The Government of the United States of America, As Represented by the Secretary of Homeland Security

Apple Inc.

Chang Ellison

Daniel A Boyd

Jason Lim

Kelli L Biegger

Brandon P Gutierrez

William Washington

Ahmer Ali Khan

Arun Vemury

Ho Cheung Chung

Franck Farian Rakotomalala

Irene M Graff

Martijn Theo Haring

Khailee Marischuk

Nathan Grebasch

Michelle Wilson

In an example, a subject using a user mobile-identification-credential device (UMD) requests vetting by a vetting system, which receives verified subject information associated with a level-n mobile identification credential (MIC-n) that UMD received from a level-n authorizing party system (APS-n). MIC-n is linked to lower level MIC-to MIC-(n−1). The vetting system, as level-n relying party system (RPS-n), uses the verified subject information associated with the linked MIC-to MIC-n to verify or not verify the identity of the subject, develops an identity profile of the subject, and determines a vetting result of the subject by calculating a composite trust score based on MIC trust values for the multiple levels of MIC. MIC-i (i=1 to n) is linked to MIC-(i−1) which UMD received from APS-(i−1), and APS-i is RPS-(i−1) which verified the identity of the subject using verified subject information associated with MIC-(i−1), such that MIC-to MIC-n are linked.

Vetting system and method using composite trust value of multiple confidence levels based on linked mobile identification credentials

In an example, a method includes receiving, by an election office system from a voter device, a request for a voting ballot for an election, part or all of voter ID information associated with a first mobile identification credential which the voter device received from a first authorizing party system (APS), and consented data indication which indicates the part or all of voter ID information that is authorized by the voter device for release by the first APS to the election office system, the part or all of voter ID information to be verified to the election office system by the first APS; and using the verified part or all of voter ID information to verify or not verify an identity of the voter. The identity of the voter is to be verified before the election office system grants the request to provide the voting ballot to the voter.

Voter identification using mobile identification credential

In an example, a provider system receives from a user device a request for user access through a checkpoint. The provider system sends to the user device a request for identification information of the user. The provider system receives user information associated with a mobile identification credential (MIC) which the user device received from an authorizing party system (APS), the user having consented to release the user information to the provider system, and the user information having been verified by the APS. The provider system uses the verified user information associated with the MIC to verify or not verify the identity of the user. The provider system verifies the identity of the user before granting the user the request for user access through the checkpoint.

System and method for checkpoint access using mobile identification credential for international travel

In an example, a provider system receives from a client device a request for client access. The provider system sends to the client device a request for identification information of the client. The provider system receives client information associated with a mobile identification credential (MIC) which the client device received from an authorizing party system (APS), the client having consented to release the client information to the provider system, and the client information having been verified by the APS. The provider system uses the verified client information associated with the MIC to verify or not verify the identity of the client. The provider system verifies the identity of the client before granting the client the request for client access.

System and method for user access using mobile identification credential

An apparatus verifies hosted information associated with a user. The apparatus establishes, by the online host serving as a relying party system (RPS), a secure connection between the RPS and a user mobile-identification-credential device (UMD). The RPS sends a mobile identification credential (MIC) user information request to the UMD, via the secure connection, seeking release of MIC user information (official information). The RPS obtains from authorizing party system (APS) verification of the MIC user information received in response to the MIC user information request. The RPS stores the MIC user information as hosted information pertaining to the user. The RPS designates the hosted information as base truth information representing the user.

Selective access and verification of user information

In an example, a provider system receives from a client device a request for client sign-on access. The provider system sends to the client device a request for identification information of the client. The provider system receives client information associated with a first mobile identification credential (MIC) which the client device received from an authorizing party system (APS), the client having consented to release the client information to the provider system, and the client information having been verified by the APS. The provider system uses the verified client information associated with the first MIC to verify or not verify the identity of the client. The provider system verifies the identity of the client before granting the client the request for client sign-on access.

System and network for access control using mobile identification credential for sign-on authentication

A vehicle information remote retrieval method includes an emergency personnel or first responder vehicle (FRV) establishing a vehicle connection between an infotainment system of a vehicle and the FRV. The FRV sends a vehicle information request to the infotainment system of the vehicle, via the vehicle connection, seeking release of vehicle information. The FRV obtains authentication of the vehicle information received in response to the vehicle information request. The FRV determines occupant status based on the vehicle information. The FRV communicates the passenger status to a first responder.

