Using multiple digital identification documents to control information disclosure

• US 9,544,150 B2
• Filed: 06/04/2014
• Issued: 01/10/2017
• Est. Priority Date: 06/04/2014
• Status: Expired due to Fees

• Current Assignee: Workday Incorporated
• Original Assignee: International Business Machines Corporation
• Inventors: Redpath, Richard
• Primary Examiner(s): Tolentino, Roderick
• Application Number:
  US14/295,892
• Publication Number:
  US 20150358166A1
• Time in Patent Office: 951 Days
• Field of Search: 726 17- 19
• US Class Current: 1/1
• CPC Class Codes: G06F 21/64 Protecting data integrity, e.g. using checksums, certificates or signatures
• CPC Class Codes: G06Q 10/00 Administration; Management
• CPC Class Codes: H04L 63/00 Network architectures or network communication protocols for network security cryptographic mechanisms or cryptographic arrangements for secret or secure communication H04L9/00; network architectures or network communication protocols for wireless network security H04W12/00; security arrangements for protecting computers or computer systems against unauthorised activity G06F21/00
• CPC Class Codes: H04L 63/123 received data contents, e.g. message integrity
• CPC Class Codes: H04L 9/3247 involving digital signatures

Abstract

A first digital identification document is transmitted from an identification authority to a mobile device of an identified individual. This first digital identification document is digitally signed and includes a set of attributes about the identified individual. In the same manner, a second digital identification document is also transmitted to the identified individual'"'"'s mobile device. The second digital identification document is also digitally signed but includes a different set of attributes about the identified individual. The identified individual is then confronted by a series of challengers, wherein each challenger requires a different amount of information about the identified individual. Based on the identity of each challenger, the identified individual selects an appropriate identification document and transmits it to the applicable challenger'"'"'s device. The challenger is then able to confirm both the information he needs about the identified individual and the validity of the identification document that he receives.

Claims

1. A system for managing digital identification documents, the system comprising:

a first mobile device of an individual, the first mobile device configured to;

provide a user interface whereby the individual can cause a first digital identification document of a plurality of digital identification documents identifying the individual to be created according to preferences of the identified individual by selecting for inclusion in a first set of attributes about the identified individual a first subset of available attributes among a plurality of available attributes about the identified individual and by causing the first mobile device of the identified individual to transmit the selection of the first subset of available attributes for inclusion in the first set of attributes to a computer system of a representative of an identification authority;

receive from the computer system of the representative of the identification authority, the plurality of digital identification documents, each of the plurality of digital identification documents including a differing plurality of attributes about the identified individual and a digital signature, wherein the plurality of digital identification documents includes the first digital identification document that was created by the computer system of the representative of the identification authority in response to the receipt of the transmission of the selection of the first subset of available attributes for inclusion in the first set of attributes;

provide the user interface, whereby the identified individual can make a selection of a digital identification document of the plurality of digital identification documents;

transmit, based on the selection of the selected digital identification document, the selected digital identification document to a second mobile device of a first challenger, whereby the first challenger is able to determine the validity of the selected digital identification document by analyzing its digital signature;

provide the user interface, whereby the identified individual can make a second selection of a second selected digital identification document of the plurality of digital identification documents; and

transmit, based on the second selection, the second selected digital identification document from the first mobile device of the identified individual to a third mobile device of a second challenger, whereby the second challenger is able to determine the validity of the second selected digital identification document by analyzing its digital signature.

2. A method for managing digital identification documents, the method comprising:

providing, by a first mobile device of an individual, a user interface whereby the individual can cause a first digital identification document of a plurality of digital identification documents identifying the individual to be created according to preferences of the identified individual by selecting for inclusion in a first set of attributes about the identified individual a first subset of available attributes among a plurality of available attributes about the identified individual and by causing the first mobile device of the identified individual to transmit the selection of the first subset of available attributes for inclusion in the first set of attributes to a computer system of a representative of an identification authority;

receiving, by the first mobile device of the identified individual and from the computer system of the representative of the identification authority, the plurality of digital identification documents, each of the plurality of digital identification documents including a differing plurality of attributes about the identified individual and a digital signature, wherein the plurality of digital identification documents includes the first digital identification document that was created by the computer system of the representative of the identification authority in response to the receipt of the transmission of the selection of the first subset of available attributes for inclusion in the first set of attributes;

providing, by the first mobile device of the identified individual, the user interface, whereby the identified individual can make a selection of a digital identification document of the plurality of digital identification documents;

transmitting, by the first mobile device of the identified individual and based on the selection of the selected digital identification document, the selected digital identification document to a second mobile device of a first challenger, whereby the first challenger is able to determine the validity of the selected digital identification document by analyzing its digital signature;

providing, by the first mobile device of the identified individual, the user interface, whereby the identified individual can make a second selection of a second selected digital identification document of the plurality of digital identification documents; and

transmitting, by the first mobile device of the identified individual and based on the second selection, the second selected digital identification document from the first mobile device of the identified individual to a third mobile device of a second challenger, whereby the second challenger is able to determine the validity of the second selected digital identification document by analyzing its digital signature.

3. A computer program product for managing digital identification documents, the computer program product comprising a computer readable hardware storage device having program instructions embodied therewith, the program instructions executable by at least one computer to cause the at least one computer to:

provide, by a first mobile device of an individual, a user interface whereby the individual can cause a first digital identification document of a plurality of digital identification documents identifying the individual to be created according to preferences of the identified individual by selecting for inclusion in a first set of attributes about the identified individual a first subset of available attributes among a plurality of available attributes about the identified individual and by causing the first mobile device of the identified individual to transmit the selection of the first subset of available attributes for inclusion in the first set of attributes to a computer system of a representative of an identification authority;

receive, by the first mobile device of the identified individual and from the computer system of the representative of the identification authority, the plurality of digital identification documents, each of the plurality of digital identification documents including a differing plurality of attributes about the identified individual and a digital signature, wherein the plurality of digital identification documents includes the first digital identification document that was created by the computer system of the representative of the identification authority in response to the receipt of the transmission of the selection of the first subset of available attributes for inclusion in the first set of attributes;

provide, by the first mobile device of the identified individual, the user interface, whereby the identified individual can make a selection of a digital identification document of the plurality of digital identification documents;

transmit, by the first mobile device of the identified individual and based on the selection of the selected digital identification document, the selected digital identification document to a second mobile device of a first challenger, whereby the first challenger is able to determine the validity of the selected digital identification document by analyzing its digital signature;

provide, by the first mobile device of the identified individual, the user interface, whereby the identified individual can make a second selection of a second selected digital identification document of the plurality of digital identification documents; and

transmit, by the first mobile device of the identified individual and based on the second selection, the second selected digital identification document from the first mobile device of the identified individual to a third mobile device of a second challenger, whereby the second challenger is able to determine the validity of the second selected digital identification document by analyzing its digital signature.