Ledgerdomain Inc.

Benjamin Gregory Nichols

Benjamin James Taylor

Victor Bovee Dods

Leonid Alekseyev

William Jack

Alex Read Colgan

The disclosed technology teaches a method for delegating user access to one of a set of decentralized networked nodes that share a private permissioned blockchain data structure or a decentralized personal ledger. The method also includes a credentialing logic configured to receive from one of a set of decentralized networked nodes, authority to access a network node to invoke services that conduct operations using a private permissioned blockchain data structure or decentralized personal ledger to which access has been limited to users authorized by one of the set of decentralized networked nodes; and an access delegation logic configured to create a delegation of at least some of the authority to access the network node for a limited duration of time and to send the delegation to a recipient identified to receive delegated authority.

Access delegation leveraging private keys on keystores read by provisioned devices

The disclosed technology teaches a method for managing user access to one of a set of decentralized networked nodes that share a private permissioned blockchain data structure or a decentralized personal ledger, to which access has been limited to users authorized by one of the set of decentralized networked nodes.

Management of recipient credentials leveraging private keys on keystores read by provisioned devices

The disclosed technology teaches a method for revocation of user credentials for controlling user access to a private permissioned blockchain data structure or decentralized personal ledger, comprising an administrative logic configured to de-configure user private keys from keystores of respective users. The administrative logic further comprises a revocation logic configured to receive a unique identifier linked to a keystore of a particular user in response to the keystore, and the revocation logic is further configured to revoke access of the keystore based on the unique identifier.

Credential revocation leveraging private keys on keystores read by provisioned devices

The disclosed technology teaches an implementation for leveraging self-sovereign credentials held on mobile devices to provision credentials that empower one party ('recipient' or “user”, used synonymously herein) to obtain credentialed access to information and resources on behalf of another party (“sender” or “administrator”, used synonymously herein), without either party exposing private key information to each other or to the cloud. The sender is able to revoke user credentials at any time. Parties are able to leverage commodity hardware to automatically mutually authenticate their credentials and access available relevant options and workflows.

Recipient credentialing leveraging private keys on keystores read by provisioned devices

The technology disclosed allows for leveraging decentralized credentials to achieve bidirectional authentication between two actors leveraging a messaging platform/system, such as email or another text-based system, verifiable credentials (VCs), and secure web endpoints. It empowers one party ('Sender') to send a message enclosed with a Verifiable Presentation which allows another party (“Recipient”) to authenticate the message's provenance and the identity of the sender. Moreover, the message contains a link to a secure web endpoint, where the recipient can submit a response signed by their own Verifiable Presentation, allowing the Sender to authenticate the identity of the Recipient. In this way, both participants are able to authenticate each other's identities with an additional factor of authentication, with neither participant being required to share a single service.

Verifiable credentialling and message content provenance authentication

The disclosed technology teaches an implementation for leveraging self-sovereign credentials held on mobile devices to provision credentials that empower one party ('recipient' or 'user', used synonymously herein) to obtain credentialed access to information and resources on behalf of another party (&#x201c;sender&#x201d; or &#x201c;administrator&#x201d;, used synonymously herein), without either party exposing private key information to each other or to the cloud. The sender is able to revoke user credentials at any time. Parties are able to leverage commodity hardware to automatically mutually authenticate their credentials and access available relevant options and workflows.

Growing community of inventors

New Plymouth, New Zealand

Benjamin Gregory Nichols