Digital identity

• US 9,852,285 B2
• Filed: 02/13/2015
• Issued: 12/26/2017
• Est. Priority Date: 02/13/2015
• Status: Active Grant

• Current Assignee: Yoti Holding Ltd
• Original Assignee: Yoti Holding Ltd
• Inventors: Loughlin-McHugh, Eleanor Simone Frederika, Szczesniak, Roman Edward
• Primary Examiner(s): RAHIM, MONJUR
• Application Number:
  US14/622,737
• Publication Number:
  US 20160239658A1
• Time in Patent Office: 1,047 Days
• Field of Search: 726 6
• CPC Class Codes: G06F 21/45 Structures or tools for the administration of authentication
• CPC Class Codes: G06F 2221/2107 File encryption
• CPC Class Codes: G06F 2221/2117 User registration

Abstract

The disclosure relates to a digital identity system for creating a computer stored digital identity. The system includes a network interface configured to send and receive electronic messages, persistent electronic storage, a profile management module executing on a processor configured to receive from an entity an electronic message comprising a data item, extract the data item from the electronic message and store the data item in a digital profile in the persistent electronic storage. The system also includes a credential creation module executing on a processor, a publication module executing on a processor, and a receipt generation module executing on a processor.

Claims

1. A digital identity system for creating a computer stored digital identity comprising:

a network interface configured to send and receive electronic messages;

persistent electronic storage;

a profile management module executing on a processor configured to receive from an entity an electronic message comprising a data item, extract the data item from the electronic message and store the data item in a digital profile in the persistent electronic storage;

a credential creation module executing on a processor configured to generate a credential for the profile and associate the credential with the digital profile;

a publication module executing on a processor configured to publish the profile by storing a version of it to an addressable memory location; and

a receipt generation module executing on a processor configured to automatically generate two non-matching receipts, each receipt comprising a transaction identifier, a first of the receipts comprising a link identifying the memory location to which the profile is published, a second of the receipts comprising the credential, wherein the first receipt is stored at the digital identity system and the second receipt is transmitted to an address associated with the entity.

2. The digital identity system of claim 1 wherein a master receipt comprising data of each receipt is also generated and stored in a master receipt book at the digital identity system, whereby both the first and the master receipt are stored at the digital identity system.

3. The digital identity system of claim 2 wherein the master receipt comprises only part of the first receipt.

4. The digital identity system of claim 3 wherein the master receipt comprises the link and the transaction identifier, but not the credential.

5. The digital identity system of claim 1 wherein the credential is a randomised one-time only use credential.

6. The digital identity system of claim 1, comprising creating multiple digital profiles associated with the entity, each profile being associated with a credential unique to that profile, wherein each digital profile is published by assigning a unique set of data items for each digital profile to a corresponding addressable memory location.

7. The digital identity system of claim 6 wherein the data item is shared between the unique sets.

8. The digital identity system of claim 7, wherein one of the sets consists only of the data item, and the remaining sets each comprise the data item and at least one additional data item.

9. The digital identity system of claim 1 wherein the data item is a visual image of the entity.

10. The digital identity system of claim 1 wherein the multiple data items are received in the electronic message and stored in the profile.

11. The digital identity system of claim 1 wherein metadata available from a computer device associated with the entity is received with the data item and stored at the digital identify system.

12. The digital identity system of claim 11, wherein the credential is generated using the metadata.

13. The digital identity system of claim 12, wherein the credential is generated by a hash of the metadata and a random salt.

14. The digital identity system of claim 12 wherein the random salt is stored in association with the metadata, whereby a copy of the credential can be generated from the stored random salt and stored metadata.

15. The digital identity system of claim 12 wherein the credential is generated by hashing the device metadata and the random salt a random number of times, wherein the random number is stored in association with the random salt and the metadata.

16. The digital identity system of claim 11 wherein the metadata comprises an identifier of the computer device.

17. The digital identity system of claim 1, wherein the credential is associated with the digital profile by creating an entry in a database, the entry comprising the digital profile or an indicator which enables the digital profile to be located in the persistent electronic storage, wherein the publication module executing on a processor is configured to use the credential as a key to that entry in the database to access the profile for publication.

18. The digital identity system of claim 1 wherein the profile is published in response to the credential being presented to the digital identity system.

19. The digital identity system of claim 18 wherein the credential is presented by a validating entity other than the entity, the credential having been provided to the validating entity by the entity.

20. The digital identity system of claim 18 wherein the credential is one-time only use, and the credential creation module executing on a processor is configured to generate a fresh credential in response to the credential being presented to the digital identity system, whereby another version of the profile is published to a different addressable memory location by the publication module executing on a processor in response to the fresh credential being presented to the digital identity system.

21. The digital identity system of claim 18 wherein a device identifier is received with the data item and stored at the digital identify system, wherein publication of the profile is conditional on a matching device identifier being presented with the credential.

22. The digital identity system of claim 1 wherein the link is generated from and/or the memory location is selected based on a randomly generated sequence.

23. The digital identity system of claim 22 wherein the link is a Uniform Resource Indicator.

24. The digital identity system of claim 1 comprising a confidence value management module executing on a processor configured to allocate a confidence value to the profile based on at least one of a source of the electronic message and a type of the data item.

25. The digital identity system of claim 23 wherein the confidence value is published with the profile, whereby the confidence value and the profile are available to a requesting entity.

26. The digital identity system of claim 24 wherein the confidence values is changed over time based on a clock signal.

27. A computer-implemented method for creating a computer stored digital identity comprising:

receiving from an entity an electronic message comprising a data item;

extracting the data item from the electronic message;

storing the data item in a digital profile in the persistent electronic storage;

generating a credential for the profile and associating the credential with the digital profile;

publishing the profile by storing a version of it to an addressable memory location;

automatically generating two non-matching receipts, each receipt comprising a transaction identifier, a first of the receipts comprising a link identifying the memory location to which the profile is published, a second of the receipts comprising the credential;

storing the first receipt at the digital identity system; and

transmitting the second receipt an address associated with the entity.

28. A computer program product comprising computer readable instructions stored on a non-transitory computer readable storage medium and, when executed, configured to implement a method comprising:

receiving from an entity an electronic message comprising a data item;

extracting the data item from the electronic message;

storing the data item in a digital profile in the persistent electronic storage;

generating a credential for the profile and associating the credential with the digital profile;

publishing the profile by storing a version of it to an addressable memory location

automatically generating two non-matching receipts, each receipt comprising a transaction identifier, a first of the receipts comprising a link identifying the memory location to which the profile is published, a second of the receipts comprising the credential;

storing the first receipt at the digital identity system; and

transmitting the second receipt an address associated with the entity.