USING MULTIPLE DIGITAL IDENTIFICATION DOCUMENTS TO CONTROL INFORMATION DISCLOSURE

• US 20150358166A1
• Filed: 06/04/2014
• Published: 12/10/2015
• Est. Priority Date: 06/04/2014
• Status: Active Grant

• Current Assignee: Green Market Square Limited
• Original Assignee: International Business Machines Corporation
• Inventors: Redpath, Richard
• Granted Patent: US 9,544,150 B2
• Time in Patent Office: Days
• US Class Current: 1/1
• CPC Class Codes: G06F 21/64 Protecting data integrity, e.g. using checksums, certificates or signatures
• CPC Class Codes: G06Q 10/00 Administration; Management
• CPC Class Codes: H04L 63/00 Network architectures or network communication protocols for network security cryptographic mechanisms or cryptographic arrangements for secret or secure communication H04L9/00; network architectures or network communication protocols for wireless network security H04W12/00; security arrangements for protecting computers or computer systems against unauthorised activity G06F21/00
• CPC Class Codes: H04L 63/123 received data contents, e.g. message integrity
• CPC Class Codes: H04L 9/3247 involving digital signatures

Abstract

A first digital identification document is transmitted from an identification authority to a mobile device of an identified individual. This first digital identification document is digitally signed and includes a set of attributes about the identified individual. In the same manner, a second digital identification document is also transmitted to the identified individual'"'"'s mobile device. The second digital identification document is also digitally signed but includes a different set of attributes about the identified individual. The identified individual is then confronted by a series of challengers, wherein each challenger requires a different amount of information about the identified individual. Based on the identity of each challenger, the identified individual selects an appropriate identification document and transmits it to the applicable challenger'"'"'s device. The challenger is then able to confirm both the information he needs about the identified individual and the validity of the identification document that he receives.

Claims

1. A computer program product for managing digital identification documents, the computer program product comprising a computer readable storage medium having program instructions embodied therewith, the program instructions executable by at least one computer to cause the at least one computer to:

transmit a plurality of digital identification documents to a computer of an identified individual, each digital identification document of the plurality of digital identification documents including a differing set of attributes about the identified individual and a digital signature;

receive a selected digital identification document of the plurality of digital identification documents from a first mobile device of the identified individual; and

analyze the digital signature of the selected digital identification document, whereby the validity of the selected digital identification document is confirmed.

2. The computer program product of claim 1, wherein the program instructions are executable by the at least one computer to further cause the at least one computer to:

provide a user interface whereby the identified individual can select for inclusion in a first of the differing sets of attributes about the identified individual a first subset of available attributes among a plurality of available attributes about the identified individual.

3. The computer program product of claim 2, wherein the program instructions are executable by the at least one computer to further cause the at least one computer to:

in response to the selection of the first subset of available attributes for inclusion in the first of the differing sets of attributes, create a first digital identification document of the plurality of digital identification documents, the first digital identification document including the first of the differing sets of attributes and the digital signature.

4. The computer program product of claim 3, wherein at least one of an image of the identified individual, an address of the identified individual, a birth date of the identified individual, a driver'"'"'s license number of the identified individual, a name of the identified individual, and a height of the identified individual are included the plurality of available attributes and excluded from the first subset of available attributes.

5. The computer program product of claim 4, wherein at least one of an image of the identified individual, an address of the identified individual, a birth date of the identified individual, a driver'"'"'s license number of the identified individual, a name of the identified individual, and a height of the identified individual are included in each of the differing sets of attributes.

6. The computer program product of claim 3, wherein the first digital identification document and the selected digital identification document are the same.

7. The computer program product of claim 1, wherein all of the plurality of digital identification documents are transmitted to the computer of the identified individual contemporaneously.

8. The computer program product of claim 1, wherein the computer of the identified individual and the first mobile device of the identified individual are the same device.

9. The computer program product of claim 1, wherein the at least one computer comprises a computer system of a representative of an identification authority and a challenger'"'"'s device, wherein the transmitting the plurality of digital identification documents to the computer of the identified individual is from the computer system of the representative, and wherein the receiving the selected digital identification document and the analyzing the digital signature of the selected digital identification document are by the challenger'"'"'s device.

10. The computer program product of claim 9, wherein the receiving the selected digital identification document is performed via a direct wireless connection between the first mobile device and the challenger'"'"'s device.

