L 9/50: {using hash chains, e.g. blockchains or hash trees}
- H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M)
- G06F: ELECTRIC DIGITAL DATA PROCESSING (computer systems based on specific computational models G06N)

## Abstract

Computer-implemented methods and systems are provided for blockchain-mediated user authentication. Consistent with disclosed embodiments, authentication may comprise operations including receiving, from a user system, an authentication request for a user. The operations may also include determining a root system for the user using a blockchain, and redirecting the user system to the root system. The operations may include receiving, following redirection, a verification message indicating that the root system successfully authenticated the user, and including an authorization code for receiving, from the root system, a root system secret. The operations may include receiving from a database, identification data using the root system secret. Determining the root system may comprise identifying, using the authentication request and index information stored in the blockchain, a block of the blockchain storing root system information for the user. Receiving the identification data may comprise retrieving identification data from the database.

## Claims

### Claim 1

An authentication system comprising:
at least one processor; and
at least one memory containing instructions that, when executed by the at least one processor, cause the authentication system to perform operations comprising:
receiving a request from a root system to authenticate a user, the root system:
being a first member system with access to a private blockchain, the blockchain:
comprising blocks;
having miners; and
satisfying a proof-of-work condition;
being distinct from the user, a root system block comprising:
root information identifying the root system; and
an authentication record;
providing, in response to the authentication request, a confirmation message to the user;
receiving at least one credential respectively from two separate devices associated with the user;
analyzing the received credentials with the root system; and
determining that the private blockchain comprises at least one root system block for the user.

### Claim 2 (depends on 1)

The authentication system of claim 1, wherein the operations further comprise:
receiving personal information for the user;
generating identification data for the user using the received personal information;
encrypting the identification data using a root system key; and
storing the encrypted identification data in a database.

### Claim 3 (depends on 2)

The authentication system of claim 2, wherein the database comprises at least one of a distributed database, a federated database, or a distributed hash table.

### Claim 4 (depends on 2)

The authentication system of claim 2, wherein:
the database comprises a distributed hash table; and
nodes of the distributed hash table are associated with members of the authentication system, the members comprising at least one of member systems or users.

### Claim 5 (depends on 2)

The authentication system of claim 2, wherein the identification data comprises at least one of:
sensitive personal information;
information gathered in compliance with government guidelines for identifying customers; or
an indication of a method used to authenticate the user to an institution associated with the root system.

### Claim 6 (depends on 1)

The authentication system of claim 1, wherein the root information:
is at least one of obfuscated or encrypted; and
indicates a location of at least one of the root system or a location service.

### Claim 7 (depends on 1)

The authentication system of claim 1, wherein the authentication record:
is at least one of obfuscated or encrypted; and
identifies at least one of the member system, an institution associated with the member system, an authentication purpose, or an authentication result.

### Claim 8 (depends on 1)

The authentication system of claim 1, wherein:
the blocks comprise headers and messages;
the messages comprise at least one of index information identifying the user, root information, or authentication record; and
the headers comprise at least one of:
a hash of a previous block;
a hash of the messages in the block; or
a timestamp.

### Claim 9 (depends on 8)

The authentication system of claim 8, wherein the header further comprises a nonce such that the header satisfies the proof-of-work condition.

### Claim 10 (depends on 8)

The authentication system of claim 8, wherein at least one of the headers or the messages are digitally signed with a cryptographic key of an authorized system.

### Claim 11 (depends on 10)

The authentication system of claim 10, wherein the digital signature is verifiable by a key available to members of the authentication system, the members comprising member systems or users.

### Claim 12 (depends on 1)

The authentication system of claim 1, wherein:
the miners comprise at least one of institutions associated with members of the authentication system, associates of the institutions associated with the members, or users; and
the members comprise at least one of member systems or users.

### Claim 13 (depends on 1)

The authentication system of claim 1, wherein the confirmation message comprises a confirmation code.

### Claim 14 (depends on 13)

The authentication system of claim 13, wherein the confirmation code is transmitted to a designated user device.

### Claim 15 (depends on 14)

The authentication system of claim 14, wherein the confirmation code is transmitted through at least one of a text message, or an email.

### Claim 16 (depends on 1)

The authentication system of claim 1, wherein the system receives the confirmation message back from the user, and the system confirms the message.

### Claim 17

An authentication method comprising:
receiving a request from a root system to authenticate a user, the root system:
being a first member system with access to a private blockchain, the blockchain:
comprising blocks;
having miners; and
satisfying a proof-of-work condition;
being distinct from the user, a root system block comprising:
root information identifying the root system; and
an authentication record;
providing, in response to the authentication request, a confirmation message to the user;
receiving at least one credential respectively from two separate devices associated with the user;
analyzing the received credentials with the root system; and
determining that the private blockchain comprises at least one root system block for the user.

### Claim 18 (depends on 17)

The authentication method of claim 17, wherein the confirmation message comprises a confirmation code.

### Claim 19 (depends on 18)

The authentication method of claim 18, wherein the confirmation code is transmitted to a designated user device.

### Claim 20 (depends on 19)

The authentication method of claim 19, wherein the confirmation code is transmitted through at least one of a text message, or an email.