Systems and methods for facilitating digital document communication

• US 10,630,648 B1
• Filed: 02/08/2017
• Issued: 04/21/2020
• Est. Priority Date: 02/08/2017
• Status: Active Grant

• Current Assignee: United Services Automobile Association
• Original Assignee: United Services Automobile Association
• Inventors: Borunda, Adrian, Anaruk, Andrew L., Hernandez, Heather, Vijayvergia, Gunjan C., Wright, III, William H., Shelton, John, Pickrel, Cory S., Liang, Minya, Rangarajan, Sudarshan
• Primary Examiner(s): Simitoski, Michael
• Assistant Examiner(s): Elarabi, Tarek
• Application Number:
  US15/427,898
• Time in Patent Office: 1,168 Days
• Field of Search: 713150, 713151, 713155, 713159, 713165, 713171, 713172, 713185
• CPC Class Codes: H04L 63/0428 wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04L 63/0435 wherein the sending and receiving network entities apply symmetric encryption, i.e. same key used for encryption and decryption cryptographic mechanisms or cryptographic arrangements for symmetric key encryption H04L9/06
• CPC Class Codes: H04L 63/062 for key distribution, e.g. centrally by trusted party cryptographic mechanisms or cryptographic arrangements for key distribution involving a central third party H04L9/0819
• CPC Class Codes: H04L 63/0807 using tickets, e.g. Kerberos cryptographic mechanisms or cryptographic arrangements for entity authentication using tickets or tokens H04L9/3213
• CPC Class Codes: H04L 9/08 Key distribution or management, e.g. generation, sharing or updating, of cryptographic keys or passwords network architectures or network communication protocols for supporting key management in a packet data network H04L63/06
• CPC Class Codes: H04L 9/0894 Escrow, recovery or storing of secret information, e.g. secret key escrow or cryptographic key storage
• CPC Class Codes: H04L 9/3213 using tickets or tokens, e.g. Kerberos network architectures or network communication protocols for entities authentication using tickets in a packet data network H04L63/0807
• CPC Class Codes: H04L 9/3234 involving additional secure or trusted devices, e.g. TPM, smartcard, USB or software token network architectures or network communication protocols for supporting authentication of entities using an additional device in a packet data network H04L63/0853
• CPC Class Codes: H04W 12/03 Protecting confidentiality, e.g. by encryption
• CPC Class Codes: H04W 12/043 using a trusted network node as an anchor
• CPC Class Codes: H04W 12/068 using credential vaults, e.g. password manager applications or one time password [OTP] applications
• CPC Class Codes: H04W 12/30 Security of mobile devices; Security of mobile applications
• CPC Class Codes: H04W 12/33 using wearable devices, e.g. using a smartwatch or smart-glasses
• CPC Class Codes: H04W 12/63 Location-dependent; Proximity-dependent

Abstract

Methods, systems, and apparatus, including computer programs encoded on computer storage media, to provide digital identification. One of these methods includes receiving a request for a digital document from a digital wallet executing on a mobile device. The method includes identifying a digital document provider capable of providing the requested document. The method includes sending the request for the digital document to the identified digital document provider. The method includes receiving, from the digital document provider, information that enables the mobile device to view the digital document and does not enable the computer system to view the digital document.

Claims

1. A method executing on a computer system comprising:

receiving, by the computer system from a digital wallet application on a mobile device, a request for a digital document to be sent to the digital wallet application;

identifying, by the computer system, a digital document provider system capable of providing the requested document by determining that a digital document provider software development kit (SDK) on the mobile device is configured to authorize the mobile device to access the digital document provider system;

sending, by the computer system, the request for the digital document to the identified digital document provider system;

receiving, by the computer system from the identified digital document provider system, an encrypted container and a token, the encrypted container comprising the digital document, wherein;

the digital document comprises an encrypted digital document;

the encrypted container cannot be decrypted by the digital wallet application and the computer system; and

the token identifies a location at the identified digital document provider system on which an encryption key capable of decrypting the encrypted container is stored; and

sending, by the computer system, the encrypted container and the token to the digital wallet application, wherein the encrypted container and token are transmittable by the digital wallet application to the digital document provider SDK, and wherein the digital document provider SDK is configured to;

transmit the token to the identified digital document provider system for receiving the encryption key capable of decrypting the encrypted container;

decrypt the encrypted digital document using a second encryption key, the second encryption key being stored on the mobile device; and

render the digital document based on the decrypted container via a display of the mobile device.

2. The method of claim 1, further comprising authenticating, by the computer system, a user of the mobile device.

3. A non-transitory computer storage medium encoded with computer program instructions, that when executed by one or more computers, cause the one or more computers to perform operations comprising:

receiving, from a digital wallet application on a mobile device, a request for a digital document to be send to the digital wallet application;

identifying a digital document provider system capable of providing the requested document by determining that a digital document provider software development kit (SDK) on the mobile device is configured to authorize the mobile device to access the digital document provider system;

sending the request for the digital document to the identified digital document provider system;

receiving, from the identified digital document provider system, an encrypted container and a token, the encrypted container comprising the digital document, wherein;

the digital document comprises an encrypted digital document;

the encrypted container cannot be decrypted by the digital wallet application and the one or more computers; and

the token identifies a location at the identified digital document provider system on which an encryption key capable of decrypting the encrypted container is stored; and

sending the encrypted container and the token to the digital wallet application, wherein the encrypted container and the token are transmittable by the digital wallet application to the digital document provider SDK, and wherein the digital document provider SDK is configured to;

transmit the token to the identified digital document provider system for receiving the encryption key capable of decrypting the encrypted container;

decrypt the encrypted digital document using a second encryption key, the second encryption key being stored on the mobile device; and

render the digital document based on the decrypted container via a display of the mobile device.

4. The non-transitory computer storage medium of claim 3, wherein the operations further comprise authenticating a user of the mobile device.

5. A system comprising:

one or more computers and one or more storage devices storing instructions that are operable, when executed by the one or more computers, to cause the one or more computers to perform operations comprising;

receiving, from a digital wallet application on a mobile device, a request for a digital document to be send to the digital wallet application;

identifying a digital document provider system capable of providing the requested document by determining that a digital document provider software development kit (SDK) on the mobile device is configured to authorize the mobile device to access the digital document provider system;

sending the request for the digital document to the identified digital document provider system;

receiving, from the identified digital document provider system, an encrypted container and a token, the encrypted container comprising the digital document, wherein;

the digital document comprises an encrypted digital document;

the encrypted container cannot be decrypted by the digital wallet application and the one or more computers; and

the token identifies a location at the identified digital document provider system on which an encryption key capable of decrypting the encrypted container is stored; and

sending the encrypted container and the token to the digital wallet application, wherein the encrypted container and the token are transmittable by the digital wallet application to the digital document provider SDK, and wherein the digital document provider SDK is configured to;

transmit the token to the identified digital document provider system for receiving the encryption key capable of decrypting the encrypted container;

decrypt the encrypted digital document using a second encryption key, the second encryption key being stored on the mobile device; and

render the digital document based on the decrypted container via a display of the mobile device.

6. The system of claim 5, wherein the operations further comprise authenticating a user of the mobile device.