Systems and methods for securely managing access to data and systems using encrypted attributes and real-time distributed network verification

A computer program product for securely managing access to data and systems using encrypted attributes and real-time distributed network verification, the computer program product comprising a non-transitory computer-readable medium comprising code causing an apparatus to:

• receive, via a communication network, using a network interface of the apparatus, and from an access management application executing on a user device associated with a user, a registration request to register the user in an access management system associated with the access management application;
• create, in response to the registration request, a cryptographic key, a proof protocol, a decentralized identifier, and a credential for the user;
• transmit, via the communication network, using the network interface, and to the access management application executing on the user device, the cryptographic key and the credential to cause the access management application to (i) prompt the user to select five different attributes for verification and (ii) encrypt the selected attributes using the cryptographic key to create five encrypted attributes;
• receive, via the communication network, using the network interface, and from the access management application executing on the user device, the five encrypted attributes;
• register the user on a distributed ledger of the access management system using the decentralized identifier and the five encrypted attributes;
• receive, via the communication network, using the network interface, and after registering the user, an authentication request comprising the proof protocol and the credential for the user;
• determine, in response to receiving the authentication request, using the proof protocol, and via the distributed ledger of the access management system, whether a threshold number of current attributes corresponding to the five encrypted attributes match the five encrypted attributes;
• and
• authenticate, in response to determining that the threshold number of current attributes corresponding to the five encrypted attributes match the five encrypted attributes, the authentication request.

A computer-implemented method for securely managing access to data and systems using encrypted attributes and real-time distributed network verification, the method comprising:

• receiving, via a communication network, using a network interface of a system, and from an access management application executing on a user device associated with a user, a registration request to register the user in an access management system associated with the access management application;
• creating, in response to the registration request, a cryptographic key, a proof protocol, a decentralized identifier, and a credential for the user;
• transmitting, via the communication network, using the network interface, and to the access management application executing on the user device, the cryptographic key and the credential to cause the access management application to (i) prompt the user to select five different attributes for verification and (ii) encrypt the selected attributes using the cryptographic key to create five encrypted attributes;
• receiving, via the communication network, using the network interface, and from the access management application executing on the user device, the five encrypted attributes;
• registering the user on a distributed ledger of the access management system using the decentralized identifier and the five encrypted attributes;
• receiving, via the communication network, using the network interface, and after registering the user, an authentication request comprising the proof protocol and the credential for the user;
• determining, in response to receiving the authentication request, using the proof protocol, and via the distributed ledger of the access management system, whether a threshold number of current attributes corresponding to the five encrypted attributes match the five encrypted attributes;
• and
• authenticating, in response to determining that the threshold number of current attributes corresponding to the five encrypted attributes match the five encrypted attributes, the authentication request.