International Business Machines Corporation

Daniel A Gisolfi

Richard J Redpath

William F Abt, Jr

Aaron Keith Reed

David Louis Kaminsky

Bryce Allen Curtis

Laurent David Hasson

Rodney A Smith

Becky J Gibson

Thomas O Rowe

Asher C Johnson

Mark A Pilgrim

Chitra Dorai

Jianren Li

Aaron M Leventhal

Gerard John Buttner

Ahmad-Sameh Afif Fakhouri

A method, system and computer program product for delivering a digital identity document. A request is received to purchase a digital identity document from a user by a system. An acquisition uniform resource locator (URL) with parameters corresponding to the identity of the user and the requested digital identity document is created and provided to the user. The user utilizes the received URL to communicate with an issuer to request the digital identity document. The system then receives the requested digital identity document in encrypted form from the issuer. The system then delivers the encrypted digital identity document to the user. In this manner, the system can deliver to the user an identity document in digital form that has been vetted as trusted in a secure manner thereby reducing the number of occurrences in providing improper identity documents as well as lessening the ability to generate falsified identity documents.

Delivering digital identity documents that are vetted as trusted in a secured manner

A master digital copy of a registration is transmitted. The registration is proof that a physical object has been registered with a registration authority. A valid peripheral digital copy of the registration is received. The valid peripheral digital copy of the registration was made from the master digital copy of the registration and is incapable of being used to make other valid digital copies of the registration.

Management of digital copies of registrations using mobile devices

An example operation may include one or more of connecting, by an identity server, to a blockchain configured to store an identity trait of a user, retrieving, by an identity server, the identity trait from the a blockchain, establishing, by the identity server, a trust group homomorphism digital signature algorithm (DSA) for the user associated with the identity trait based on a public key PK, creating, by the identity server, a zero-knowledge proof function with a public key PKbased on a DSA member of the trust group homomorphism for witness data, providing, by the identity server, the witness data to a challenger for the zero-knowledge proof function, and receiving, by the identity server, a validation of the user as a proved user based on execution of the zero-knowledge proof function based on the witness data.

Trusted identity solution using blockchain

A method, system and computer program product for privacy control. A unique identifier for each data element of a group of data elements (e.g., driver's license contains a group of data elements, such as name, driver's license number) is created. These identifiers may be stored along with documentation (e.g., label) of the associated data elements in a manifest file. Alternatively, the identifiers may be stored in a file outside of the manifest file. In this manner, by utilizing a data element identifier which corresponds to a random number, security of privacy information is improved as one would only be able to obtain such sensitive information by obtaining such an identifier. Furthermore, the user only needs to send the requested data elements, as opposed to all the data elements of the group of data elements, to the challenger. In this manner, the user is preserving the security of other privacy information.

Privacy control using unique identifiers associated with sensitive data elements of a group

An example operation may include one or more of connecting to a blockchain configured to store an identity trait of a user, retrieving the identity trait from the blockchain, establishing a trust group homomorphism digital signature algorithm (DSA) for the user based on a private key, creating a zero knowledge succinct non-interactive argument of knowledge (zkSNARK) proof constructed based on a DSA of a trait in the trust group homomorphism DSA as witness data, and obtaining further trust information related to the user from the witness data.

The method utilizes a passport identification number as an element of a homomorphic encryption used to stamp a passport with country entry/exit data to form a digital representation of a subset of information in the passport. As a result, exchange of the digital representation is permitted to allow a selective transfer of information without exposing a user-sensitive passport identification number. The homomorphic encryption comprises a support for exposing a trusted photo and a trusted group containing country travel entry and exit information. The digitally signed passport stamp may then be used to provide verification of the individual by ensuring linkage to that user's passport. The individual's identity and passport verification may occur unconnected, i.e., without having to connect to a central database.

Digital passport country entry stamp

A method, system and computer program product for facilitating the generating of digital identity documents. A system receives a selection and initialization of properties (e.g., identity attributes, document type, alternate views, an acquisition uniform resource locator (URL)) to be used in a digital identity document (e.g., driver's license). The system then builds a template using the selected properties. The system may then present a list of built templates to a user/verifier to be used in generating a corresponding digital identity document. Upon receiving the selected template, the system provides the acquisition URL associated with the selected template to the user/verifier to be used by the user/verifier to request the corresponding digital identity document from the issuer. After receiving the digital identity document constructed by the issuer from the issuer, the system delivers the received digital identity document to the user/verifier.

Construction of digital identity documents in a manner that allows the user to select which attributes are to be revealed

Sensitive pieces of information stored on an individual's device can be protected using a device identification system that applies, for each sensitive piece of information, a function that integrates an identifier of the individual with a respective sensitive piece of information to create a respective identity element. Each identity element can be signed with a signature to create a trust group. The identity element and signature can be uploaded to the individual's device using an application that is configured to provide a subset of the sensitive pieces of information in response to a query.

Secure access for sensitive digital information

System, computer implemented method and computer program product for dynamically updating a Web page using browser-based messaging. A system for dynamically updating a Web page using browser-based messaging includes a Web page that includes a plurality of Web messaging tags, and a selected data model that can be bound to the Web messaging tags, and at least one messaging client for accepting at least one message from a message server and for processing the accepted at least one message into the selected data model.

Growing community of inventors

Hopewell, NY, United States of America

Daniel A Gisolfi