IDENTITY CREDENTIAL VERIFICATION TECHNIQUES

• US 20190325125A1
• Filed: 09/05/2018
• Published: 10/24/2019
• Est. Priority Date: 04/24/2018
• Status: Active Grant

• Current Assignee: Apple Inc.
• Original Assignee: Apple Inc.
• Inventors: Pantfoerder, Achim, Borges, Daniel R., Graff, Irene M., Bergerengen, Johan O., Marri Sridhar, Subash, Elliott, Thomas
• Granted Patent: US 11,093,597 B2
• Time in Patent Office: Days
• CPC Class Codes: G06F 21/32 using biometric data, e.g. fingerprints, iris scans or voiceprints
• CPC Class Codes: G06F 21/33 using certificates
• CPC Class Codes: G06F 21/44 Program or device authentication
• CPC Class Codes: G06F 21/6245 Protecting personal data, e.g. for financial or medical purposes
• CPC Class Codes: H04L 2209/80 Wireless
• CPC Class Codes: H04L 2209/84 Vehicles
• CPC Class Codes: H04L 63/0492 by using a location-limited connection, e.g. near-field communication or limited proximity of entities
• CPC Class Codes: H04L 63/0823 using certificates cryptographic mechanisms or cryptographic arrangements for entity authentication involving certificates H04L9/3263
• CPC Class Codes: H04L 9/30 Public key, i.e. encryption algorithm being computationally infeasible to invert or user's encryption keys not requiring secrecy
• CPC Class Codes: H04L 9/3228 One-time or temporary data, i.e. information which is sent for every authentication or authorization, e.g. one-time-password, one-time-token or one-time-key
• CPC Class Codes: H04L 9/3268 using certificate validation, registration, distribution or revocation, e.g. certificate revocation list [CRL]
• CPC Class Codes: H04W 12/50 Secure pairing of devices
• CPC Class Codes: H04W 4/80 Services using short range communication, e.g. near-field communication [NFC], radio-frequency identification [RFID] or low energy communication
• CPC Class Codes: H04W 8/005 Discovery of network devices, e.g. terminals

Abstract

Embodiments of the present disclosure are directed to, among other things, improving data security with respect to data collection, verification, and authentication techniques associated with obtaining and transmitting identity information. For example, an identification credential may be received (e.g., via a short-range communications protocol such as iBeacon) by a first device from a second device. The credential may be associated with a second user of the second device. The first device may verify the credential and, if valid, an additional option to approve a secure communications channel may be presented at the first device. If the additional option is selected, a secure communications channel may be established between the first device and the second device.

Claims

1. A computer-implemented method, comprising:

obtaining, by a first device, a virtual driver'"'"'s license credential associated with a user;

storing, by the first device, the virtual driver'"'"'s license credential and a first license plate identifier associated with a vehicle;

receiving, by the first device while in a first vehicle, a communications request from a second device in a second vehicle, the communications request utilizing a short-range communications protocol and comprising a second license plate identifier;

presenting, on a user interface of the first device, an option to approve the communications request based at least in part on determining that the second license plate identifier matches the first license plate identifier;

in accordance with a determination that the option was selected, transmitting, by the first device in the first vehicle to the second device in the second vehicle, a response to the communications request via a short-range communications channel corresponding to the short- range communications protocol;

establishing, utilizing a secure communications protocol, a secure communications channel between the first device and the second device based at least in part on transmitting the response; and

transmitting, by the first device in the first vehicle to the second device in the second vehicle, at least a portion of the virtual driver'"'"'s license credential utilizing the secure communications channel.

2. The computer-implemented method of claim 1, further comprising:

obtaining, by the first device, one or more documents to be associated with the virtual driver'"'"'s license credential;

storing, by the first device, the one or more documents as being associated with the virtual driver'"'"'s license credential; and

providing, on the user interface of the first device, a transmit option related to transmitting the one or more documents to the second device via the secure communications channel.

3. The computer-implemented method of claim 2, wherein the one or more documents comprise at least one of:

a vehicle insurance document or a vehicle registration document.

4. The computer-implemented method of claim 1, wherein the virtual driver'"'"'s license credential comprises at least one of a driver'"'"'s license number, a first name, a last name, a street address, a city, a state, a zip code, an eye color, a hair color, a height, a weight, a date of birth, or an expiration date.

5. The computer-implemented method of claim 1, wherein the virtual driver'"'"'s license credential is issued by a certification authority, wherein the virtual driver'"'"'s license credential is digitally signed with a public key associated with the certification authority, and wherein the driver'"'"'s license credential is verified at the second device.

6. The computer-implemented method of claim 1, further comprising:

receiving, by the first device while in the first vehicle from the second device in the second vehicle, an identification credential associated with a second user of the second vehicle;

verifying, at the first device, the second user of the second vehicle based at least in part on the identification credential;

presenting, on the user interface of the first device, an additional option to approve the secure communications channel being established based at least in part on the identity of the second user of the second vehicle being verified; and

receiving an indication that the additional option was selected, wherein establishing the secure communications channel between the first device and the second device is further based at least in part on the indication that the additional option was selected.

