Systems and methods for providing blockchain-based multi-factor personal identity verification

Abstract

Systems and methods for providing multi-factor personal identity authentication based on blockchain are provided. Among them, a system for providing personal identity authentication based on blockchain includes: one or more computer-readable storage media configured to store blockchain and a computer system including one or more processors programmed to execute computer program instructions, which, when executed, cause the computer system to perform a series of verification operations. Another system for providing personal identity authentication based on blockchain includes one or more hardware processors configured by machine-readable instructions to perform the following operations: establish a verification address on the blockchain and use the verification address to perform personal identity authentication based on blockchain.

Description

[0001] This application is a divisional application of Chinese invention patent application No. 201680081706.2 (PCT international application PCT / US2016 / 024776), filed on March 29, 2016, entitled “System and method for providing multi-factor personal identity authentication based on blockchain”. Technical Field

[0002] The present disclosure relates to systems and methods for providing blockchain-based multi-factor personal identity authentication. Summary of the invention

[0003] One aspect of the present disclosure relates to a system for providing multi-factor personal identity authentication based on blockchain. The system may include one or more hardware processors configured by machine-readable instructions to establish a verification address on the blockchain, and / or use the verification address to perform multi-factor personal identity authentication based on the blockchain. Establishing a verification address on the blockchain may include associating an identifier with an individual with a previously verified personal identity, a first identifier associated with a first individual, and the first individual has a previously verified personal identity; assigning a verification address on the blockchain to an individual, a given verification address includes a public key and a private key, a first verification address is assigned to the first individual, and the first verification address includes a first public key and a first private key; recording an identifier and biometric data associated with the individual at the corresponding verification address, and a first identifier and a first biometric data associated with the first individual are recorded at the first verification address. Performing blockchain-based multi-factor personal identity authentication using a verification address may include: receiving one or more identifiers in association with one or more requests for verifying the identity of one or more individuals, the first identifier being received in association with the request for verifying the identity of a first individual; extracting biometric data associated with the one or more individuals from the corresponding verification address, the first biometric data associated with the first individual being extracted from the first verification address; and verifying the identity of the one or more individuals when matching biometric data and a private key are received, the personal identity of the first individual being verified when (1) biometric data matching the first biometric data and (2) a private key matching the first private key are received.

[0004] Another aspect of the present disclosure relates to a method for establishing a verification address on a blockchain to provide blockchain-based multi-factor personal identity authentication. The method can be performed by one or more hardware processors configured by machine-readable instructions. The method may include associating an identifier with an individual with a previously verified personal identity, a first identifier associated with a first individual, the first individual having a previously verified personal identity; assigning a verification address on the blockchain to the individual, the given verification address includes a public key and a private key, the first verification address is assigned to the first individual, the first verification address includes a first public key and a first private key; recording an identifier and biometric data associated with the individual at the corresponding verification address, the first identifier and the first biometric data associated with the first individual are recorded at the first verification address. When matching biometric data and private keys are received, the identity of one or more individuals can be verifiable, so that when (1) biometric data matching the first biometric data and (2) a private key matching the first private key are received, the personal identity of the first individual is verifiable.

[0005] Another aspect of the present disclosure relates to a method for performing blockchain-based multi-factor personal identity authentication using a verification address. The method can be performed by one or more hardware processors configured by machine-readable instructions. The method may include receiving one or more identifiers in association with one or more requests for verifying the identity of one or more individuals, the first identifier being received in association with a request for verifying the identity of a first individual; extracting biometric data associated with one or more individuals from a corresponding verification address on the blockchain, the given verification address including a public key and a private key, the first biometric data associated with the first individual being extracted from the first verification address assigned to the first individual; and when matching biometric data and private keys are received, verifying the identity of one or more individuals, when (1) biometric data matching the first biometric data and (2) a private key matching the first private key are received, the personal identity of the first individual is verified.

[0006] These and other features and characteristics of the present technology, as well as the methods and functions of operation of the associated elements of the structure, and the economy of combination and manufacture of the parts, will become more apparent upon consideration of the following description and the appended claims with reference to the accompanying drawings, all of which form a part of this specification, wherein like reference numerals represent corresponding parts in the various figures. It should be clearly understood, however, that the drawings are for purposes of illustration and description only and are not intended as a definition of the limitations of the present invention. As used in the specification and claims, the singular forms of "a", "an", and "the" include plural referents unless the context clearly dictates otherwise. BRIEF DESCRIPTION OF THE DRAWINGS

[0007] Figure 1A system for providing blockchain-based multi-factor personal identity authentication according to one or more embodiments is shown;

[0008] Figure 2 A method for establishing a verification address on a blockchain to provide blockchain-based multi-factor personal identity authentication according to one or more embodiments is shown;

[0009] Figure 3 Methods for performing blockchain-based multi-factor personal identity authentication using verification addresses in accordance with one or more implementations are shown. DETAILED DESCRIPTION

[0010] Figure 1 A system 100 for providing blockchain-based multi-factor personal authentication according to one or more implementations is shown. In some implementations, the system 100 may include one or more servers 102. The (one or more) servers 102 may be configured to communicate with one or more computing platforms 104 according to a client / server architecture, a peer-to-peer architecture, and / or other architectures. The users may access the system 100 via the (one or more) computing platforms 104.

