Systems and methods for creating a verified digital association

• US 10,452,828 B1
• Filed: 12/11/2018
• Issued: 10/22/2019
• Est. Priority Date: 12/11/2018
• Status: Active Grant

• Current Assignee: Bullish Global (Block.One)
• Original Assignee: Block.One
• Inventors: Larimer, Daniel J., Whitner, Richard B., Hallgren, Thomas C., Fleming, Todd B.
• Primary Examiner(s): Chai, Longbit
• Application Number:
  US16/216,956
• Time in Patent Office: 315 Days
• Field of Search: 726 7
• CPC Class Codes: G06F 16/182 Distributed file systems
• CPC Class Codes: G06F 21/32 using biometric data, e.g. fingerprints, iris scans or voiceprints
• CPC Class Codes: G06F 21/33 using certificates
• CPC Class Codes: G06F 21/45 Structures or tools for the administration of authentication
• CPC Class Codes: G06F 2221/2101 Auditing as a secondary aspect
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/083 using passwords cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226
• CPC Class Codes: H04L 63/12 Applying verification of the received information cryptographic mechanisms or cryptographic arrangements for data integrity or data verification H04L9/32
• CPC Class Codes: H04L 63/123 received data contents, e.g. message integrity
• CPC Class Codes: H04L 9/3231 Biological data, e.g. fingerprint, voice or retina network architectures or network communication protocols for supporting authentication of entities using biometrical features in a packet data network H04L63/0861
• CPC Class Codes: H04L 9/3239 involving non-keyed hash functions, e.g. modification detection codes [MDCs], MD5, SHA or RIPEMD
• CPC Class Codes: H04L 9/3247 involving digital signatures
• CPC Class Codes: H04L 9/50 using hash chains, e.g. blockchains or hash trees

Abstract

Methods and systems for creating a digital association are provided. The method includes obtaining a first user-generated item comprising a first user identifiable feature of a first user and a second user identifiable feature of a second user, and obtaining a second user-generated item comprising the first user identifiable feature and the second user identifiable feature. The method also includes cross-confirming that the first and second user-generated items are valid to verify the digital association. The method also includes digitally signing the first user-generated item with a first certified device to generate a first secure digital artifact, and digitally signing the second user-generated item with a second certified device to generate a second secure digital artifact. The method also includes uploading the first and second secure digital artifacts to an auditable chain of a public ledger comprising a database. The method also includes verifying the digital association by auditing the auditable chain.

Claims

1. A computer-implemented method for creating a digital association, comprising:

obtaining a first user-generated item generated through a first certified device, the first user-generated item comprising a first user identifiable feature of a first user and a second user identifiable feature of a second user, wherein the first user-generated item comprises first biometric identifiable features of the first user generated by the first certified device;

obtaining a second user-generated item generated through a second certified device, the second user-generated item comprising the first user identifiable feature and the second user identifiable feature, wherein the second user-generated item comprises second biometric identifiable features of the second user generated by the second certified device, the first biometric identifiable features and the second biometric identifiable features distinct from each other and the first user distinct from the second user;

cross-confirming, through the first certified device and the second certified device, that the first user-generated item and the second user-generated item are valid to verify the digital association of the first user and the second user;

digitally signing the first user-generated item with the first certified device to generate a first secure digital artifact;

digitally signing the second user-generated item with the second certified device to generate a second secure digital artifact;

uploading the first secure digital artifact and the second secure digital artifact to an auditable chain of a public ledger, wherein the public ledger comprises a database and a link is created in the auditable chain by associating the first user-generated item with the second user-generated item; and

verifying the digital association of the first user and the second user by auditing the auditable chain.

2. The computer-implemented method of claim 1, further comprising:

verifying the first certified device belongs to the first user; and

verifying the second certified device belongs to the second user.

3. The computer-implemented method of claim 2, wherein:

verifying the first certified device comprises;

establishing a first form of authentication for the first certified device, the first form of authentication comprising at least one of a password, an audio signature, or a biometric input, the biometric input comprising a fingerprint or facial recognition, and

verifying the second certified device comprises;

establishing a second form of authentication for the second certified device, the second form of authentication comprising at least one of a password, an audio signature, or a biometric input, the biometric input comprising a fingerprint or facial recognition.

4. The computer-implemented method of claim 2, further comprising:

tying the first certified device to a first private key, the first private key located on the first certified device; and

tying the second certified device to a second private key, the second private key located on the second certified device.

5. The computer-implemented method of claim 1, further comprising:

digitally signing the second user-generated item with the first certified device to generate the second secure digital artifact; and

digitally signing the first user-generated item with the second certified device to generate the first secure digital artifact.

