ISSUING, PRESENTING AND CHALLENGING MOBILE DEVICE IDENTIFICATION DOCUMENTS

• US 20140013114A1
• Filed: 06/11/2013
• Published: 01/09/2014
• Est. Priority Date: 07/03/2012
• Status: Active Grant

• Current Assignee: Edison Vault, LLC
• Original Assignee: International Business Machines Corporation
• Inventors: Redpath, Richard
• Granted Patent: US 9,065,805 B2
• Time in Patent Office: Days
• US Class Current: 713/168
• CPC Class Codes: H04L 63/0428 wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04L 63/062 for key distribution, e.g. centrally by trusted party cryptographic mechanisms or cryptographic arrangements for key distribution involving a central third party H04L9/0819
• CPC Class Codes: H04L 63/0823 using certificates cryptographic mechanisms or cryptographic arrangements for entity authentication involving certificates H04L9/3263
• CPC Class Codes: H04L 63/12 Applying verification of the received information cryptographic mechanisms or cryptographic arrangements for data integrity or data verification H04L9/32
• CPC Class Codes: H04L 63/18 using different networks or channels, e.g. using out of band channels cryptographic mechanisms or cryptographic arrangements for key distribution involving distinctive intermediate devices or communication paths H04L9/0827; cryptographic mechanisms or cryptographic arrangements for authentication using a plurality of channels H04L9/3215

Abstract

Methods and systems of authenticating electronic identification (ID) documents may provide for receiving a decryption key and an encrypted ID document from a certificate authority server at a mobile device, wherein the encrypted ID document includes a read only document having a photograph of an individual. Additionally, the decryption key may be applied to the encrypted ID document to obtain a decryption result in response to a display request. The decryption result can be output via a display of the mobile device, wherein the encrypted ID document can be sent to a challenge terminal if a challenge request is received.

Claims

1. A method of operating a mobile device comprising:

receiving a decryption key and an encrypted identification document from a certificate authority server, wherein the encrypted identification document includes a read only document having a photograph of an individual;

applying the decryption key to the encrypted identification document to obtain a decryption result in response to a display request;

outputting the decryption result via a display of the mobile device; and

sending the encrypted identification document to a challenge terminal if a challenge request is received via a wireless interface of the mobile device.

2. The method of claim 1, further including receiving the display request via a user interface of the mobile device.

3. The method of claim 1, further including receiving the challenge request via one or more of a user interface of the mobile device and a bump interaction between the mobile device and the challenge terminal.

4. The method of claim 1, further including sending the encrypted identification document to a plurality of challenge terminals in response to a challenge request associated with each challenge terminal.

5. The method of claim 1, wherein the decryption key and the encrypted identification document are received from the certificate authority server in an application download.

6-25. -25. (canceled)