Methods and systems for a digital trust architecture

Patent metadata

Field	Value
Publication number	US-12034853-B2
Application number	US-202218064729-A
Country	US
Kind code	B2
Filing date	Dec 12, 2022
Priority date	Sep 20, 2016
Publication date	Jul 9, 2024
Grant date	Jul 9, 2024

Abstract

In some aspects, methods and systems for a digital trust architecture are provided. In some aspects, the architecture includes a user account provisioning process. The provisioning process may make use of in person verifications of some personal information to ensure authenticity of the user information. Once the authenticity of user information is established, an account may be created. The user account may include a user email account, with integrated access to digital certificates linked to the user account. Account creation may also automatically publish the new user's public key in a publicly accessible directory, enabling encrypted email information to be easily sent to the new user.

First claim

What is claimed is:

1. A digital trust architecture system comprising:
a memory configured to store a sender account and a private key of the sender;
a hardware processor configured to:
receive the private key of the sender;
identify electronic data associated with the sender, wherein the electronic data is to be communicated electronically to a recipient;
search a public directory for a public key associated with the recipient;
encrypt the electronic data with the public key associated with the recipient;
sign the electronic data using the private key of the sender;
create a digital token based on the contents of the signed electronic data;
receive input indicating whether information indicating that the encrypted electronic data is to be stored in a blockchain;
send the digital token to one or more blockchains; and
convey the electronic data over the network to the recipient.

2. The system of claim 1 , wherein the encrypted electronic data is configured to be decrypted by a private key of the recipient.

3. The system of claim 1 , wherein the encrypted electronic data is configured to be decrypted using a public key of a sender, wherein successful decryption of the electronic data using the public key of the sender verifies that the electronic data is from the sender.

4. The system of claim 1 , wherein the public directory contains digital certificates for users and senders, and wherein the digital certificates comprise public keys for the users and senders.

5. The system of claim 4 , wherein the public directory comprises user and sender accounts for the users and senders and the digital certificates, and wherein the user and sender accounts are configurable to be selectively searchable by the hardware processor.

6. The system of claim 1 , wherein the hardware processor is configured to search the public directory using a recipient identifier.

7. The system of claim 6 , wherein the recipient identifier comprises a recipient email address.

8. A method of secure electronic data transfer, the method comprising:
storing, in a memory, a sender account and a private key of the sender;
receiving the private key of the sender;
identifying electronic data associated with the sender, wherein the electronic data is to be communicated electronically to a recipient;
searching a public directory for a public key associated with the recipient;
encrypting the electronic data with the public key associated with the recipient;
signing the electronic data using the private key of the sender;
creating a digital token based on contents of the signed electronic data;
receiving input indicating whether information indicating that the encrypted electronic data is to be stored in a blockchain;
sending the digital token to one or more blockchains; and
conveying the electronic data over the network to the recipient.

9. The method of claim 8 , wherein the encrypted electronic data is decryptable by a private key of the recipient.

10. The method of claim 8 , further comprising:
decrypting the encrypted electronic data using a public key of a sender; and
verifying that the electronic data is from the sender based on successful decryption of the encrypted data.

11. The method of claim 8 , wherein the public directory contains digital certificates for users and senders, and wherein the digital certificates comprise public keys for the users and senders.

12. The method of claim 11 , wherein the public directory comprises user and sender accounts for the users and senders and the digital certificates, and wherein the user and sender accounts are configurable to be selectively searchable by the hardware processor.

13. The method of claim 8 , wherein searching the public directory comprises searching the public directory using a recipient identifier.

14. The method of claim 13 , wherein the recipient identifier comprises a recipient email address.

Assignees

• United States Postal Service

Inventors

• Bonnell Clayton C

Classifications

• H04L63/123

  received data contents, e.g. message integrity · CPC title

• H04L63/0442

  wherein the sending and receiving network entities apply asymmetric encryption, i.e. different keys for encryption and decryption (cryptographic mechanisms or cryptographic arrangements for public-key encryption H04L9/30) · CPC title

• H04L9/3268

  using certificate validation, registration, distribution or revocation, e.g. certificate revocation list [CRL] · CPC title

• H04L9/3247

  involving digital signatures · CPC title

• H04L9/0861

  Generation of secret information including derivation or calculation of cryptographic keys or passwords · CPC title