Remote retrieval of information from vehicles

A provider system is connected to readers disposed at distances from the provider system. A secure local connection is established between the client device and the provider system via one of the readers. Before the client reaches an access touchpoint, the provider system receives from the client device a request for client access, the provider system sends to the client device a request for identification information of the client, and the client device sends client information associated with a first mobile identification credential (MIC) which the client device received from an authorizing party system (APS), the client having consented to release the client information to the provider system, and the client information having been verified. The provider system performs a liveness check of the client using live-captured biometric information at the access touchpoint, determines whether the liveness check is valid, and grants the request if the liveness check is valid.

Biometric verification for access control using mobile identification credential

A provider system is connected to readers disposed at distances from the provider system. A secure local connection is established between the client device and the provider system via one of the readers. Before the client reaches an access touchpoint, the provider system receives from the client device a request for client access, the provider system sends to the client device a request for identification information of the client, and the client device sends client information associated with a first mobile identification credential (MIC) which the client device received from an authorizing party system (APS), the client having consented to release the client information to the provider system, and the client information having been verified. The provider system uses the verified client information associated with the first MIC to verify or not verify the identity of the client before granting or denying the request to the client.

Permission-based system and network for access control using mobile identification credential

Verified hosted information in online galleries

Permission-based system and network for access control using mobile identification credential including mobile passport

A provider system is connected to one or more readers corresponding to one or more access points. A secure local connection is established between the user device and the provider system via one reader. The provider system receives from the user device a request for user access via one access point corresponding to the one reader, the provider system sends to the user device a request for identification information of the user, and the user device sends user information associated with a first mobile identification credential (MIC) which the user device received from an authorizing party system (APS), the user having consented to release the user information to the provider system, and the user information having been verified. The provider system uses the verified user information associated with the first MIC to verify or not verify the identity of the user before granting or denying the request to the user.

System and network for access control to real property using mobile identification credential

In an example, a subject using a user mobile-identification-credential device (UMD) requests vetting by a vetting system, which receives verified subject information associated with a level-n mobile identification credential (MIC-n) that UMD received from a level-n authorizing party system (APS-n). MIC-n is linked to lower level MIC-0 to MIC-(n&#x2212;1). The vetting system, as level-n relying party system (RPS-n), uses the verified subject information associated with the linked MIC-0 to MIC-n to verify or not verify the identity of the subject, develops an identity profile of the subject, and determines a vetting result of the subject by calculating a composite trust score based on MIC trust values for the multiple levels of MIC. MIC-i (i=1 to n) is linked to MIC-(i&#x2212;1) which UMD received from APS-(i&#x2212;1), and APS-i is RPS-(i&#x2212;1) which verified the identity of the subject using verified subject information associated with MIC-(i&#x2212;1), such that MIC-0 to MIC-n are linked.

Official vetting using composite trust value of multiple confidence levels based on linked mobile identification credentials

A stopped vehicle information remote retrieval method includes an emergency personnel or first responder vehicle (FRV) establishing a vehicle connection between an infotainment system of a stopped vehicle and the FRV. The FRV sends a vehicle information request to the infotainment system of the stopped vehicle, via the vehicle connection, seeking release of vehicle information. The FRV obtains authentication of the vehicle information received in response to the vehicle information request. The FRV determines occupant status based on the vehicle information. The FRV communicates the passenger status to a first responder.

Vehicular communication of emergency information

In an example, a patient using a user mobile-identification-credential device (UMD) requests the patient's medical record from a medical office using a relying party system (RPS). The RPS requests identification information of the patient from the UMD and receives, based on consent of the patient, some or all patient identification information associated with a mobile identification credential (MIC) previously provisioned to the UMD an authorizing party system (APS). The RPS receives verification of the received patient identification information, uses the verified user ID information to verify or not verify the identity of the patient, and verifies the identity of the patient before granting the request to provide the medical record to the patient. The patient has the option of releasing part or all of the medical record to a third party. In one embodiment, the patient stores the medical record with a service provider and authorizes, in advance, certain medical personnel to have access to it.

Growing community of inventors

Arlington, VA, United States of America

Chang Ellison