Blockchain systems and methods for user authentication

Patent metadata

Field	Value
Publication number	US-11665147-B2
Application number	US-202117195194-A
Country	US
Kind code	B2
Filing date	Mar 8, 2021
Priority date	Jun 17, 2016
Publication date	May 30, 2023
Grant date	May 30, 2023

Abstract

Computer-implemented methods and systems are provided for blockchain-mediated user authentication. Consistent with disclosed embodiments, authentication may comprise operations including receiving, from a user system, an authentication request for a user. The operations may also include determining a root system for the user using a blockchain, and redirecting the user system to the root system. The operations may include receiving, following redirection, a verification message indicating that the root system successfully authenticated the user, and including an authorization code for receiving, from the root system, a root system secret. The operations may include receiving from a database, identification data using the root system secret. Determining the root system may comprise identifying, using the authentication request and index information stored in the blockchain, a block of the blockchain storing root system information for the user. Receiving the identification data may comprise retrieving identification data from the database.

First claim

What is claimed is:

1. A method comprising:
receiving, from a root system, a request to authenticate a user, the root system being (i) a first member system with access to a private blockchain and (ii) distinct from the user, the private blockchain comprising blocks;
providing, in response to the request, a confirmation message to the user;
receiving first and second credentials respectively from first and second devices associated with the user, the first and second credentials corresponding to the user;
analyzing the received credentials with the root system; and
determining, subsequent to the analyzing, that the private blockchain comprises a block comprising (i) root information identifying the root system and (ii) an authentication record for the user.

2. The method of claim 1 , wherein the confirmation message comprises a confirmation code that is transmitted to a designated user device via at least one of a text message or an email.

3. A non-transitory computer-readable medium storing instructions that, when executed by one or more processors, cause operations comprising:
receiving, from a root system, a request to authenticate a user, the root system being (i) a first member system with access to a private blockchain and (ii) distinct from the user, the private blockchain comprising blocks;
providing, in response to the request, a confirmation message to the user;
receiving first and second credentials respectively from first and second devices associated with the user, the first and second credentials corresponding to the user;
analyzing the received credentials with the root system; and
determining, subsequent to the analyzing, that the private blockchain comprises a block comprising (i) root information identifying the root system and (ii) an authentication record for the user.

4. The non-transitory computer-readable medium of claim 3 , wherein the confirmation message comprises a confirmation code that is transmitted to a designated user device via at least one of a text message or an email.

5. The non-transitory computer-readable medium of claim 3 , the operations further comprising:
receiving personal information for the user;
generating identification data for the user using the received personal information;
encrypting the identification data using a root system key; and
storing the encrypted identification data in a database.

6. An authentication system comprising: at least one processor; and at least one memory containing instructions that, when executed by the at least one processor, cause the authentication system to perform operations comprising:
receiving, from a root system, a request to authenticate a user, the root system being (i) a first member system with access to a private blockchain and (ii) distinct from the user, the private blockchain comprising blocks;
providing, in response to the request, a confirmation message to the user;
receiving first and second credentials respectively from first and second devices associated with the user, the first and second credentials corresponding to the user;
analyzing the received credentials with the root system; and
determining, subsequent to the analyzing, that the private blockchain comprises a block comprising (i) root information identifying the root system and (ii) an authentication record for the user.

7. The authentication system of claim 6 , wherein the operations further comprise:
receiving personal information for the user;
generating identification data for the user using the received personal information;
encrypting the identification data using a root system key; and
storing the encrypted identification data in a database.

8. The authentication system of claim 7 , wherein the database comprises at least one of a distributed database, a federated database, or a distributed hash table.

9. The authentication system of claim 7 , wherein:
the database comprises a distributed hash table; and
nodes of the distributed hash table are associated with members of the authentication system, the members comprising at least one of member systems or users.

10. The authentication system of claim 7 , wherein the identification data comprises at least one of:
sensitive personal information;
information gathered in compliance with government guidelines for identifying customers; or
an indication of a method used to authenticate the user to an institution associated with the root system.

11. The authentication system of claim 6 , wherein the root information:
is at least one of obfuscated or encrypted; and
indicates a location of at least one of the root system or a location service.

12. The authentication system of claim 6 , wherein the authentication record:
is at least one of obfuscated or encrypted; and
identifies at least one of the first member system, an institution associated with the first member system, an authentication purpose, or an authentication result.

13. The authentication system of claim 6 , wherein:
the blocks comprise headers and messages;
the messages comprise at least one of index information identifying the user, the root information, or the authentication record; and
the headers comprise at least one of:
a hash of a previous block;
a hash of the messages in the block; or
a timestamp.

14. The authentication system of claim 13 , wherein a first header of the headers further comprises a nonce such that the first header satisfies a proof-of-work condition.

15. The authentication system of claim 13 , wherein at least one of the headers or the messages are digitally signed with a cryptographic key of an authorized system.

16. The authentication system of claim 15 , wherein a digital signature for at least one of the headers or the messages is verifiable by a key available to members of the authentication system, the members comprising member systems or users.

17. The authentication system of claim 6 , wherein:
the private blockchain comprises one or more blocks added by miners that comprise at least one of institutions associated with members of the authentication system, associates of the institutions associated with the members, or users; and
the members comprise at least one of member systems or users.

18. The authentication system of claim 6 , wherein the confirmation message comprises a confirmation code that is transmitted to a designated user device via at least one of a text message or an email.

19. The authentication system of claim 6 , wherein the private blockchain comprises one or more blocks added by miners via a consensus mechanism for the private blockchain.

20. The authentication system of claim 6 , wherein the private blockchain comprises one or more blocks added via a proof-of-work condition for the private blockchain.

Assignees

• Capital One Services Llc

Inventors

• Weimer Jonathan
• Fox Ryan

Classifications

• H04L63/08 Primary

  for authentication of entities (cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32) · CPC title

• H04L9/3239

  involving non-keyed hash functions, e.g. modification detection codes [MDCs], MD5, SHA or RIPEMD · CPC title

• G06F21/31

  User authentication · CPC title

• H04L9/3247

  involving digital signatures · CPC title

• H04L9/3213 Primary

  using tickets or tokens, e.g. Kerberos (network architectures or network communication protocols for entities authentication using tickets in a packet data network H04L63/0807) · CPC title