OA18670A

OA18670A - Systems and methods for providing block chain-based multifactor personal identity verification

Info

Publication number: OA18670A
Application number: OA1201800202
Authority: OA
Inventors: Marcus Andrade
Original assignee: Black Gold Coin, Inc.
Priority date: 2016-03-28
Filing date: 2016-03-29
Publication date: 2019-04-08

Abstract

Block chain-based multifactor personal identity verification may be provided. Verification addresses may be established on a block chain by: associating identifiers with individuals having previously verified personal identifies, assigning verification addresses on a block chain to the individuals, and recording identifiers and biometric data associated with the individuals at corresponding verification addresses. Block chainbased multifactor personal identity verification using the verification addresses may be performed by: receiving one or more identifiers in connection with one or more requests to verify an identity of one or more individuals, extracting the biometric data associated with the one or more individuals from the corresponding verification addresses, and verifying the identity of the one or more individuals upon receiving matching biometric data and private keys.

Description

SYSTEMS AND METHODS FOR PROVIDING BLOCK CHAIN-BASED MULTIFACTOR PERSONAL IDENTITY VERIFICATION

FIELD OF THE DISCLOSURE

This disclosure relates to Systems and methods for providing block chain- based multifactor Personal identity vérification.

SUMMARY

One aspect of the disclosure relates to a System for providing block chain- based multifactor personal identity vérification. The system may include one or more hardware processors configured by machine-readable instructions to establish vérification addresses on a block chain and/or perform block chain-based multifactor personal identity vérification using the vérification addresses. Establishing vérification addresses on the block chain may include associating identifiers with individuals having previously verified personal identifies, a first identifier being associated a first individual, the first individual having a previously verified Personal identity; assigning vérification addresses on a block chain to the individuals, a given vérification address including a public key and a private key, a first vérification address being assigned to the first individual, the first vérification address including a first public key and a first private key; and recording identifiers and biométrie data associated with the individuals at corresponding vérification addresses, the first identifier and first biométrie data associated with the first individual being recorded at the first vérification address. Performing block chain-based multifactor personal identity vérification using the vérification addresses may include receiving one or more identifiers in connection with one or more requests to verify an identity of one or more individuals, the first identifier being received in connection with a request to verify an identity of the first individual; extracting the biométrie data associated with the one or more individuals from the corresponding vérification addresses, the first biométrie data associated with the first individual being extracted from the first vérification address; and verifying the identity of the one or more individuals upon receiving matching biométrie data and private keys, the personal identity of the first individual being verified upon receipt of (1) biométrie data matching the first biométrie data and (2) a private key matching the first private key.

Another aspect of the disclosure relates to a method for establishing vérification addresses on a block chain in order to provide block chain-based multifactor personal identity vérification. The method may be performed by one or more hardware processors configured by machine-readable instructions. The method may include associating identifiers with individuals having previously verified personal identities, a first identifier being associated a first individual, the first individual having a previously verified personal identity; assigning vérification addresses on a block chain to the individuals, a given vérification address including a public key and a private key, a first vérification address being assigned to the first individual, the first vérification address including a first public key and a first private key; and recording identifiers and biométrie data associated with the individuals at corresponding vérification addresses, the first identifier and first biométrie data associated with the first individual being recorded at the first vérification address.

The identity of the one or more individuals may be vérifiable upon receiving matching biométrie data and private keys, such that the personal identity of the first individual is vérifiable upon receipt of (1) biométrie data matching the first biométrie data and (2) a private key matching the first private key.

Yet another aspect of the disclosure relates to a method for perform block chain-based multifactor personal identity vérification using vérification addresses. The method may be performed by one or more hardware processors configured by machine-readable instructions. The method may include receiving one or more identifiers in connection with one or more requests to verify an identity of one or more individuals, a first identifier being received in connection with a request to verify an identity of a first individual; extracting biométrie data associated with the one or more individuals from corresponding vérification addresses on a block chain, a given vérification address including a public key and a private key, first biométrie data associated with the first individual being extracted from a first vérification address assigned to the first individual, the first vérification address including a first public key and a first private key; and verifying the identity of the one or more individuals upon receiving matching biométrie data and private keys, the personal identity of the first individual being verified upon receipt of (1) biométrie data matching the first biométrie data and (2) a private key matching the first private key.

These and other features, and characteristics of the présent technology, as well as the methods of operation and functions of the related éléments of structure and the combination of parts and économies of manufacture, will become more apparent upon considération of the following description and the appended daims with reference to the accompanying drawings, ali of which form a part of this spécification, wherein like reference numerals designate corresponding parts in the various figures. It is to be expressly understood, however, that the drawings are for the purpose of illustration and description only and are not intended as a définition of the limits of the invention. As used in the spécification and in the daims, the singular form of a, an, and the include plural referents unless the context clearly dictâtes otherwise.

