System and method for mapping decentralized identifiers to real-world entities

Patent metadata

Field	Value
Publication number	US-10685099-B2
Application number	US-202016735538-A
Country	US
Kind code	B2
Filing date	Jan 6, 2020
Priority date	Jul 2, 2019
Publication date	Jun 16, 2020
Grant date	Jun 16, 2020

Abstract

Methods, systems, and apparatus, including computer programs encoded on computer storage media, for mapping decentralized identifiers (DIDs) to real-world entities. One of the methods includes: receiving a request for creating a DID; obtaining a proof of identity authentication based on the received request; obtaining the DID based on the proof of identity authentication; and storing a mapping relationship between the proof of identity authentication and the DID.

First claim

The invention claimed is:

1. A computer-implemented method for mapping decentralized identifiers (DIDs) to real-world entities, comprising:
receiving, by a server system, a request for obtaining a DID, the request comprising an identifier of a subject corresponding to the DID;
obtaining, by the server system, a proof of identity authentication based on the request for obtaining the DID, wherein the obtaining the proof of identity authentication comprises:
sending, to a client-side application associated with the subject, instructions to obtain data associated with one or more features of the subject,
obtaining data associated with the identifier of the subject from a blockchain, and
comparing the data associated with the one or more features of the subject with the data associated with the identifier of the subject;

obtaining, by the server system, the DID based on the proof of identity authentication by sending a blockchain transaction for creating the DID to one or more blockchain nodes associated with the blockchain; and
storing, by the server system, a mapping relationship between the proof of identity authentication and the DID, wherein the storing comprises:
determining a hash value for a combination of the proof of identity authentication and the DID, and
storing the hash value on the blockchain.

2. The method of claim 1 , wherein the proof of identity authentication comprises:
a proof of real-person authentication; or
a proof of real-name authentication.

3. The method of claim 1 , wherein the sending instructions to obtain data associated with one or more features of the subject comprises:
sending, to the client-side application, instructions to capture one or more images of the subject.

4. The method of claim 1 , wherein the comparing the data associated with the one or more features of the subject with the data associated with the identifier of the subject comprises:
sending, to the client-side application, instructions to compare the data associated with the one or more features of the subject with the data associated with the identifier of the subject.

5. The method of claim 1 , wherein the obtaining the DID comprises:
generating a key alias;
obtaining a public key of a cryptographic key pair; and
storing a mapping relationship between the proof of identity authentication, the public key, and the key alias.

6. The method of claim 5 , wherein the obtaining the DID further comprises:
generating, based on the public key, one or more blockchain transactions for adding a DID document associated with the DID to the blockchain.

7. The method of claim 1 , further comprising:
generating a verifiable claim (VC) based on the proof of identity authentication; and
uploading the VC to a service endpoint associated with the obtained DID.

8. A non-transitory computer-readable storage medium for mapping decentralized identifiers (DIDs) to real-world entities, configured with instructions executable by one or more processors to cause the one or more processors to perform operations comprising:
receiving a request for obtaining a DID, the request comprising an identifier of a subject corresponding to the DID;
obtaining a proof of identity authentication based on the request for obtaining the DID, wherein the obtaining the proof of identity authentication comprises:
sending, to a client-side application associated with the subject, instructions to obtain data associated with one or more features of the subject,
obtaining data associated with the identifier of the subject from a blockchain, and
comparing the data associated with the one or more features of the subject with the data associated with the identifier of the subject;

obtaining the DID based on the proof of identity authentication by sending a blockchain transaction for creating the DID to one or more blockchain nodes associated with the blockchain; and
storing a mapping relationship between the proof of identity authentication and the DID, wherein the storing comprises:
determining a hash value for a combination of the proof of identity authentication and the DID, and
storing the hash value on the blockchain.

9. The non-transitory computer-readable storage medium of claim 8 , wherein the proof of identity authentication comprises:
a proof of real-person authentication; or
a proof of real-name authentication.

10. The non-transitory computer-readable storage medium of claim 8 , wherein the sending instructions to obtain data associated with one or more features of the subject comprises:
sending, to the client-side application, instructions to capture one or more images of the subject.

11. The non-transitory computer-readable storage medium of claim 8 , wherein the comparing the data associated with the one or more features of the subject with the data associated with the identifier of the subject comprises:
sending, to the client-side application, instructions to compare the data associated with the one or more features of the subject with the data associated with the identifier of the subject.

12. The non-transitory computer-readable storage medium of claim 8 , wherein the obtaining the DID comprises:
generating a key alias;
obtaining a public key of a cryptographic key pair; and
storing a mapping relationship between the proof of identity authentication, the public key, and the key alias.

13. The non-transitory computer-readable storage medium of claim 12 , wherein the obtaining the DID further comprises:
generating, based on the public key, one or more blockchain transactions for adding a DID document associated with the DID to the blockchain.

14. The non-transitory computer-readable storage medium of claim 8 , wherein the operations further comprise:
generating a verifiable claim (VC) based on the proof of identity authentication; and
uploading the VC to a service endpoint associated with the obtained DID.

15. A system for mapping decentralized identifiers (DIDs) to real-world entities, comprising a processor and a non-transitory computer-readable storage medium storing instructions executable by the processor to cause the system to perform operations comprising:
receiving a request for obtaining a DID, the request comprising an identifier of a subject corresponding to the DID;
obtaining a proof of identity authentication based on the request for obtaining the DID, wherein the obtaining the proof of identity authentication comprises:
sending, to a client-side application associated with the subject, instructions to obtain data associated with one or more features of the subject,
obtaining data associated with the identifier of the subject from a blockchain, and
comparing the data associated with the one or more features of the subject with the data associated with the identifier of the subject;

obtaining the DID based on the proof of identity authentication by sending a blockchain transaction for creating the DID to one or more blockchain nodes associated with the blockchain; and
storing a mapping relationship between the proof of identity authentication and the DID, wherein the storing comprises:
determining a hash value for a combination of the proof of identity authentication and the DID, and
storing the hash value on the blockchain.

16. The system of claim 15 , wherein the sending instructions to obtain data associated with one or more features of the subject comprises:
sending, to the client-side application, instructions to capture one or more images of the subject.

17. The system of claim 15 , wherein the comparing the data associ

Assignees

• Alibaba Group Holding Ltd

Inventors

• Chen Yuan
• Yang Renhui
• Lin Yuqi
• Liu Jiawei

Classifications

• H04L9/50

  using hash chains, e.g. blockchains or hash trees · CPC title

• H04L63/0815

  providing single-sign-on or federations · CPC title

• H04L9/3247

  involving digital signatures · CPC title

• H04L9/0894

  Escrow, recovery or storing of secret information, e.g. secret key escrow or cryptographic key storage · CPC title

• H04L9/0877

  using additional device, e.g. trusted platform module [TPM], smartcard, USB or hardware security module [HSM] · CPC title