Systems and methods for sharing verified identity documents

• US 10,210,343 B2
• Filed: 08/22/2017
• Issued: 02/19/2019
• Est. Priority Date: 10/01/2013
• Status: Active Grant

• Current Assignee: Fleur de LIS SA
• Original Assignee: Trunomi Ltd.
• Inventors: Lacey, Stuart H.
• Primary Examiner(s): Hasan, Syed H
• Application Number:
  US15/683,610
• Publication Number:
  US 20170372091A1
• Time in Patent Office: 546 Days
• CPC Class Codes: G06F 16/93 Document management systems
• CPC Class Codes: G06F 21/316 by observing the pattern of computer usage, e.g. typical user behaviour
• CPC Class Codes: G06F 21/32 using biometric data, e.g. fingerprints, iris scans or voiceprints
• CPC Class Codes: G06F 21/602 Providing cryptographic facilities or services
• CPC Class Codes: G06F 21/6218 to a system of files or objects, e.g. local or distributed file system or database
• CPC Class Codes: G06F 2221/2111 Location-sensitive, e.g. geographical location, GPS
• CPC Class Codes: G06Q 20/02 involving a neutral party, e.g. certification authority, notary or trusted third party [TTP]
• CPC Class Codes: G06Q 20/3823 combining multiple encryption tools for a transaction
• CPC Class Codes: G06Q 20/389 Keeping log of transactions for guaranteeing non-repudiation of a transaction
• CPC Class Codes: G06Q 20/40145 Biometric identity checks
• CPC Class Codes: G07C 9/22 in combination with an identity check of the pass holder
• CPC Class Codes: G07C 9/27 with central registration
• CPC Class Codes: H04W 4/02 Services making use of location information
• CPC Class Codes: H04W 4/029 Location-based management or tracking services

Abstract

A method for sharing identity information is disclosed. The method is performed at one or more devices. The one or more devices obtain identity information of a user and facilitate storing, at a first device, a document that includes the identity information of the user. The document is stored in one or more encrypted containers. The one or more devices receive, from a second device of a third party, a request for at least a part of the identity information of the user. A request is sent to a client device, requesting authorization to release the requested part of the identity information to the third party. Device authorization to release the requested part of the information to the third party is received from the client device. In response to receiving the authorization, the one or more devices facilitate sending the requested part of the information to the third party.

Claims

1. A method for sharing identity information, comprising:

at one or more devices with one or more processors and memory storing one or more programs for execution by the one or more processors;

obtaining identity information of a user;

facilitating storing, at a first device of the one or more devices, a document that includes the identity information of the user, wherein the document is stored in one or more encrypted containers;

receiving, from a second device of a third party that is distinct from the first device and a client device of the user, a request for at least a part of the identity information of the user;

sending a request to the client device requesting authorization to release the requested part of the identity information to the third party;

receiving, from the client device, authorization to release the requested part of the identity information to the third party; and

in response to receiving the authorization, facilitating sending of the requested part of the identity information to the third party.

2. The method of claim 1, wherein the request for identity information of the user identifies one or more distinct information items.

3. The method of claim 1, wherein:

the authorization to release the requested part of the identity information to the third party includes a scope of the access that is to be granted to the requestor, and

the scope of the access that is to be granted to the requestor includes one or more access limits, specified by the user, for the information.

4. The method of claim 3, wherein the one or more access limits include a limit on a number of times that the third party may access the information.

5. The method of claim 3, wherein the one or more access limits include a limit on a duration during which the third party may access the information.

6. The method of claim 1, wherein the authorization to release the requested part of the identity information includes an approval for releasing a portion, less than all, of the requested part of the identity information.

7. The method of claim 1, wherein the request for at least a part of the identity information of the user includes an indication of minimum access requirements.

8. The method of claim 1, including generating a first decryption key.

9. The method of claim 8, wherein a second decryption key is generated by the client device.

10. The method of claim 8, wherein the first decryption key is sent with the requested part of the identification information.

11. The method of claim 8, including, after the requested part of the identity information is sent to the third party, facilitating sending the first decryption key to the third party.

12. The method of claim 1, including, after the requested part of the identity information is sent to the third party, facilitating sending the decryption key to the third party.

13. An electronic device, comprising:

one or more processors;

memory; and

one or more programs, wherein the one or more programs are stored in the memory and configured to be executed by the one or more processors, the one or more programs including instructions for;

obtaining identity information of a user;

facilitating storing, at the electronic device, a document that includes the identity information of the user, wherein the document is stored in one or more encrypted containers;

receiving, from a second device of a third party that is distinct from the electronic device and a client device of the user, a request for at least a part of the identity information of the user;

sending a request to the client device requesting authorization to release the requested part of the identity information to the third party;

receiving, from the client device, authorization to release the requested part of the identity information to the third party; and

in response to receiving the authorization, facilitating sending of the requested part of the identity information to the third party.

14. A non-transitory computer readable storage medium storing one or more programs, the one or more programs comprising instructions, which when executed by one or more devices, cause the one or more devices to:

obtain identity information of a user;

facilitate storing, at a first device of the one or more devices, a document that includes the identity information of the user, wherein the document is stored in one or more encrypted containers;

receive, from a second device of a third party that is distinct from the first device and a client device of the user, a request for at least a part of the identity information of the user;

send a request to the client device requesting authorization to release the requested part of the identity information to the third party;

receive, from the client device, authorization to release the requested part of the identity information to the third party; and

in response to receiving the authorization, facilitate sending of the requested part of the identity information to the third party.

15. The non-transitory computer readable storage medium of claim 14, wherein the request for identity information of the user identifies one or more distinct information items.

16. The non-transitory computer readable storage medium of claim 14, wherein:

the authorization to release the requested part of the identity information to the third party includes a scope of the access that is to be granted to the requestor, and

the scope of the access that is to be granted to the requestor includes one or more access limits, specified by the user, for the information.

17. The non-transitory computer readable storage medium of claim 14, wherein the authorization to release the requested part of the identity information includes an approval for releasing a portion, less than all, of the requested part of the identity information.

18. The non-transitory computer readable storage medium of claim 14, wherein the request for at least a part of the identity information of the user includes an indication of minimum access requirements.

19. The non-transitory computer readable storage medium of claim 14, wherein the one or more programs cause the one or more devices to generate a first decryption key.

20. The non-transitory computer readable storage medium of claim 19, wherein the first decryption key is sent with the requested part of the identification information.