BRIEF DESCRIPTION OF THE DRAWINGS

FIG. 1 illustrâtes a System for providing block chain-based multifactor personal identity vérification, in accordance with one or more implémentations.

FIG. 2 illustrâtes a method for establishing vérification addresses on a block chain in order to provide block chain-based multifactor personal identity vérification, in accordance with one or more implémentations.

FIG. 3 illustrâtes a method for performing block chain-based multifactor personal identity vérification using vérification addresses, in accordance with one or more implémentations.

DETAILED DESCRIPTION

FIG. 1 illustrâtes a System 100 for providing block chain-based multifactor personal identity vérification, in accordance with one or more implémentations. In some implémentations, System 100 may include one or more servers 102. The server(s) 102 may be configured to communicate with one or more computing platforms 104 according to a client/server architecture, a peer-to-peer architecture, and/or other architectures. The users may access System 100 via computing platform(s) 104.

The server(s) 102 may be configured to execute machine-readable instructions 106. The machine-readable instructions 106 may include one or more of an individual identifier component 108, a vérification address assignment component 110, an address recordation component 112, a user interface component 114, a vérification request component 116, an information extraction component 118, an identity vérification component 120, and/or other machine-readable instruction components.

The machine-readable instructions 106 may be exécutable to establish vérification addresses on a block chain. Generally speaking, a block chain is a transaction database shared by some or ail nodes participating in System 100. Such participation may be based on the Bitcoin protocol, Ethereum protocol, and/or other protocols related to digital currencies and/or block chains. A full copy of the block chain contains every transaction ever executed in an associated digital currency. In addition to transactions, other information may be contained by the block chain, such as described further herein.

The block chain may be based on several blocks. A block may include a record that contains and confirms one or more waiting transactions. Periodically (e.g., roughiy every one minute), a new block including transactions and/or other information may be appended to the block chain. In some implémentations, a given block in the block chain contains a hash of the previous block. This may hâve the effect of creating a chain of blocks from a genesis block (i.e., the first block in the block chain) to a current block. The given block may be guaranteed to corne chronologically after a previous block because the previous block's hash would otherwise not be known. The given block may be computationally impractical to modify once it is included in the block chain because every block after it would also hâve to be regenerated.

A given vérification address may include a spécifie location on the block chain where certain information is stored. In some implémentations, an individual vérification address may be referred to as an AtenVerify Address. Vérification addresses are further described below in connection with vérification address assignment component 110.

The individual identifier component 108 may be configured to associated identifiers with individuals having previously verified Personal identities. For example, a first identifier may be associated a first individual. The first individual may hâve a previously verified personal identity. Generally speaking, an identifier may include one or more of a number, an alphanumeric code, a username, and/or other information that can be linked to an individual. In some implémentations, an individual identifier may be referred to as an Aten ID.

In accordance with some implémentations, an individual having a previously verified Personal identity may hâve obtained the previously verified personal identity through a variety of approaches. For example, in some implémentations the individual may be required to provide evidence of the individual's identity. Such evidence may include one or more of providing a copy of a government issued identification (e.g,, passport and/or driver's license), providing a copy of mail received by the individual (e.g., a utility bill), evidence provided by a third party, and/or other evidence on an individual's identity. The evidence may be provided to an entity associated with server(s) 102.

The vérification address assignment component 110 may be configured to assign vérification addresses on a block chain to the individuals. A given vérification address may include a public key and a private key. By way of example, a first vérification address may be assigned to the first individual. The first vérification address may include a first public key and a first private key.

Generally speaking, a public and private key-pair may be used for encryption and decryption according to one or more public key algorithms. By way of non- lîmiting example, a key pair may be used for digital signatures. Such a key pair may include a private key for signing and a public key for vérification. The public key may be widely distributed, while the private key is kept secret (e.g., known only to its proprietor). The keys may be related mathematically, but calculating the private key from the public key is unfeasible.

In some implémentations, vérification address assignment component 110 may be configured such that private keys may be stored within computing platform(s)

104. For example, the first private key may be stored within a computing platform 104 and/or other locations associated with the first individual. In accordance with some implémentation, a private key may be stored in one or more of a verify.dat file, a SIM card, and/or other locations.

In some implémentations, vérification address assignment component 110 may be configured such that multiple vérification addresses may be assigned to separate individuals. For example, in addition to the first vérification address, a second vérification address may be assigned to the first individual. One or more additional vérification addresses may be assigned to the first individual, in accordance with one or more implémentations.

