Identity credential verification techniques

Patent metadata

Field	Value
Publication number	US-11093597-B2
Application number	US-201816122321-A
Country	US
Kind code	B2
Filing date	Sep 5, 2018
Priority date	Apr 24, 2018
Publication date	Aug 17, 2021
Grant date	Aug 17, 2021

Abstract

Embodiments of the present disclosure are directed to, among other things, improving data security with respect to data collection, verification, and authentication techniques associated with obtaining and transmitting identity information. For example, an identification credential may be received (e.g., via a short-range communications protocol such as iBeacon) by a first device from a second device. The credential may be associated with a second user of the second device. The first device may verify the credential and, if valid, an additional option to approve a secure communications channel may be presented at the first device. If the additional option is selected, a secure communications channel may be established between the first device and the second device.

First claim

What is claimed is:

1. A computer-implemented method, comprising:
obtaining, by a first device, a virtual driver's license credential associated with a user, wherein the virtual driver's license credential is issued by a certification authority, and wherein the virtual driver's license credential is digitally signed with a key associated with the certification authority, wherein the key is generated at least in part on biometric information associated with the user;
storing, by the first device, the virtual driver's license credential associated with the user and a license plate identifier of the user, the license plate identifier associated with a vehicle;
receiving, by the first device in a first vehicle and from a second device in a second vehicle, a request to establish a secure communications channel for sharing the virtual driver's license credential of the user, the request utilising a short-range communications protocol and including the license plate identifier of the user;
presenting, on a user interface of the first device, an option to approve the request to establish the secure communications channel for sharing the virtual driver's license credential of the user based at least in part on a comparison of the stored license plate identifier and the received license plate identifier for the vehicle that was received in the request to establish the secure communications channel;
in accordance with a determination that the option was selected, transmitting, by the first device in the first vehicle to the second device in the second vehicle, a response to the request via a short-range communications channel corresponding to the short-range communications protocol;
establishing, utilizing a secure communications protocol, a secure communications channel between the first device and the second device based at least in part on the response; and
transmitting, by the first device in the first vehicle to the second device in the second vehicle, at least a portion of the virtual driver's license credential utilizing the secure communications channel, wherein the at least the portion of the virtual driver's license credential is verified at the second device.

2. The computer-implemented method of claim 1 , further comprising:
obtaining, by the first device, one or more documents to be associated with the virtual driver's license credential;
storing, by the first device, the one or more documents as being associated with the virtual driver's license credential; and
providing, on the user interface of the first device, a transmit option related to transmitting the one or more documents to the second device via the secure communications channel.

3. The computer-implemented method of claim 2 , wherein the one or more documents comprise at least one of: a vehicle insurance document or a vehicle registration document.

4. The computer-implemented method of claim 1 , wherein the virtual driver's license credential comprises at least one of a driver's license number, a first name, a last name, a street address, a city, a state, a zip code, an eye color, a hair color, a height, a weight, a date of birth, or an expiration date.

5. The computer-implemented method of claim 1 , further comprising:
receiving, by the first device in the first vehicle from the second device in the second vehicle, an identification credential associated with a second user of the second vehicle;
verifying, at the first device, an identity of the second user of the second vehicle based at least in part on the identification credential;
presenting, on the user interface of the first device, an additional option to approve the secure communications channel being established based at least in part on the identity of the second user of the second vehicle being verified; and
receiving an indication that the additional option was selected, wherein establishing the secure communications channel between the first device and the second device is further based at least in part on the indication that the additional option was selected.

6. The computer-implemented method of claim 5 , further comprising:
storing, at the first device, a mapping identifying a plurality of identification credentials associated with a plurality of law enforcement entities, wherein identity of the second user of the second vehicle is verified using the identification credential associated with the second user of the second vehicle and the mapping.

7. The computer-implemented method of claim 1 , further comprising receiving, by the first device in the first vehicle and from the second device in the second vehicle, information associated with a traffic stop via the secure communications channel.

8. The computer-implemented method of claim 7 , wherein the information associated with the traffic stop includes a warning or a traffic ticket.

9. A computing device, comprising:
a processor; and
a memory storing computer-readable instructions that, upon execution by the processor, configure the computing device to:
store a virtual driver's license credential of a user and a license plate identifier of the user, the license plate identifier associated with the virtual driver's license credential, the virtual driver's license credential being issued by a certification authority and digitally signed with a key associated with the certification authority, wherein the key is generated based at least in part on biometric information associated with the user;
receive a request, from a different computing device, to establish a secure communications channel for sharing the virtual driver's license credential of the user, the request utilizing a short-range communications protocol and including the license plate identifier of the user;
present, at a user interface of the computing device, an option to approve the request to establish the secure communications channel for sharing the virtual driver's license credential of the user based at least in part on a comparison of the stored license plate identifier of the user and the received license plate identifier for a vehicle, the received license plate identifier being received in the request to establish the secure communications channel;
in accordance with a determination that the option was selected, transmit a response to the request to the different computing device via a short-range communications channel corresponding to the short-range communications protocol;
establish, utilizing a secure communications protocol, a secure communications channel between the computing device and the different computing device based at least in part on the response; and
transmit, to the different computing device, at least a portion of the virtual driver's license credential utilizing the secure communications channel, wherein the at least the portion of the virtual driver's license credential is verified at the different computing device.

10. The computing device of claim 9 , wherein the virtual driver's license credential of the user is associated with a plurality of license plate identifiers including the stored license plate identifier of the user and at least one other license plate identifier of the user stored on the computing device.

11. The computing device of claim 9 , wherein the short-range communications protocol corresponding to the short-range communications channel is a Bluetooth protocol.

12. The computing device of claim 9 , wherein the secure communications protocol comprises one of a near-me area network (NAN) protocol, a wide area network (WAN) protocol, a wireless direct link protocol, or a wireless communications protocol.

13. The computing device of claim 9 , where

Assignees

• Apple Inc

Inventors

• Pantfoerder Achim
• Borges Daniel R
• Graff Irene M
• Bergerengen Johan O
• Marri Sridhar Subash
• Elliott Thomas

Classifications

• H04L9/3228

  One-time or temporary data, i.e. information which is sent for every authentication or authorization, e.g. one-time-password, one-time-token or one-time-key · CPC title

• H04W12/50

  Secure pairing of devices · CPC title

• H04L63/0823

  using certificates (cryptographic mechanisms or cryptographic arrangements for entity authentication involving certificates H04L9/3263) · CPC title

• H04L9/30

  Public key, i.e. encryption algorithm being computationally infeasible to invert or user's encryption keys not requiring secrecy · CPC title

• G06F21/44

  Program or device authentication · CPC title