[0011] The server(s) 102 may be configured to execute machine-readable instructions 106. The machine-readable instructions 106 may include one or more of an individual identifier component 108, a verification address assignment component 110, an address record component 112, a user interface component 114, a verification request component 116, an information extraction component 118, an identity verification component 120, and / or other machine-readable instruction components.

[0012] The machine-readable instructions 106 may be executable to establish a verification address on a blockchain. A complete copy of the blockchain contains every transaction ever performed with the associated digital currency. In addition to transactions, the blockchain may contain other information, such as further described herein.

[0013] A blockchain may be based on blocks. A block may include a record that contains and confirms one or more pending transactions. Periodically (e.g., approximately every minute), a new block including transactions and / or other information may be appended to the blockchain. In some embodiments, a given block in a blockchain contains a hash of a previous block. This may have the effect of creating a blockchain from the genesis block (i.e., the first block in the blockchain) to the current block. It may be guaranteed that a given block comes in chronological order after the previous block, since otherwise the hash of the previous block would not be known. Once a given block is included in the blockchain, it may be computationally impractical to modify the given block, since each block after it must also be regenerated.

[0014] A given verification address may include a specific location on the blockchain where specific information is stored. In some embodiments, an individual verification address may be referred to as an "AtenVerify address." Verification addresses are further described below in conjunction with verification address assignment component 110.

[0015] The individual identifier component 108 can be configured to associate an identifier with an individual having a previously verified personal identity. For example, a first identifier can be associated with a first individual. The first individual may have a previously verified personal identity. In general, an identifier can include one or more of the following: a number, an alphanumeric code, a username, and / or other information that can be linked to an individual. In some embodiments, an individual identifier can be referred to as an "Aten ID."

[0016] According to some embodiments, an individual with a previously verified individual identity may have obtained the previously verified individual identity by various methods. For example, in some embodiments, an individual may be required to provide evidence of the individual's identity. Such evidence may include one or more of the following: providing a copy of a government-issued identification (e.g., a passport and / or driver's license), providing a copy of mail received by the individual (e.g., a utility bill), evidence provided by a third party, and / or other evidence about the individual's identity. The evidence may be provided to an entity associated with (one or more) servers 102.

[0017] The verification address assignment component 110 can be configured to assign a verification address on the blockchain to an individual. A given verification address can include a public key and a private key. By way of example, a first verification address can be assigned to a first individual. The first verification address can include a first public key and a first private key.

[0018] In general, a public key and a private key pair can be used to encrypt and decrypt according to one or more public key algorithms. As a non-limiting example, a key pair can be used for digital signatures. Such a key pair can include a private key for signing and a public key for verification. The public key can be widely distributed, while the private key is kept secret (e.g., known only to its owner). The keys can be mathematically related, but the private key cannot be calculated from the public key.

[0019] In some embodiments, the verification address assignment component 110 can be configured such that the private key can be stored within the computing platform(s) 104. For example, the first private key can be stored within the computing platform 104 and / or other location associated with the first individual. According to some embodiments, the private key can be stored in one or more of a "verify.dat" file, a SIM card, and / or other locations.

[0020] In some embodiments, the verification address assignment component 110 can be configured so that multiple verification addresses can be assigned to a single individual. For example, in addition to the first verification address, a second verification address can be assigned to the first individual. According to one or more embodiments, one or more additional verification addresses can be assigned to the first individual.

[0021] The address recording component 112 can be configured to record an identifier and biometric data associated with an individual at a corresponding verification address. For example, a first identifier and a first biometric data associated with a first individual can be recorded at a first verification address. Recording information at a given verification address can include recording a hash or other encrypted representation of the information. In some embodiments, different biometric data can be recorded at multiple verification addresses assigned to a single given individual. For example, in addition to the first identifier and the first biometric data associated with the first individual being recorded at the first verification address, the first identifier and the second biometric data associated with the first individual can be recorded at a second verification address.