The address recordation component 112 may be configured to record identifiers and biométrie data associated with the individuals at corresponding vérification addresses. For example, the first identifier and first biométrie data associated with the first individual may be recorded at the first vérification address. Recording information at a given vérification address may include recording a hash or other encrypted représentation of the information. In some implémentations, different biométrie data may be recorded at multiple vérification addresses assigned to a single given individual. For example, in addition to the first identifier and the first biométrie data associated with the first individual being recorded at the first vérification address, the first identifier and second biométrie data associated with the first individual may be recorded at a second vérification address.

Generally speaking, biométrie data may include metrics related to human characteristics. Biométrie identifiers are distinctive, measurable characteristics that can be used to label and describe individuals. Biométrie identifiers are typically include physiological characteristics, but may also include behavioral characteristics and/or other characteristics. Physiological characteristics may be related to the shape of an individual's body. Examples of physiological characteristics used as biométrie data may include one or more of fingerprint, palm veins, face récognition, DNA, palm print, hand geometry, iris récognition, retina, odor or scent, and/or other physiological characteristics. Behavioral characteristics may be related to a pattern of behavior of an individual. Examples of behavioral characteristics used as biométrie data may include one or more of typing rhythm, gait, voice, and/or other behavioral characteristics.

The biométrie data may include one or more of an image or other visual représentation of a physiological characteristic, a recording of a behavioral characteristic, a template of a physiological characteristic and/or behavioral characteristic, and/or other biométrie data. A template may include a synthesis of relevant features extracted from the source. A template may include one or more of a vector describing features of a physiological characteristic and/or behavioral characteristic, a numerical représentation of a physiological characteristic and/or behavioral characteristic, an image with particular properties, and/or other information.

Biométrie data may be received via computing platforms 104 associated with the individuals. For example, biométrie data associated with a first individual may be received via a first computing platform 104 associated with the first individual, The first computing platform 104 may include an input device (not depicted) configured to capture and/or record a physiological characteristic and/or behavioral characteristic of the first individual. Examples of such an input device may include one or more of a caméra and/or other imaging device, a fingerprint scanner, a microphone, an accelerometer, and/or other input devices.

The user interface component 114 may be configured to provide an interface for présentation to individuals via associated computing platforms 104. The interface may include a graphical user interface presented via individual computing platforms

104. According to some implémentations, the interface may be configured to allow a given individual to add or delete vérification addresses assigned to the given individual so long as at least one vérification address is assigned to the given individual.

In some implémentations, user interface component 114 may be configured to access and/or manage one or more user profiles and/or user information associated with users of System 100. The one or more user profiles and/or user information may include information stored by server(s) 102, one or more of the computing platform(s) 104, and/or other storage locations. The user profiles may include, for example, information identifying users (e.g., a username or handle, a number, an identifier, and/or other identifying information), security login information (e.g., a login code or password), System account information, subscription information, digital currency account information (e.g., related to currency held in crédit for a user), relationship information (e.g., information related to relationships between users in System 100), System usage information, démographie information associated with users, interaction history among users in the System 100, information stated by users, purchase information of users, browsing history of users, a computing platform identification associated with a user, a phone number associated with a user, and/or other information related to users.

The machine-readable instructions 106 may be exécutable to perform block chain-based multifactor personal identity vérification using the vérification addresses.

The vérification request component 116 may be configured to receive one or more identifiers in connection with one or more requests to verify an identity of one or more individuals. For example, the first identifier may be received in connection with a request to verify an identity of the first individual. Requests for identity vérification may be provided in connection with and/or related to financial transactions, information exchanges, and/or other interactions. Requests may be received from other individuals and/or other third parties.

The information extraction component 118 may be configurée! to extract the biométrie data associated with the one or more individuals from the corresponding vérification addresses. For example, the first biométrie data associated with the first individual may be extracted from the first vérification address. Extracting information (e.g., biométrie data) from a vérification address may include decrypting information.

According to some implémentations, information extraction component 118 may be configured such that, responsive to receiving the request to verify the identity of the first individual, a prompt may be provided to the first individual for biométrie data matching the first biométrie data and a private key matching the first private key. The prompt may be conveyed via a computing platform 104 associated with the first individual. The prompt may be conveyed via a graphical user interface and/or other user interface provided by the computing platform 104 associated with the first individual. The prompt may include an indication that is one or more of Visual, audible, haptic, and/or other indications.

In some implémentations, information extraction component 118 may be configured such that, responsive to receiving the request to verify the identity of the first individual, a prompt may be provided to a computing platform 104 associated with the first individual. The prompt may cause the computing platform 104 to automatically provide, to server(s) 102, biométrie data matching the first biométrie data and/or a private key matching the first private key.