6. The computer-implemented method of claim 1, further comprising:

digitally signing the first user-generated item with a third-party certifier to generate the first secure digital artifact; and

digitally signing the second user-generated item with the third-party certifier to generate the second secure digital artifact.

7. The computer-implemented method of claim 1, further comprising:

obtaining first sensor data associated with the first user-generated item; and

obtaining second sensor data associated with the second user-generated item.

8. The computer-implemented method of claim 1, wherein the cross-confirming comprises:

comparing the first user identifiable feature from the first user-generated item with the first user identifiable feature from the second user-generated item; and

verifying the digital association when the comparing is within a threshold.

9. A system for creating a digital association, comprising:

a memory storing sequences of instructions; and

a hardware processor configured to execute the sequences of instructions which, when executed, causes the hardware processor to perform;

obtaining a first user-generated item generated through a first certified device, the first user-generated item comprising a first user identifiable feature and a second user identifiable feature, wherein the first user-generated item comprises first biometric identifiable features of the first user generated by the first certified device;

obtaining a second user-generated item generated through a second certified device, the second user-generated item comprising the first user identifiable feature and the second user identifiable feature, wherein the second user-generated item comprises second biometric identifiable features of the second user generated by the second certified device, the first biometric identifiable features and the second biometric identifiable features distinct from each other and the first user distinct from the second user;

cross-confirming, through the first certified device and the second certified device, that the first user-generated item and the second user-generated item are valid to verify the digital association of a first user and a second user;

digitally signing the first user-generated item with the first certified device to generate a first secure digital artifact;

digitally signing the second user-generated item with the second certified device to generate a second secure digital artifact;

uploading the first secure digital artifact and the second secure digital artifact to an auditable chain of a public ledger, wherein the public ledger comprises a database and a link is created in the auditable chain by associating the first user-generated item with the second user-generated item; and

verifying the digital association of the first user and the second user by auditing the auditable chain.

10. The system of claim 9, further comprising stored sequences of instructions, which when executed by the processor, cause the processor to perform:

verifying the first certified device belongs to the first user; and

verifying the second certified device belongs to the second user.

11. The system of claim 10, wherein:

verifying the first certified device comprises;

establishing a first form of authentication for the first certified device, the first form of authentication comprising at least one of a password, an audio signature, or a biometric input, the biometric input comprising a fingerprint or facial recognition, and

verifying the second certified device comprises;

establishing a second form of authentication for the second certified device, the second form of authentication comprising at least one of a password, an audio signature, or a biometric input, the biometric input comprising a fingerprint or facial recognition.

12. The system of claim 10, further comprising stored sequences of instructions, which when executed by the processor, cause the processor to perform:

tying the first certified device to a first private key, the first private key located on the first certified device; and

tying the second certified device to a second private key, the second private key located on the second certified device.

13. The system of claim 9, further comprising:

digitally signing the second user-generated item with the first certified device to generate the second secure digital artifact; and

digitally signing the first user-generated item with the second certified device to generate the first secure digital artifact.

14. The system of claim 9, further comprising stored sequences of instructions, which when executed by the processor, cause the processor to perform:

digitally signing the first user-generated item with a third-party certifier to generate the first secure digital artifact; and

digitally signing the second user-generated item with the third-party certifier to generate the second secure digital artifact.

15. A non-transitory computer readable storage medium is provided including instructions that, when executed by a hardware processor, cause the hardware processor to perform a method for creating a digital association, the method comprising:

obtaining a first user-generated item generated through a first certified device, the first user-generated item comprising a first user identifiable feature and a second user identifiable feature, wherein the first user-generated item comprises first biometric identifiable features of the first user generated by the first certified device;

obtaining a second user-generated item generated through a second certified device, the second user-generated item comprising the first user identifiable feature and the second user identifiable feature, wherein the second user-generated item comprises second biometric identifiable features of the second user generated by the second certified device, the first biometric identifiable features and the second biometric identifiable features distinct from each other and the first user distinct from the second user;

cross-confirming, through the first certified device and the second certified device, that the first user-generated item and the second user-generated item are valid to verify the digital association of a first user and a second user;

digitally signing the first user-generated item with the first certified device to generate a first secure digital artifact;

digitally signing the second user-generated item with the second certified device to generate a second secure digital artifact;

uploading the first secure digital artifact and the second secure digital artifact to an auditable chain of a public ledger, wherein the public ledger comprises a database and a link is created in the auditable chain by associating the first user-generated item with the second user-generated item; and

verifying the digital association of the first user and the second user by auditing the auditable chain.

16. The non-transitory computer readable storage medium of claim 15, wherein the method further comprises:

verifying the first certified device belongs to the first user; and

verifying the second certified device belongs to the second user.