[0022] In general, biometric data may include measurements related to human characteristics. A biometric identifier is a unique, measurable characteristic that can be used to label and describe an individual. Biometric identifiers typically include physiological characteristics, but may also include behavioral characteristics and / or other characteristics. Physiological characteristics may be related to the individual's body shape. Examples of physiological characteristics used as biometric data may include one or more of the following: fingerprints, palm veins, facial recognition, DNA, palm prints, hand geometry, iris recognition, retina, smell or taste, and / or other physiological characteristics. Behavioral characteristics may be related to an individual's behavioral patterns. Examples of behavioral characteristics used as biometric data may include one or more of the following: typing rhythm, gait, voice, and / or other behavioral characteristics.

[0023] Biometric data may include one or more of the following: an image or other visual representation of a physiological characteristic, a record of a behavioral characteristic, a template of a physiological characteristic and / or a behavioral characteristic, and / or other biometric data. A template may include a synthesis of relevant features extracted from a source. A template may include one or more of the following: a vector describing the characteristics of a physiological characteristic and / or a behavioral characteristic, a digital representation of a physiological characteristic and / or a behavioral characteristic, an image with specific attributes, and / or other information.

[0024] The biometric data may be received via a computing platform 104 associated with the individual. For example, the biometric data associated with the first individual may be received via a first computing platform 104 associated with the first individual. The first computing platform 104 may include an input device (not shown) configured to capture and / or record physiological characteristics and / or behavioral characteristics of the first individual. Examples of such input devices may include one or more of the following: a camera and / or other imaging device, a fingerprint scanner, a microphone, an accelerometer, and / or other input device.

[0025] The user interface component 114 may be configured to provide an interface for presentation to an individual via an associated computing platform 104. The interface may include a graphical user interface presented via the respective computing platform 104. According to some implementations, the interface may be configured to allow a given individual to add or delete verification addresses assigned to the given individual, so long as at least one verification address is assigned to the given individual.

[0026] In some implementations, the user interface component 114 may be configured to access and / or manage one or more user profiles and / or user information associated with users of the system 100. The one or more user profiles and / or user information may include information stored by the server(s) 102, the one or more computing platforms 104, and / or other storage locations. The user profile may include, for example, information identifying the user (e.g., a user name or control code, number, identifier, and / or other identifying information), security login information (e.g., a login code or password), system account information, subscription information, digital currency account information (e.g., regarding currency held in a user's credit), relationship information (e.g., information regarding relationships between users in the system 100), system usage information, demographic information associated with the user, a history of interactions between users in the system 100, information stated by the user, purchase information of the user, browsing history of the user, a computing platform identification associated with the user, a phone number associated with the user, and / or other information related to the user.

[0027] The machine-readable instructions 106 may be executable to perform blockchain-based multi-factor personal identity authentication using a verification address.

[0028] The verification request component 116 can be configured to receive one or more identifiers in association with one or more requests for verifying the identity of one or more individuals. For example, a first identifier can be received in association with a request for verifying the identity of a first individual. The request for identity verification can be provided in conjunction with or in relation to a financial transaction, information exchange, and / or other interaction. Requests can be received from other individuals and / or other third parties.

[0029] The information extraction component 118 can be configured to extract biometric data associated with one or more individuals from the corresponding verification address. For example, first biometric data associated with a first individual can be extracted from a first verification address. Extracting information (e.g., biometric data) from a verification address can include decrypting information.

[0030] According to some embodiments, the information extraction component 118 can be configured such that, in response to receiving a request to verify the identity of the first individual, a prompt for biometric data that matches the first biometric data and a private key that matches the first private key can be provided to the first individual. The prompt can be transmitted via a computing platform 104 associated with the first individual. The prompt can be transmitted via a graphical user interface and / or other user interface provided by the computing platform 104 associated with the first individual. The prompt can include an indication of one or more of a visual, an audible, a tactile, and / or other indication.

[0031] In some implementations, the information extraction component 118 can be configured such that, in response to receiving a request to verify the identity of the first individual, a prompt can be provided to a computing platform 104 associated with the first individual. The prompt can cause the computing platform 104 to automatically provide the server(s) 102 with biometric data that matches the first biometric data and / or a private key that matches the first private key.

[0032] The identity verification component 120 can be configured to verify the identity of one or more individuals upon or in response to receiving matching biometric data and a private key. For example, the personal identity of a first individual can be verified upon receiving (1) biometric data that matches the first biometric data and (2) a private key that matches the first private key. Verifying the personal identity of the first individual can include comparing stored information to newly received information.