The identity vérification component 120 may be configured to verify the identity of the one or more individuals upon, or in response to, receiving matching biométrie data and private keys. For example, the personal identity of the first individual may be verified upon receipt of (1) biométrie data matching the first biométrie data and (2) a private key matching the first private key. Verifying the personal identity of the first individual may include comparing stored information with newly received information.

According to some implémentations, identity vérification component 120 may be configured such that the personal identity of the first individual may be verified upon receipt of (1) biométrie data matching the first biométrie data or the second biométrie data and (2) a private key matching the first private key. Such implémentations may provide so-called M-of-N signatures for identity vérification where some subset of a larger set of identifying information is required.

In some implémentations, identity vérification component 120 may be configured such that the biométrie data matching the first biométrie data and the private key matching the first private key may be used to sign the vérification of the personal identity of the first individual.

A cryptographie signature is a mathematicai mechanism that allows someone to prove ownership. In the case of Bitcoin, a Bitcoin wallet and its private key(s) are linked by some mathematicai magic. When your Bitcoin software signs a transaction with the appropriate private key, the whole network can see that the signature matches the bitcoins being spent. However, there is no way for the world to guess your private key to steal your hard-earned bitcoins.

In some implémentations, at least one dedicated node performs the signing of the vérification of the personal identity of the first individual. A given dedicated node may include one or more of the server(s) 102. The given dedicated node may be a public node or a private node configured for creating new blocks and/or for signing vérification.

In some implémentations, server(s) 102, computing platform(s) 104, and/or external resources 122 may be operatively linked via one or more electronic communication links. For example, such electronic communication links may be established, at least in part, via a network such as the Internet and/or other networks. It will be appreciated that this is not intended to be limiting, and that the scope of this disclosure includes implémentations in which server(s) 102, computing platform(s) 104, and/or external resources 122 may be operatively linked via some other communication media.

A given computing platform 104 may include one or more processors configured to execute machine-readable instructions. The machine-readable instructions may be configured to enable an expert or user associated with the given computing platform 104 to interface with System 100 and/or external resources 122, and/or provide other functionality attributed herein to computing platform(s) 104. By way of non-limiting example, the given computing platform 104 may include one or more of a desktop computer, a laptop computer, a handheld computer, a tablet computing platform, a NetBook, a Smartphone, a gaming console, and/or other computing platforms.

External resources 122 may include sources of information, hosts and/or providers of Virtual environments outside of System 100, external entitïes participating with System 100, and/or other resources. In some implémentations, some or ail of the functionality attributed herein to external resources 100 may be provided by resources included in System 100.

Server(s) 102 may include electronic storage 124, one or more processors 126, and/or other components. Server(s) 102 may include communication lines, or ports to enable the exchange of information with a network and/or other computing platforms. Illustration of server(s) 102 in FIG. 1 is not intended to be limiting. Server(s) 102 may include a plurality of hardware, software, and/or firmware components operating togetherto provide the functionality attributed herein to server(s) 102. For example, serverfs) 102 may be implemented by a cloud of computing platforms operating together as server(s) 102.

Electronic storage 124 may comprise non-transitory storage media that electronically stores information. The electronic storage media of electronic storage 124 may include one or 5 both of System storage that is provided integrally (i.e., substantially non-removable) with server(s) 102 and/or removable storage that is removably connectable to server(s) 102 via, for example, a port (e.g., a USB port, a firewire port, etc.) or a drive (e.g., a disk drive, etc.). Electronic storage 124 may include one or more of optically readable storage media (e.g., optical disks, etc.), magnetically readable storage media (e.g., magnetic tape, magnetic hard 10 drive, floppy drive, etc.), electrical charge-based storage media (e.g., EEPROM, RAM, etc.), solid-state storage media (e.g., flash drive, etc.), and/or other electronically readable storage media. Electronic storage 124 may include one or more Virtual storage resources (e.g., cloud storage, a Virtual private network, and/or other Virtual storage resources). Electronic storage 124 may store software algorithms, information determined by processor(s) 126, information received from server(s) 102, information received from computing platform(s) 104, and/or other information that enables server(s) 102 to function as described herein.

