Blockchain systems and methods for user authentication

Patent metadata

Field	Value
Publication number	US-12388809-B2
Application number	US-202318310506-A
Country	US
Kind code	B2
Filing date	May 1, 2023
Priority date	Jun 17, 2016
Publication date	Aug 12, 2025
Grant date	Aug 12, 2025

Abstract

Computer-implemented methods and systems are provided for blockchain-mediated user authentication. Consistent with disclosed embodiments, authentication may comprise operations including receiving, from a user system, an authentication request for a user. The operations may also include determining a root system for the user using a blockchain, and redirecting the user system to the root system. The operations may include receiving, following redirection, a verification message indicating that the root system successfully authenticated the user, and including an authorization code for receiving, from the root system, a root system secret. The operations may include receiving from a database, identification data using the root system secret. Determining the root system may comprise identifying, using the authentication request and index information stored in the blockchain, a block of the blockchain storing root system information for the user. Receiving the identification data may comprise retrieving identification data from the database.

First claim

What is claimed is:

1. An authentication system comprising:
one or more processors and non-transitory media storing instructions that, when executed by the one or more processors, cause operations comprising:
receiving a request from a root system to publish a root system block to a private blockchain comprising blocks, the root system block being generated by the root system for a user and comprising root information identifying the root system and authentication data related to the user, the root system being distinct from the user and being a member system having access to the blockchain;
publishing the root system block to the blockchain;
subsequent to publishing the root system block to the blockchain, receiving an authentication request for the user; and
based on the blockchain comprising at least one block for the user that includes the root information identifying the root system, providing the root information as part of a response to the authentication request.

2. The authentication system of claim 1 , wherein the root system block comprises the root information identifying the root system and an authentication record for the user.

3. The authentication system of claim 2 , wherein the authentication record for the user identifies at least one of the member system, an institution associated with the member system, or an authentication result.

4. The authentication system of claim 1 , wherein the root system block comprises the root information identifying the root system and indexing information identifying the user.

5. The authentication system of claim 1 , wherein the root information indicates a location of the root system or a location service for obtaining the location of the root system.

6. A method comprising:
receiving a request from a root system to publish block data for a user to a private blockchain comprising blocks, the block data comprising root information identifying the root system and authentication data related to the user, the root system being distinct from the user and being a member system having access to the blockchain;
publishing the block data to the blockchain;
subsequent to publishing the block data to the blockchain, receiving an authentication request for the user;
determining that the blockchain comprises at least one block for the user that includes the root information identifying the root system; and
based on the blockchain comprising the at least one block for the user that includes the root information identifying the root system, providing the root information as part of a response to the authentication request.

7. The method of claim 6 , wherein the block data comprises the root information identifying the root system and an authentication record for the user.

8. The method of claim 7 , wherein the authentication record for the user identifies at least one of the member system, an institution associated with the member system, or an authentication result.

9. The method of claim 7 , wherein the block data comprises the root information identifying the root system and indexing information identifying the user.

10. The method of claim 7 , wherein the root information indicates a location of the root system or a location service for obtaining the location of the root system.

11. The method of claim 7 , wherein the blocks of the blockchain are added by miners via a consensus mechanism for the blockchain.

12. The method of claim 7 , further comprising:
based on the blockchain comprising the at least one block for the user that includes the root information identifying the root system, providing the root information and the authentication data related to the user as part of the response to the authentication request.

13. One or more non-transitory computer-readable media storing instructions that, when executed by one or more processors, cause operations comprising:
receiving a request from a root system to publish block data for a user to a private blockchain comprising blocks, the block data comprising root information identifying the root system and authentication data related to the user, the root system being distinct from the user and being a member system having access to the blockchain;
publishing the block data to the blockchain;
subsequent to publishing the block data to the blockchain, receiving an authentication request for the user;
based on the blockchain comprising at least one block for the user that includes the root information identifying the root system, providing the root information as part of a response to the authentication request.

14. The one or more non-transitory computer-readable media of claim 13 , wherein the root system block comprises the root information identifying the root system and an authentication record for the user.

15. The one or more non-transitory computer-readable media of claim of claim 14 , wherein the authentication record for the user identifies at least one of the member system, an institution associated with the member system, or an authentication result.

16. The one or more non-transitory computer-readable media of claim 13 , wherein the root system block comprises the root information identifying the root system and indexing information identifying the user.

17. The one or more non-transitory computer-readable media of claim 13 , wherein the root information indicates a location of the root system or a location service for obtaining the location of the root system.

18. The one or more non-transitory computer-readable media of claim 13 , wherein the blocks of the blockchain are added by miners via a consensus mechanism for the blockchain.

19. The one or more non-transitory computer-readable media of claim 13 , wherein the blocks of the blockchain are added via a proof-of-work condition for the blockchain.

20. The one or more non-transitory computer-readable media of claim 13 , the operations further comprising:
based on the blockchain comprising the at least one block for the user that includes the root information identifying the root system, providing the root information and the authentication data related to the user as part of the response to the authentication request.

Assignees

• Capital One Services Llc

Inventors

• Weimer Jonathan
• Fox Ryan

Classifications

• H04L9/3213 Primary

  using tickets or tokens, e.g. Kerberos (network architectures or network communication protocols for entities authentication using tickets in a packet data network H04L63/0807) · CPC title

• H04L9/50

  using hash chains, e.g. blockchains or hash trees · CPC title

• H04L9/3239

  involving non-keyed hash functions, e.g. modification detection codes [MDCs], MD5, SHA or RIPEMD · CPC title

• G06F21/31

  User authentication · CPC title

• H04L63/08 Primary

  for authentication of entities (cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32) · CPC title