7. The computer-implemented method of claim 6, further comprising:

storing, at the first device, a mapping identifying a plurality of identification credentials associated with a plurality of law enforcement entities, wherein identity of the second user of the second vehicle is verified using the identification credential associated with the second user of the second vehicle and the mapping.

8. A computing device, comprising:

a processor; and

a memory storing computer-readable instructions that, upon execution by the processor, configure the computing device to;

store a virtual driver'"'"'s license credential and a license plate identifier associated with the virtual driver'"'"'s license credential;

receive a communications request from a different computing device, the communications request utilizing a short-range communications protocol and including the license plate identifier;

present, at a user interface of the computing device, an option to approve the communications request;

in accordance with a determination that the option was selected, transmit a response to the communications request to the different computing device via a short- range communications channel corresponding to the short-range communications protocol;

establish, utilizing a secure communications protocol, a secure communications channel between the computing device and the different computing device based at least in part on transmitting the response; and

transmit, to the different computing device, at least a portion of the virtual driver'"'"'s license credential utilizing the secure communications channel.

9. The computing device of claim 8, wherein the virtual driver'"'"'s license credential is associated with a plurality of license plate identifiers, the plurality of license plate identifiers comprising the license plate identifier.

10. The computing device of claim 8, wherein the short-range communications protocol corresponding to the short-range communications channel is a Bluetooth protocol.

11. The computing device of claim 8, wherein the secure communications protocol comprises one of a near-me area network (NAN) protocol, a wide area network (WAN) protocol, a wireless direct link protocol, or a wireless communications protocol.

12. The computing device of claim 8, wherein the processor is further configured to execute the computer-readable instructions to at least:

receive, from the different computing device, an identification credential associated with a user of the different computing device;

provide, to a server computer, the identification credential associated with the user of the different computing device;

receive, from the server computer, an indication that the identity of the user of the different computing device is verified;

present, on the user interface of the computing device, an additional option to approve the secure communications channel being established based at least in part on the identity of the user of the different computing device being verified; and

receive an indication that the additional option was selected, wherein establishing the secure communications channel between the computing device and the different computing device is further based at least in part on the indication that the additional option was selected.

13. The computing device of claim 8, wherein the computing device operates in a first vehicle and wherein the different computing device operates, at least in part, in a second vehicle.

14. A computer-readable storage medium having stored thereon computer- executable instructions that, when executed by a processor, cause the processor to perform operations comprising:

storing a virtual driver'"'"'s license credential and a license plate identifier associated with the virtual driver'"'"'s license credential;

receiving a communications request from a different computing device, the communications request utilizing a short-range communications protocol and comprising the license plate identifier;

presenting, at a user interface, an option to approve the communications request;

in accordance with a determination that the option was selected, transmitting a response to the communications request to a different computing device via a short-range communications channel corresponding to the short-range communications protocol;

establishing, utilizing a secure communications protocol, a secure communications channel with the different computing device based at least in part on transmitting the response; and

transmitting, to the different computing device, at least a portion of the virtual driver'"'"'s license credential utilizing the secure communications channel.

15. The computer-readable storage medium of claim 14, wherein executing the computer-executable instructions by a processor, further causes the processor to perform operations comprising:

storing one or more additional documents associated with the virtual driver'"'"'s license credential;

receiving an indication that a subset of the one or more additional documents are to be transmitted to the different computing device; and

transmitting, via the secure communications channel, the one or more additional documents associated with the virtual driver'"'"'s license credential.

16. The computer-readable storage medium of claim 14, wherein executing the computer-executable instructions by a processor, further causes the processor to perform operations comprising exchanging at least one of audio data or video data with the different computing device utilizing the secure communications channel.

17. The computer-readable storage medium of claim 14, wherein executing the computer-executable instructions by a processor, further causes the processor to perform operations comprising:

receiving, from the different computing device, supplemental data via the secure communications channel; and

presenting the supplemental data on the user interface.

18. The computer-readable storage medium of claim 17, wherein executing the computer-executable instructions by a processor, further causes the processor to perform operations comprising:

providing, on the user interface, an acknowledgement option for acknowledging receipt of the supplemental data; and

in accordance with identifying that the acknowledgement option has been selected, transmitting, to the different computing device, an acknowledgement indication associated with the supplemental data.

19. The computer-readable storage medium of claim 14, wherein executing the computer-executable instructions by a processor, further causes the processor to perform operations comprising:

receiving a closing request to close the secure communications channel; and

closing the secure communications channel in response to receiving the closing request.

20. The computer-readable storage medium of claim 14, wherein the virtual driver'"'"'s license credential includes a digital signature provided by a certification authority, and wherein the driver'"'"'s license credential is verified at the second device utilizing the digital signature provided by the certification authority.