Decentralized identity methods and systems

Patent metadata

Field	Value
Publication number	US-12387225-B2
Application number	US-202318237771-A
Country	US
Kind code	B2
Filing date	Aug 24, 2023
Priority date	Aug 24, 2022
Publication date	Aug 12, 2025
Grant date	Aug 12, 2025

Abstract

The present techniques relate to, inter alia, cryptographically-verifiable insurance credentials and cryptographically-verifiable property transfer. The novel methods and systems of decentralized identity discussed herein improve user experience (whether individual or organizational) by moving control over identity from the hands of centralized entities, back to where it belongs—i.e., to the hands of individual organizations and users. In one aspect, a method includes obtaining a scanned image; processing the scanned image; transmitting a claim request; and receiving and storing an attestation response, and a computing system includes a processor; and a memory having stored thereon computer-executable instructions that, when executed by the one or more processors, cause the computing system to: receive a claim request; cryptographically verify the claim; and transmit an attestation response.

First claim

What is claimed is:

1. A computer-implemented method for obtaining a cryptographically-signed credential, comprising:
obtaining, in response to a user scan action of a user with respect to a graphical user interface scan element displayed on a mobile computing device, via a camera device of the mobile computing device, a scanned image of a quick response code;
processing the scanned image of the quick response code to extract code information including a uniform resource identifier to establish a decentralized identifier (DID) protocol, wherein establishing the DID protocol includes determining the DID protocol from among a plurality of DID protocols based upon at least a portion of the uniform resource identifier;
transmitting a DID communication request to a software agent of an issuing party according to the DID protocol, the DID communication request including at least a cryptographic key of the user and security data;
receiving an attestation response from the software agent including at least the cryptographically-signed credential; and
storing, in response to a user accept action with respect to a graphical user interface accept element displayed on the mobile computing device, the cryptographically-signed credential in an electronic database of a digital wallet application in a memory of the mobile computing device.

2. The computer-implemented method of claim 1 , further comprising:
transmitting a verification request to a service provider;
receiving, in response to the transmitting, a credential proof request from the service provider, the credential proof request including one or more credential proof parameters;
displaying a proof request graphical user interface including the one or more credential proof parameters; and
transmitting, in response to a user present credentials action with respect to a graphical user interface present credentials element, one or more credentials of the user to the service provider, the one or more credentials corresponding to the one or more credential proof request parameters.

3. The computer-implemented method of claim 2 , further comprising:
receiving an electronic form including at least one field including values corresponding to the credential proof request parameters; and
causing, in response to receiving a user submission of the electronic form, the electronic form to be transmitted to the service provider, to complete a decentralized identity checkout process.

4. The computer-implemented method of claim 1 , wherein the cryptographically-signed credential is a proof-of-insurance credential.

5. The computer-implemented method of claim 4 ,
wherein the proof-of-insurance credential is a vehicle proof-of-insurance credential, and
wherein the vehicle proof-of-insurance credential includes insurance description information including at least a policy number, a named insured, a policy effective date, a policy expiration date, a vehicle identification number, a vehicle make and a vehicle year.

6. The computer-implemented method of claim 4 ,
wherein the proof-of-insurance credential is a homeowners' proof-of-insurance credential, and
wherein the homeowners' proof-of-insurance credential includes insurance description information including at least a policy number, a named insured, a policy effective date, a policy expiration date, a coverage limit, a liability limit, a deductible and a policy premium.

7. The computer-implemented method of claim 1 ,
wherein the cryptographic key is a public key, and
wherein the security data includes a session cookie identifying an authenticated web session of the user.

8. A computing system for obtaining a cryptographically- signed credential, comprising:
one or more processors; and
one or more memories having stored thereon computer-executable instructions that, when executed by the one or more processors, cause the computing system to:
obtain, in response to a user scan action of a user with respect to a graphical user interface scan element displayed on a mobile computing device, via a camera device of the mobile computing device, a scanned image of a quick response code;
process the scanned image of the quick response code to extract code information including a uniform resource identifier to establish a decentralized identifier (DID) protocol, wherein establishing the DID protocol includes determining the DID protocol from among a plurality of DID protocols based upon at least a portion of the uniform resource identifier;
transmit a DID communication request to a software agent of an issuing party according to the DID protocol, the DID communication request including at least a cryptographic key of the user and security data;
receive an attestation response from the software agent including at least the cryptographically-signed credential; and
store, in response to a user accept action with respect to a graphical user interface accept element displayed on the mobile computing device, the cryptographically-signed credential in an electronic database of a digital wallet application in a memory of the mobile computing device.

9. The computing system of claim 8 , the memories having stored thereon further instructions that, when executed by the one or more processors, cause the computing system to:
transmit a verification request to a service provider;
receive, in response to the transmitting, a credential proof request from the service provider, the credential proof request including one or more credential proof parameters;
display a proof request graphical user interface including the one or more credential proof parameters; and
transmit, in response to a user present credentials action with respect to a graphical user interface present credentials element, one or more credentials of the user to the service provider, the one or more credentials corresponding to the one or more credential proof parameters.

10. The computing system of claim 9 , the memories having stored thereon further instructions that, when executed by the one or more processors, cause the computing system to:
receive an electronic form including at least one field including values corresponding to the credential proof parameters; and
cause, in response to receiving a user submission of the electronic form, the electronic form to be transmitted to the service provider, to complete a decentralized identity checkout process.

11. The computing system of claim 8 , wherein the cryptographically-signed credential is a proof-of-insurance credential.

12. The computing system of claim 11 ,
wherein the proof-of-insurance credential is a vehicle proof-of-insurance credential, and
wherein the vehicle proof-of-insurance credential includes insurance description information including at least a policy number, a named insured, a policy effective date, a policy expiration data, a vehicle identification number, a vehicle make and a vehicle year.

13. The computing system of claim 11 ,
wherein the proof-of-insurance credential is a homeowners' proof-of-insurance credential, and
wherein the homeowners' proof-of-insurance credential includes insurance description information including at least a policy number, a named insured, a policy effective date, a policy expiration date, a coverage limit, a liability limit, a deductible and a policy premium.

14. The computing system of claim 8 ,
wherein the cryptographic key is a public key, and
wherein the security data includes a session cookie identifying an authenticated web session of the user.

15. A non-transitory computer-readable medium having stored thereon computer-executable instructions, t

Assignees

• State Farm Mutual Automobile Insurance Co

Inventors

• Vivek Veena
• Lefebre Ellakate
• Dunstan Stephen

Classifications

• H04L9/3234

  involving additional secure or trusted devices, e.g. TPM, smartcard, USB or software token (network architectures or network communication protocols for supporting authentication of entities using an additional device in a packet data network H04L63/0853) · CPC title

• H04L9/3218

  using proof of knowledge, e.g. Fiat-Shamir, GQ, Schnorr, ornon-interactive zero-knowledge proofs · CPC title

• H04L9/3263

  involving certificates, e.g. public key certificate [PKC] or attribute certificate [AC]; Public key infrastructure [PKI] arrangements (network architectures or network communication protocols for supporting authentication of entities using certificates in a packet data network H04L63/0823) · CPC title

• H04L9/3247

  involving digital signatures · CPC title

• G06Q40/08

  Insurance · CPC title