11. The computer program product of claim 9, wherein the program instructions are executable by the at least one computer to further cause the at least one computer to:

transmit, from the computer system of the representative of the identification authority, to the challenger'"'"'s device a list of revoked digital identification documents.

12. The computer program product of claim 1, wherein the analyzing the digital signature of the selected digital identification document is performed using a public key, and wherein the program instructions are executable by the at least one computer to further cause the at least one computer to:

generate the digital signature of the selected digital identification document by signing the selected digital identification document with a private key corresponding to the public key.

13. A computer program product for managing digital identification documents, the computer program product comprising a computer readable storage medium having program instructions embodied therewith, the program instructions executable by at least one computer to cause the at least one computer to:

receive from a computer system of a representative of an identification authority, on a computer of an identified individual, a plurality of digital identification documents, each of the plurality of digital identification documents including a differing plurality of attributes about the identified individual;

provide a user interface, via a first mobile device of the identified individual, whereby the identified individual can make a first selection of a first digital identification document of the plurality of digital identification documents; and

transmit, based on the first selection, the first digital identification document from the first mobile device of the identified individual to a first challenger'"'"'s device of a first challenger, whereby the first challenger is able to determine the validity of the first digital identification document using the first challenger'"'"'s device.

14. The computer program product of claim 13, wherein the program instructions are executable by the at least one computer to further cause the at least one computer to:

provide the user interface, via the first mobile device of the identified individual, whereby the identified individual can make a second selection of a second digital identification document of the plurality of digital identification documents; and

transmit, based on the second selection, the first digital identification document from the first mobile device of the identified individual to a second challenger'"'"'s device of a second challenger, whereby the second challenger is able to determine the validity of the second digital identification document using the second challenger'"'"'s device.

15. The computer program product of claim 14, wherein the first selection is determined based on at least the identity of the first challenger, and wherein the second selection is determined based on at least the identity of the second challenger.

16. The computer program product of claim 14, wherein the first digital identification document includes a first digital signature, wherein the second digital identification document includes a second digital signature, wherein the at least one computer includes the first challenger'"'"'s device and the second challenger'"'"'s device, and wherein the program instructions are executable by the at least one computer to further cause the at least one computer to:

analyze, using the first challenger'"'"'s device, the first digital signature; and

analyze, using the second challenger'"'"'s device, the second digital signature.

17. The computer program product of claim 14, wherein the at least one computer includes the first challenger'"'"'s device, wherein the first challenger is entitled to receive on the first challenger'"'"'s device from the computer system of the representative of the identification authority a list of digital identification documents associated with identified individuals who have had one or more privileges revoked by the identification authority, wherein the second challenger is not entitled to receive the list of digital identification documents, and wherein the program instructions are executable by the at least one computer to further cause the at least one computer to:

prior to the transmitting the first digital identification document from the first mobile device to the first challenger'"'"'s device, receive from the computer system of the representative of the identification authority, on the first challenger'"'"'s device, the list of digital identification documents; and

analyze, using the first challenger'"'"'s device, the first digital identification document, whereby the first challenger is able to determine that the first digital identification document is included on the list of digital identification documents.

18. A system for managing digital identification documents, the system comprising:

a first mobile device of an identified individual, the first mobile device configured to;

receive from a computer system of a representative of an identification authority, a plurality of digital identification documents, each of the plurality of digital identification documents including a differing plurality of attributes about the identified individual and a digital signature;

provide a user interface, whereby the identified individual can make a first selection of a first digital identification document of the plurality of digital identification documents; and

transmit, based on the first selection, the first digital identification document to a second mobile device of a first challenger, whereby the first challenger is able to determine the validity of the first digital identification document by analyzing its digital signature.

provide the user interface, whereby the identified individual can make a second selection of a second digital identification document of the plurality of digital identification documents; and

transmit, based on the second selection, the second digital identification document from the first mobile device of the identified individual to a third mobile device of a second challenger, whereby the second challenger is able to determine the validity of the second digital identification document by analyzing its digital signature.

19. The system of claim 18 further comprising:

at least one computer system of an identification authority configured to;

generate the digital signatures of the plurality of digital identification documents by signing the plurality of digital identification documents with a private key;

transmit the plurality of digital identification documents to the first mobile device; and

the second mobile device configured to;

analyze the digital signature of the first digital identification document using a public key corresponding to the private key;

20. The system of claim 18 further comprising:

the third mobile device configured to;

analyze the digital signature of the second digital identification document using the public key.