Processor(s) 126 may be configured to provide information Processing capabilities in server(s) 102. As such, processor(s) 126 may include one or more of a digital processor, an analog processor, a digital circuit designed to process information, an analog circuit desîgned to 20 process information, a state machine, and/or other mechanisms for electronically processing information. Although processor(s) 126 is shown in FIG. 1 as a single entity, this is for illustrative purposes only. In some implémentations, processor(s) 126 may include a plurality of processing units. These processing units may be physically located within the same device, or processor(s) 126 may represent processing functionality of a plurality of devices operating in 25 coordination. The processor(s) 126 may be configured to execute machine-readable instruction components 108, 110, 112, 114, 116, 118, 120, and/or other machine-readable instruction components. Processor(s) 126 may be configured to execute machine-readable instruction components 108, 110, 112, 114, 116, 118, 120, and/or other machine-readable instruction components by software; hardware; firmware; some combination of software, hardware, and/or 30 firmware; and/or other mechanisms for configuring processing capabilities on processor(s) 126.

As used herein, the term machine-readable instruction component may refer to any component or set of components that perform the functionality attributed to the machinereadable instruction component. This may include one or more physical processors during execution of processor readable instructions, the processor readable instructions, circuitry, 35 hardware, storage media, or any other components.

It should be appreciated that although machine-readable instruction components 108, 110, 112, 114, 116, 118, and 120 are illustrated in FIG. 1 as being implemented within a single Processing unit, in implémentations in which processor(s) 126 includes multiple Processing units, one or more of machine-readable instruction components 108, 110, 112, 114, 116, 118, and/or 120 may be implemented remotely from the other machine-readable instruction components. The description of the functionality provided by the different machine-readable instruction components 108, 110, 112, 114, 116, 118, and/or 120 described below is for illustrative purposes, and is not intended to be limiting, as any of machine- readable instruction components 108, 110, 112, 114, 116, 118, and/or 120 may provide more or less functionality than is described. For example, one or more of machine-readable instruction components 108, 110, 112, 114, 116, 118, and/or 120 may be eliminated, and some or ail of rts functionality may be provided by other ones of machine-readable instruction components 108, 110, 112, 114, 116, 118, and/or 120. As another example, processor(s) 126 may be configured to execute one or more additional machine-readable instruction components that may perform some or ail of the functionality attributed below to one of machine-readable instruction components 108, 110, 112, 114, 116, 118, and/or 120.

FIG. 2 illustrâtes a method 200 for establishing vérification addresses on a block chain in order to provide block chain-based multifactor personal identity vérification, in accordance with one or more implémentations. The operations of method 200 presented below are intended to be illustrative. In some implémentations, method 200 may be accomplished with one or more additional operations not described, and/or without one or more of the operations discussed. Additionally, the order in which the operations of method 200 are illustrated in FIG. 2 and described below is not intended to be limiting.

In some implémentations, one or more operations of method 200 may be implemented in one or more Processing devices (e.g., a digital processor, an analog processor, a digital circuit designed to process information, an analog circuit designed to process information, a State machine, and/or other mechanisms for electronically Processing information). The one or more Processing devices may include one or more devices executing some or ail of the operations of method 200 in response to instructions stored electronically on an electronic storage medium. The one or more Processing devices may include one or more devices configured through hardware, firmware, and/or software to be specifically designed for execution of one or more of the operations of method 200.

At an operation 202, identifiers may be associated with individuals having previously verified personal identities. A first identifier may be associated a first individual. The first individual may hâve a previously verified personal identity. Operation 202 may be performed by one or more hardware processors configured to execute a machine-readable instruction component that is the same as or similar to individual identifier component 108 (as described in connection with FIG. 1), in accordance with one or more implémentations.

At an operation 204, vérification addresses on a block chain may be assigned to the individuals. A given vérification address may include a public key and a private key. A first vérification address may be assigned to the first individual. The first vérification address may include a first public key and a first private key. Operation 204 may be performed by one or more hardware processors configured to execute a machine-readable instruction component that is the same as or similar to vérification address assignment component 110 (as described in connection with FIG. 1), in accordance with one or more implémentations.

At an operation 206, identifiera and biométrie data associated with the individuals may be recorded at corresponding vérification addresses. The first identifier and first biométrie data associated with the first individual may be recorded at the first vérification address. The identity of the one or more individuals may be vérifiable upon, or in response to, receiving matching biométrie data and private keys. The personal identity of the first individual may be vérifiable upon, or in response to, receipt of (1) biométrie data matching the first biométrie data and (2) a private key matching the first private key. Operation 206 may be performed by one or more hardware processors configured to execute a machine-readable instruction component that is the same as or similar to address recordation component 112 (as described in connection with FIG. 1), in accordance with one or more implémentations.

