Self-sovereign identity systems and methods for identification documents

Patent metadata

Field	Value
Publication number	US-12198215-B2
Application number	US-202016917776-A
Country	US
Kind code	B2
Filing date	Jun 30, 2020
Priority date	May 28, 2014
Publication date	Jan 14, 2025
Grant date	Jan 14, 2025

Abstract

Self-sovereign identity systems and methods for identification documents are disclosed herein. An example method includes transmitting data obtained from a near-field communications (NFC) chip of an object to the service provider. The data can include identifying information for an owner of the object. The method can include receiving a user identity packet from the service provider that is generated by the service provider based on verification of an identity of the owner and validity of the NFC chip, storing the user identity packet on a computing device, receiving a request from a first requesting device or service for the data stored on the NFC chip of the object and transmitting the user identity packet from the computing device to the first requesting device or service instead of the data.

First claim

What is claimed is:

1. An identification (ID) verification method, comprising:
obtaining a photograph of an identification document that comprises a near-field communications (NFC) chip, the identification document comprising printed data that is captured in the photograph;
receiving, from a server, the printed data extracted from the photograph via optical character recognition;
verifying an authenticity of the identification document from the photograph;
unlocking the NFC chip using the printed data;
extracting data from the NFC chip;
validating the NFC chip from the data;
obtaining current identity data of information identifying a user of a device;
obtaining baseline identity data from the near-field communications (NFC) chip, the baseline identity data comprising information identifying an owner of the identification document at a time of issuance of the identification document to the owner or at a time the owner first obtains the document;
comparing the current identity data with the baseline identity data to verify whether the owner of the identification document is a correct user of the document;
providing a user identity packet once the authenticity of the document has been verified, the NFC chip has been validated and the owner of the identification document has been verified as the correct user of the identification document, wherein the user identity packet is a self-sovereign identification (SSI) augmented with an indication that the NFC has been validated;
storing the user identity packet in a memory of the device and thereby linking the identification identification document to the user's device;
receiving a request from a first requesting device or service for identity information of the owner of the identification document; and
transmitting at least part of the user identity packet from the user's device to the first requesting device or the service in response to the request, wherein an unbroken chain of trust is established between the user and an entity that issued the identification document.

2. The method according to claim 1 , further comprising:
receiving a request from a second requesting device or a service for the identity information; and
transmitting the user identity packet to the second requesting device or the service without having to re-verify whether the owner of the identification document is a correct user of the identification document and without having to re-verify the authenticity of the identification document.

3. The method according to claim 1 , further comprising associating the user's device with the identification document using device identifying information for the user's device.

4. The method according to claim 1 , wherein validating the NFC chip comprises performing a hardware check of the NFC chip using a public key for the NFC chip, the hardware check validating that the NFC chip has not been tampered with.

5. The method according to claim 1 , further comprising providing instructions on the user's device to direct the user as to how to obtain the baseline identity data from the NFC chip.

6. The method according to claim 1 , further comprising encrypting the self-sovereign identification.

7. The method according to claim 1 , wherein validating the NFC chip comprises performing a hardware check of the NFC chip, the NFC chip comprising a country signing certificate.

8. The method according to claim 1 , wherein the identification document is a document issued by a government.

9. The method according to claim 1 , wherein the user selects only a portion of identifying information that is stored on the NFC chip as part of the SSI that is transmitted to the first requesting device or service.

10. The method according to claim 1 , wherein the device is a mobile device that is linked to the identification document using an IMEI number for the mobile device.

11. A device, comprising:
a processor;
a near-field communications (NFC) reader;
a camera;
a communications module; and
a memory storing instructions, the processor operatively connected to the memory and to the communications module, and configured to execute the instructions to:
prompt a user of the device to operate the camera to obtain a photograph of an identification document that comprises a near-field communications (NFC) chip, the identification document comprising printed data that is captured in the photograph;
receive, from a server, the printed data extracted from the photograph via optical character recognition;
unlock the NFC chip using the printed data;
extract data from the NFC chip using the NFC reader;
receive an indication of a verification of the identification document, the identification document having been verified using the photograph of the identification document and the data extracted from the NFC chip using the NFC reader;
receive an indication that the NFC chip has been validated using the data extracted from the NFC chip;
obtain current identity data of information identifying the user of the device;
obtain baseline identity data from the NFC chip, the baseline identity data comprising information identifying an owner of the identification document at a time of issuance of the identification document to the owner or at a time the owner first obtains the identification document;
control the communications module to transmit the current identity data to a service provider for comparison with the baseline identity data to verify whether the owner of the identification document is a correct user of the identification document;
control the communications module to receive a user identity packet from the service provider once authenticity of the identification document has been verified, the NFC chip has been validated and the owner of the document has been verified as the correct user of the document, the user identity packet being a self-sovereign identification (SSI) augmented with an indication that the NFC chip has been validated;
store the user identity packet locally in the memory and thereby link the identification document to the device;
receive a request from a first requesting device or a service for proof of ID verification of the owner of the identification document; and
control the communications module, upon receipt of the request from the first requesting device or the service, to transmit at least part of the stored user identity packet from the device to the first requesting device or service, wherein an unbroken chain of trust is created between the user and an entity that issued the identification document.

12. The device according to claim 11 , wherein the processor is configured to execute the instructions to:
receive a request from a second requesting device or a service for proof of ID verification of the owner of the identification document; and
control the communications module, upon receipt of the request from the second requesting device or the service, to transmit the user identity packet to the second requesting device or service without having to re-verify the identity of the user.

13. The device according to claim 11 , further comprising logically linking the device to the identification document with device identifying information.

14. The device according to claim 11 , wherein the processor is configured to allow the user to select only a portion of the data that is stored on the NFC chip as part of the SSI that is transmitted to the first requesting device or the service.

15. The device according to claim 11 , wherein the device is a mobile device that is linked to the identification document using an IMEI number for t

Assignees

• Mitek Systems Inc

Inventors

• Gupta Sanjay
• Ramsbacker Michael
• Ritter Stephen
• Treitler James
• Singal Ashok
• Gray Jason L
• Hagen Michael

Classifications

• G06Q2220/00

  Business processing using cryptography · CPC title

• H04W12/00

  Security arrangements; Authentication; Protecting privacy or anonymity · CPC title

• H04W4/80

  Services using short range communication, e.g. near-field communication [NFC], radio-frequency identification [RFID] or low energy communication · CPC title

• G06K7/10009

  sensing by radiation using wavelengths larger than 0.1 mm, e.g. radio-waves or microwaves · CPC title

• G06Q50/00

  Information and communication technology [ICT] specially adapted for implementation of business processes of specific business sectors, e.g. utilities or tourism (healthcare informatics G16H) · CPC title