Authorization code for access

Patent metadata

Field	Value
Publication number	US-12469076-B2
Application number	US-202218088114-A
Country	US
Kind code	B2
Filing date	Dec 23, 2022
Priority date	Jun 21, 2019
Publication date	Nov 11, 2025
Grant date	Nov 11, 2025

Abstract

A method for sharing digital identity data, the method comprising, using the identity network, receiving an indication of consent from a user device to share a plurality of identity attributes with a relying party, wherein the plurality of identity attributes are associated with a user of the user device, generating an internal authorization code after receiving the consent, providing the internal authorization code to the user device, receiving the internal authorization code from the relying party, in response to receiving the internal authorization code, providing an internal access token to the relying party, receiving the internal access token from the relying party, and in response to receiving the access token, providing the plurality of identity attributes to the relying party.

First claim

What is claimed is:

1 . A method for sharing digital identity data, the method comprising, using an identity network:
receiving an indication of consent from a user device to share a plurality of identity attributes with a relying party, wherein the plurality of identity attributes are associated with a user of the user device; receiving, from a selected identity provider, an identity provider authorization code that indicates that the selected identity provider authorizes the identity network to access the plurality of identity attributes from the selected identity provider; generating an internal authorization code after receiving the consent; providing the internal authorization code to the user device; receiving the internal authorization code from the relying party; in response to receiving the internal authorization code, providing an internal access token to the relying party; receiving the internal access token from the relying party; providing the identity provider authorization code to the selected identity provider; in response to providing the identity provider authorization code, retrieving the plurality of identity attributes from the selected identity provider; and in response to receiving the access token, providing the plurality of identity attributes to the relying party.

2 . The method of claim 1 , further comprising:
receiving a sign-up request for the user from the relying party; displaying, within a user interface of a user device, a list of identity providers; receiving a selection of the selected identity provider from the list of identity providers; in response to receiving the selection, causing the user interface to display a login page associated with the selected identity provider; and receiving a validation of authentication of the user.

3 . The method of claim 2 , further comprising:
receiving, from the identity provider, a plurality of identity attributes associated with the user; and in response to receiving the validation, displaying, within the user interface, the plurality of identity attributes associated with the user.

4 . The method of claim 1 , wherein the identity provider authorization code is received after or during receipt of the consent from the user device.

5 . The method of claim 1 , wherein:
providing the plurality of identity attributes to the relying party comprises encrypting the plurality of identity attributes and transmitting the plurality of identity attributes to the relying party.

6 . The method of claim 1 , wherein:
the plurality of identity attributes comprise at least one identity attribute selected from a group comprising of a name of the user, an address of the user, a telephone number of the user, an email address of the user, a gender of the user, a birthdate of the user, a peer to peer payment account token of the user, a driver's license number of the user, and a social security number of the user.

7 . An identity network for sharing digital identity data, comprising:
one or more processors; and a memory having stored thereon instructions that, upon execution by the one or more processors, cause the one or more processors to:
receive consent from a user device to share a plurality of identity attributes with a relying party, wherein the plurality of identity attributes are associated with a user of the user device;
receive, from a selected identity provider, an identity provider authorization code that indicates that the selected identity provider authorizes the identity network to access the plurality of identity attributes from the selected identity provider;
generate an internal authorization code after receiving the consent;
provide the internal authorization code to the user device;
receive the internal authorization code from the relying party;
in response to receiving the internal authorization code, provide an access token to the relying party;
receive the access token from the relying party;
provide the identity provider authorization code to the selected identity provider;
in response to providing the identity provider authorization code, retrieve the plurality of identity attributes from the selected identity provider; and
in response to receiving the access token, provide the plurality of identity attributes to the relying party.

8 . The identity network for sharing digital identity data of claim 7 , wherein the instructions further cause the one or more processors to:
receive a sign-up request for the user from the relying party; display within a user interface of a user device, a list of identity providers; receive a selection of the selected identity provider from the list of identity providers; in response to receiving the selection, cause the user interface to display a login page associated with the selected identity provider; and receive a validation of authentication of the user.

9 . The identity network for sharing digital identity data of claim 8 , wherein the instructions further cause the one or more processors to:
receive from the identity provider, the plurality of identity attributes associated with the user; and in response to receiving the validation, display the plurality of identity attributes associated with the user within the user interface.

10 . The identity network for sharing digital identity data of claim 7 , wherein:
providing the plurality of identity attributes to the relying party comprises encrypting the plurality of identity attributes and transmitting the plurality of identity attributes to the relying party.

11 . The identity network for sharing digital identity data of claim 7 , wherein:
the plurality of identity attributes comprise at least one identity attribute selected from a group comprising of a name of the user, an address of the user, a telephone number of the user, an email address of the user, a gender of the user, a birthdate of the user, a peer to peer payment account token of the user, a driver's license number of the user, and a social security number of the user.

12 . The identity network for sharing digital identity data of claim 7 , wherein the identity provider authorization code is received after or during receipt of the consent from the user device.

13 . A non-transitory computing-device readable storage medium on which computing-device readable instructions of a program are stored, the instructions, when executed by one or more computing devices of an identity network, causing the one or more computing devices to perform a method, comprising:
receiving an indication of consent from a user device to share a plurality of identity attributes with a relying party, wherein the plurality of identity attributes are associated with a user of the user device; receiving, from a selected identity provider, an identity provider authorization code that indicates that the selected identity provider authorizes the identity network to access the plurality of identity attributes from the selected identity provider; generating an internal authorization code after receiving the consent; providing the internal authorization code to the user device; receiving the internal authorization code from the relying party; in response to receiving the internal authorization code, providing an internal access token to the relying party; receiving the internal access token from the relying party; providing the identity provider authorization code to the selected identity provider; in response to providing the identity provider authorization code, retrieving the plurality of identity attributes from the selected identity provider; and in response to receiv

Assignees

• Early Warning Services Llc

Inventors

• Slowiak Gregory
• Dempsey Michael
• Brindley Dougal J

Classifications

• H04L63/0884

  by delegation of authentication, e.g. a proxy authenticates an entity to be authenticated on behalf of this entity vis-à-vis an authentication entity · CPC title

• G06F9/445

  Program loading or initiating (bootstrapping G06F9/4401; security arrangements for program loading or initiating G06F21/57) · CPC title

• H04L63/126

  the source of the received data · CPC title

• H04L63/0876

  based on the identity of the terminal or configuration, e.g. MAC address, hardware or software configuration or device fingerprint · CPC title

• H04L41/147

  for predicting network behaviour · CPC title