FIG. 3 illustrâtes a method 300 for performing block chain-based multifactor personal identity vérification using vérification addresses, in accordance with one or more implémentations. The operations of method 300 presented below are intended to be illustrative. In some implémentations, method 300 may be accomplished with one or more additional operations not described, and/or without one or more of the operations discussed. Additionally, the order in which the operations of method 300 are illustrated in FIG. 3 and described below is not intended to be limiting.

In some implémentations, method 300 may be implemented in one or more Processing devices (e.g., a digital processor, an analog processor, a digital circuit designed to process information, an analog circuit designed to process information, a State machine, and/or other mechanisms for electronically processing information). The one or more Processing devices may include one or more devices executing some or ail of the operations of method 300 in response to instructions stored electronically on an electronic storage medium. The one or more Processing devices may include one or more devices configured through hardware, firmware, and/or software to be specifically designed for execution of one or more of the operations of method 300.

At an operation 302, one or more identifiers may be received in connection with one or more requests to verify an identity of one or more individuals. A first identifier may be received in connection with a request to verify an identity of a first individual. Operation 302 may be performed by one or more hardware processors configured to execute a machine-readable instruction component that is the same as or similar to vérification request component 116 (as described in connection with FIG. 1), in accordance with one or more implémentations.

At an operation 304, biométrie data associated with the one or more individuals may be extracted from corresponding vérification addresses on a block chain. A given vérification address may include a public key and a private key. First biométrie data associated with the first individual may extracted from a first vérification address assigned to the first individual. The first vérification address may include a first public key and a first private key. Operation 304 may be performed by one or more hardware processors configured to execute a machine-readable instruction component that is the same as or similar to information extraction component 118 (as described in connection with FIG. 1), in accordance with one or more implémentations.

At an operation 306, the identity of the one or more individuals may be verified upon, or in response to, receiving matching biométrie data and private keys. The personal identity of the first individual may be verified upon, or in response to, receipt of (1) biométrie data matching the first biométrie data and (2) a private key matching the first private key. Operation 306 may be performed by one or more hardware processors configured to execute a machine-readable instruction component that is the same as or similar to identity vérification component 120 (as described in connection with FIG. 1), in accordance with one or more implémentations.

Exemplary implémentations may facilitate storîng personal data on the block chain. The Personal data may be stored on the block chain in an encrypted way. A person may be identified at the block chain level with one or more of a private key, a finger print, a finger print hash, an eye retina, an eye retina hash, and/or other unique information. The data stored may include or relate to one or more of a passport, an identification card, extracted passport information, a driver's license, extracted driver's license information, finger print, eye retina, and/or other information. According to some implémentations, if some of the data is changed, a new record may be created for that person in the block chain. That is, ail changes are added as new records. The old record will always be stored on the block chain. Generally speaking, ail records on the block chain are stored forever and cannot be removed. More than one copy of the block chain will exist to ensure the records are not manipulated.

Exemplary implémentations may facilitate access to personal data. There may be multiple access levels for the personal data in the block chain. Access Controls may be grated on pubiie/private key pairs levels. Examples of access levels may include one or more of Super Admin (full access to block chain), Authorities- country level (full read-only access), Authorities12 state/local level (limited read-only access), Police and other services including Emergency (access to certain Personal data by Finger Print/Eye retina of that person only), Particrpating Merchants (limited access), and/or other access levels.

Exemplary implémentations may facilitate vérification check. There may be multiple levels for how it is possible to check vérification. For example, some implémentations may ensure a person has a record at Company but no personal data is provided. Some implémentations may ensure a person has a record at Company and get very basic personal information such as Full Name, DOB, Gender, and/or other basic information. Some implémentations may ensure a person has a record at Company and get ali personal data.

Although the présent technology has been described in detail for the purpose of illustration based on what is currently considered to be the most practical and preferred implémentations, it is to be understood that such detail is solely for that purpose and that the technology is not limited to the disclosed implémentations, but, on the contrary, is intended to cover modifications and équivalent arrangements that are within the spirit and scope of the appended daims. For example, it is to be understood that the présent technology contemplâtes that, to the extent possible, one or more features of any implémentation can be combined with one or more features of any other implémentation.

