Filling digital documents using multi-tiered user identity models based on decentralized identity

Patent metadata

Field	Value
Publication number	US-12341903-B2
Application number	US-202217819540-A
Country	US
Kind code	B2
Filing date	Aug 12, 2022
Priority date	Aug 12, 2022
Publication date	Jun 24, 2025
Grant date	Jun 24, 2025

Abstract

Systems, methods, and non-transitory computer readable media fill in digital documents using user identity models of client devices. For instance, one or more embodiments involve maintaining a user identity model that includes various details related to a client device, such as verifiable credentials and unverified claims. Upon receiving a digital document for the client device, one or more user attributes associated with the verifiable credentials and/or unverified claims are retrieved from the user identity model. Using the user attribute(s), one or more digital fillable fields of the digital document are filled.

First claim

What is claimed is:

1. A method comprising:
maintaining, within storage, a multi-tier user identity model for a client device, the multi-tier user identity model comprising a layer for verifiable credentials of the client device and an additional layer for unverified user attributes of the client device;
submitting, to an issuer of verifiable credentials, a request for a verifiable credential that includes a user attribute associated with the additional layer of the multi-tier user identity model of the client device;
associating, in response to receiving the verifiable credential including the user attribute from the issuer, the user attribute with the layer for verifiable credentials of the multi-tier user identity model of the client device;
receiving, by at least one processing device, a digital document comprising one or more digital fillable fields for the client device;
retrieving, for the client device and in response to receiving the digital document, one or more verifiable credentials from the layer for verifiable credentials of the multi-tier user identity model of the client device; and
modifying, by the at least one processing device, the digital document by filling in the one or more digital fillable fields using one or more user attributes of the one or more verifiable credentials.

2. The method of claim 1 , wherein receiving the verifiable credential from the issuer comprises receiving the verifiable credential from a decentralized issuer of a decentralized identity framework.

3. The method of claim 1 , wherein maintaining the multi-tier user identity model for the client device comprises maintaining the multi-tier user identity model as part of a distributed digital ledger of a decentralized identity framework.

4. The method of claim 1 ,
further comprising determining, utilizing a key-value matching algorithm, that the one or more user attributes of the one or more verifiable credentials corresponds to to the one or more digital fillable fields,
wherein filling in the one or more digital fillable fields using the one or more user attributes is based on determining that the one or more user attributes correspond to the one or more digital fillable fields.

5. The method of claim 1 , further comprising:
receiving, from an additional client device associated with the digital document, a verification challenge for verifying at least one user attribute of the one or more user attributes;
signing the verification challenge using a cryptographic key associated with the client device; and
providing the signed verification challenge to the additional client device for verification of the at least one user attribute of the one or more user attributes.

6. The method of claim 5 , further comprising:
determining that the at least one user attribute of the one or more user attributes has been verified by the additional client device; and
providing, for display on the client device, an indication that the at least one user attribute of the one or more user attributes has been verified.

7. The method of claim 1 , further comprising:
determining that a user attribute of the one or more user attributes comprises sensitive personal information; and
generating a privacy-preserving argument that indicates the sensitive personal information satisfies a threshold,
wherein filling in a digital fillable field of one or more digital fillable fields using the user attribute of the one or more user attributes comprises filling in the digital fillable field using the privacy-preserving argument.

8. The method of claim 1 , wherein submitting the request for the verifiable credential to the issuer comprises:
generating the request for the verifiable credential utilizing a cryptographic key associated with the client device, a master credential issued the issuer, and the user attribute associated with the additional layer of the multi-tier user identity model of the client device; and
transmitting the request to the issuer for issuance of the verifiable credential.

9. A non-transitory computer-readable medium storing executable instructions, which when executed by a processing device, cause the processing device to perform operations comprising:
maintaining, within storage, a multi-tier user identity model for a client device, the multi-tier user identity model comprising a layer for verifiable credentials of the client device and an additional layer for unverified user attributes of the client device;
submitting, to an issuer of verifiable credentials, a request for a verifiable credential that includes a user attribute associated with the additional layer of the multi-tier user identity model of the client device;
associating, in response to receiving the verifiable credential including the user attribute from the issuer, the user attribute with the layer for verifiable credentials of the multi-tier user identity model of the client device for verifiable credentials;
receiving a digital document comprising one or more digital fillable fields for the client device;
retrieving, for the client device and in response to receiving the digital document, one or more verifiable credentials from the layer for verifiable credentials of the multi-tier user identity model of the client device; and
modifying, by the at least one processing device, the digital document by filling in the one or more digital fillable fields using one or more user attributes of the one or more verifiable credentials.

10. The non-transitory computer-readable medium of claim 9 , wherein maintaining the multi-tier user identity model for the client device comprises maintaining, within the multi-tier user identity model, a further layer for a decentralized identifier of the client device.

11. The non-transitory computer-readable medium of claim 9 , wherein submitting the request to the issuer comprises submitting the request to a decentralized issuer of a decentralized identity framework.

12. The non-transitory computer-readable medium of claim 9 , wherein:
the operations further comprise determining, utilizing a fuzzy matching algorithm, that the one or more user attributes of the one or more verifiable credentials correspond to the one or more digital fillable fields; and
filling in the one or more digital fillable fields using the one or more user attributes is based on determining that the one or more user attributes correspond to the one or more digital fillable fields.

13. The non-transitory computer-readable medium of claim 9 , wherein the operations further comprise:
determining, utilizing a fuzzy matching algorithm, that an additional digital fillable field of the digital document is unrelated to the one or more user attributes of the one or more verifiable credentials; and
modifying the digital document by filling in the additional digital fillable field based on one or more user interactions with the additional digital fillable field.

14. The non-transitory computer-readable medium of claim 9 , wherein the operations further comprise verifying an additional user attribute of an additional client device associated with the digital document by:
providing, to the additional client device, a verification challenge for verifying the additional user attribute;
receiving a signature of the additional client device in response to providing the verification challenge;
validating the signature to determine that the additional client device holds a cryptographic key corresponding to an additional decentralized identity credential associated with the additional user attribute; and
validating a signature of a decentralized issuer that issued the addi

Assignees

• Adobe Inc

Inventors

• He Songlin
• Sun Tong
• Lipka Nedim
• Wigington Curtis
• Jain Rajiv
• Roy Anindo

Classifications

• G06F21/31 Primary

  User authentication · CPC title

• G06F40/174

  Form filling; Merging · CPC title

• H04L9/3247 Primary

  involving digital signatures · CPC title

• H04L9/3239

  involving non-keyed hash functions, e.g. modification detection codes [MDCs], MD5, SHA or RIPEMD · CPC title

• H04L9/50

  using hash chains, e.g. blockchains or hash trees · CPC title