Recipient credentialing leveraging private keys on keystores read by provisioned devices

Abstract

The disclosed technology teaches an implementation for leveraging self-sovereign credentials held on mobile devices to provision credentials that empower one party ('recipient' or 'user', used synonymously herein) to obtain credentialed access to information and resources on behalf of another party (“sender” or “administrator”, used synonymously herein), without either party exposing private key information to each other or to the cloud. The sender is able to revoke user credentials at any time. Parties are able to leverage commodity hardware to automatically mutually authenticate their credentials and access available relevant options and workflows.