Claims

What is claimed is:

1. A System for providing blockchain-based multifactor Personal identity vérification, the System comprising:

one or more computer-readable storage media configured to store a blockchain;

a server-side computer System comprising one or more processors programmed to execute computer program instructions that, when executed, cause the server-side computer System to:

assign a vérification address associated with the blockchain to an individual, the individual having a previously verified Personal identity;

store, at the one or more computer-readable storage media, an identifier of the individual and a biométrie hash of the individual in association with the vérification address associated with the blockchain, wherein the biométrie hash is a hash of biométrie data of the individual, and wherein each of the identifier, the biométrie hash, and the vérification address are different from one another and different from private and public keys from which the vérification address was derived;

obtain, from a client-side device, the identifier and the biométrie data in connection with a request to verify the individual's identity, the request indicating the vérification address associated with the blockchain;

obtain the stored identifier and the stored biométrie hash using the vérification address indicated in the request; and sign vérification of the individual's identity responsive to a détermination that the identifier of the request and the biométrie data of the request match the stored identifier and the stored biométrie hash.
2. The System of claim 1, wherein the server-side computer System is caused to: sign, using the private key from which the vérification address was derived, the vérification of the individual's identity responsive to the détermination that the identifier of the request and the biométrie data of the request match the stored identifier and the stored biométrie hash.
3. The System of claim 2, wherein the server -side computer System is caused to: store, at the one or more computer-readable storage media, the private key in association with the vérification address associated with the blockchain;

obtain, from the client-side device, the private key in connection with the request to verify the individual's identity;

obtain the stored private key using the vérification address indicated in the request; and sign, using the private key, the vérification of the individuai's identity responsive to a détermination that the identifier of the request, the biométrie data of the request, and the private key of the request match the stored identifier, the stored biométrie hash, and the stored private key.
4. The system of claim 3, wherein the private key is also stored on the client-side device, and wherein the client-side device is a user device of the individual.
5. The system of claim 1, wherein the server-side computer system is caused to:

assign another vérification address associated with the blockchain to the individual;

store, at the one or more computer-readable storage media, another biométrie hash of the individual in association with the other vérification address associated with the blockchain, the other biométrie hash being a hash of other biométrie data of the individual;

obtain, from the client-side device, the other biométrie data in connection with the request to verify the individual's identity, the request further indîcating the other vérification address associated with the blockchain;

obtain the stored other biométrie hash using the other vérification address indicated in the request; and sign the vérification of the individual’s identity responsive to a détermination that the identifier of the request, the biométrie data of the request, the other biométrie data of the request match the stored identifier, the stored biométrie hash, and the stored other biométrie hash.
6. The system of claim 5, wherein the server-side computer system is caused to: obtain, via a user interface, a user-initiated command to add the other vérification address as an address ofthe blockchain for the individuai; and assign the other vérification address associated with the blockchain to the individual based on the user-initiated command.
7. The System of claim 5, wherein the server-side computer System is caused to:

obtain, via a user interface, a user-initiated command to remove the other vérification address as an address of the blockchain for the individual; and de-associate the other vérification address associated with the biockchain from the individual based on the user-initiated command.
8. The System of claim 1, wherein the server-side computer System is caused to:

provide a first user, different than the individual, access to data stored at the one or more computer-readable storage media in association with the vérification address associated with the blockchain, the first user being provided access to the stored data based on vérification that the first user has a first private key, the first private key being different the private key from which the vérification address was derived; and denying a second user, different than the individual, access to the stored data based on vérification that the second user has a second private key.
9. The System of claim 1, wherein the biométrie data comprises an image, a recording, or a template.
10. The System of claim 1, wherein the biométrie data is related to a fingerprint, palm veins, face récognition, DNA, palm print, hand geometry, iris récognition, retina, odor, gait, or voice.
11. A method of providing blockchain-based multifactor personal identity vérification, the method being implemented by a server-side computer System comprising one or more processors executing computer program instructions that, when executed, perform the method, the method comprising:

storing, by the server-side computer System, a block.chain at one or more computer- readable storage media of the server-side computer System;

assigning, by the server-side computer System, a vérification address associated with the block.chain to an individual, the individual having a previously verified personal identity;

storing, by the server-side computer System, at the one or more computerreadable storage media, an identifier of the individual and a biométrie hash of the individual in association with the vérification address associated with the blockchain, wherein the biométrie hash is a hash of biométrie data of the individual, and wherein each of the identifier, the biométrie hash, and the vérification address are different from one another and different from private and public keys from which the vérification address was derived;

obtaining, by the server-side computer System, from a client-side device, the identifier and the biométrie data in connection with a request to verifÿ the individual's identity, the request indicating the vérification address associated with the block.Chain;

obtaining, by the server-side computer System, the stored identifier and the stored biométrie hash using the vérification address indicated in the request; and assigning, by the server-side computer System, vérification of the individual’s identity responsive to a détermination that the identifier of the request and the biométrie data of the request match the stored identifier and the stored biométrie hash.
12. The method of claim 11, comprising:

signing, by the server-side computer System, using the private key from which the vérification address was derived, the vérification of the individual's identity responsive to the détermination that the identifier of the request and the biométrie data of the request match the stored identifier and the stored biométrie hash.
13. The method of claim 12, comprising:

storing, by the server-side computer System, at the one or more computerreadable storage media, the private key in association with the vérification address associated with the blockchain;

obtaining, by the server-side computer System, from the client-side device, the private key in connection with the request to verify the individual's identity;

obtain the stored private key using the vérification address indicated in the request; and signing, by the server-side computer System, using the private key, the vérification of the individual’s identity responsive to a détermination that the identifier of the request, the biométrie data of the request, and the private key of the request match the stored identifier, the stored biométrie hash, and the stored private key.
14. The method of claim 11, comprising:

assigning, by the server-side computer System, another vérification address associated with the blockchain to the indivrdual;

storing, by the server-side computer System, at the one or more computerreadable storage media, another biométrie hash of the individual in association with the other vérification address associated with the blockchain, the other biométrie hash being a hash of other biométrie data of the individual;

obtaining, by the server-side computer System, from the client-side device, the other biométrie data in connection with the request to verify the individual's identity, the request further indicating the other vérification address associated with the blockchain;

obtaining, by the server-side computer system, the stored other biométrie hash using the other vérification address indicated in the request; and signing, by the server-side computer System, the vérification of the individual's identity responsive to a détermination that the identifier of the request, the biométrie data of the request, the other biométrie data of the request match the stored identifier, the stored biométrie hash, and the stored other biométrie hash.
15. The method of claim 14, comprising:

obtaining, by the server-side computer system, via a user interface, a userinitiated command to add the other vérification address as an address of the blockchain for the individual; and assigning, by the server-side computer system, the other vérification address associated with the blockchain to the individual based on the user-initiated command.
16. The method of claim 14, comprising:

obtaining, by the server-side computer system, via a user interface, a userinitiated command to remove the other vérification address as an address of the blockchain for the individual; and de-associating, by the server-side computer system, the other vérification address associated with the blockchain from the individual based on the user-initiated command.
17. The method of claim 11, comprising:

providing, by the server-side computer system, a first user, different than the individual, access to data stored at the one or more computer-readable storage media in association with the vérification address associated with the blockchain, the first user being provided access to the stored data based on vérification that the first user has a first private key, the first private key being different the private key from which the vérification address was derived; and denying, by the server-side computer system, a second user, different than the individual, access to the stored data based on vérification that the second user has a second private key.
18. The method of claim 11, wherein the biométrie data comprises an image, a recording, or a template.
19. The method of claim 11, wherein the biométrie data is related to a fingerprint, palm veins, face récognition, DNA, palm print, hand geometry, iris récognition, retina, odor, gait, or voice.
20. A System for providing blockchain-based multifactor personal identity vérification, the System comprising:

one or more computer-readable storage media configured to store a blockchain;

a server-side computer System comprising one or more processors programmed to execute computer program instructions that, when executed, cause the server-side computer System to:

assign multiple vérification addresses of the blockchain to the individual, the individual having a previously verified personal identity, the multiple vérification addresses include a first vérification address associated with the blockchain and a second vérification address associated with the blockchain;

store, at the one or more computer-readable storage media, (i) an identifier of the individual and a first biométrie hash of the individual in association with the first vérification address associated with the blockchain and (ii) a second biométrie hash ofthe individual in association with the second vérification address associated with the blockchain, wherein the first biométrie hash is a hash of first biométrie data of the individual, and the second biométrie hash is a hash of second biométrie data ofthe individual, and wherein each of the identifier, the first biométrie hash, the second biométrie hash, the first vérification address, and the second vérification address are different from one another, different from first private and public keys from which the first vérification address was derived, and different from second private and public keys from which the second vérification address was derived;

obtain, from a client-side device, the identifier, the first biométrie data, and the second biométrie data in connection with a request to verify the individual's identity, the request indicating the first vérification address associated with the blockchain and the second vérification address associated with the blockchain;

obtain (i) the stored identifier and the stored first biométrie hash using the first vérification address indicated in the request and (ii) the stored second biométrie hash using the second vérification address indicated in the request; and sign, using the private key from which the first vérification address was derived, vérification of the individual's identity responsive to a détermination that the identifier of the request, the first biométrie data of the request, and the second biométrie data of the request match the stored identifier, the stored first biométrie hash, and the stored second biométrie hash;

provide a first user, different than the individual, access to data stored at the one or more computer-readable storage media in association with the first vérification address associated with the blockchain, the first user being provided access to the stored data based on vérification that the first user has a first private key, the first private key being different the private key from which the first vérification address was derived and different from the private key from which the second vérification address was derived; and deny a second user, different than the individual, access to the stored data based on vérification that the second user has a second private key.