[0033] According to some embodiments, the identity verification component 120 can be configured such that upon receiving (1) biometric data that matches the first biometric data or the second biometric data and (2) a private key that matches the first private key, the personal identity of the first individual can be verified. Such embodiments can provide a so-called "M-of-N" signature for identity verification, where some subset of a larger set of identification information is required.

[0034] In some implementations, the identity verification component 120 can be configured such that biometric data that matches the first biometric data and a private key that matches the first private key can be used to sign a verification of the personal identity of the first individual.

[0035] A cryptographic signature is a mathematical mechanism that allows someone to prove ownership.

[0036] In some embodiments, at least one dedicated node performs a signature for verification of the personal identity of the first individual. A given dedicated node may include one or more servers 102. A given dedicated node may be a public node or a private node configured for creating new blocks and / or for signature verification.

[0037] In some embodiments, the server(s) 102, the computing platform(s) 104, and / or the external resource(s) 122 may be operably linked via one or more electronic communication links. For example, such electronic communication links may be established at least in part through a network such as the Internet and / or other networks. It should be understood that this is not limiting, and the scope of the present disclosure includes embodiments in which the server(s) 102, the computing platform(s) 104, and / or the external resource(s) 122 may be operably linked through some other communication medium.

[0038] A given computing platform 104 may include one or more processors configured to execute machine-readable instructions. The machine-readable instructions may be configured to enable an expert or user associated with a given computing platform 104 to interface with the system 100 and / or external resources 122, and / or to provide other functionality described herein with respect to the computing platform(s) 104. By way of non-limiting example, a given computing platform 104 may include one or more of the following: a desktop computer, a laptop computer, a handheld computer, a tablet computing platform, a netbook, a smart phone, a game console, and / or other computing platforms.

[0039] External resources 122 may include information sources, hosts and / or providers of virtual environments external to system 100, external entities participating in system 100, and / or other resources. In some implementations, some or all of the functionality described herein with respect to external resources 100 may be provided by resources included in system 100.

[0040] Server(s) 102 may include electronic storage 124, one or more processors 126, and / or other components. Server(s) 102 may include communication links or ports to enable information exchange with a network and / or other computing platforms. Figure 1 The illustration of the server(s) 102 in FIG. 1 is not intended to be limiting. The server(s) 102 may include multiple hardware, software, and / or firmware components that operate together to provide the functionality associated herein to the server(s) 102. For example, the server(s) 102 may be implemented by a cloud as a computing platform on which the server(s) 102 operate together.

[0041] Electronic storage 124 may include non-transitory storage media that electronically stores information. The electronic storage media of electronic storage 124 may include one or both of a system storage device that is provided integrally (i.e., substantially non-removably) with server(s) 102 and / or a removable storage device that is removably connected to server(s) 102 via, for example, a port (e.g., a USB port, a FireWire port, etc.) or a drive (e.g., a disk drive, etc.). Electronic storage 124 may include one or more of the following: optically readable storage media (e.g., optical disks, etc.), magnetically readable storage media (e.g., magnetic tape, magnetic hard drive, floppy disk drive, etc.), charge-based storage media (e.g., EEPROM, RAM, etc.), solid-state storage media (e.g., flash drives, etc.), and / or other electronically readable storage media. Electronic storage 124 may include one or more virtual storage resources (e.g., cloud storage, virtual private networks, and / or other virtual storage resources). Electronic storage 124 may store software algorithms, information determined by processor(s) 126, information received by server(s) 102, information received from computing platform(s) 104, and / or other information that enables server(s) 102 to function as described herein.

[0042] Processor(s) 126 may be configured to provide information processing capabilities in server(s) 102. As such, processor(s) 126 may include one or more of: a digital processor, an analog processor, a digital circuit designed to process information, an analog circuit designed to process information, a state machine, and / or other mechanisms for electronically processing information. Figure 1The processor(s) 126 are shown as a single entity for illustration purposes only. In some embodiments, the processor(s) 126 may include multiple processing units. These processing units may be physically located within the same device, or the processor(s) 126 may represent processing functions of multiple devices operating in coordination. The processor(s) 126 may be configured to execute machine-readable instruction components 108, 110, 112, 114, 116, 118, 120, and / or other machine-readable instruction components. The processor(s) 126 may be configured to execute machine-readable instruction components 108, 110, 112, 114, 116, 118, 120, and / or other machine-readable instruction components through software; hardware; firmware; some combination of software, hardware, and / or firmware; and / or other mechanisms for configuring processing capabilities on the processor(s) 126. As used herein, the term "machine-readable instruction component" may refer to any component or set of components that perform functions related to a machine-readable instruction component. This may include one or more physical processors during execution of processor-readable instructions, processor-readable instructions, circuitry, hardware, storage media, or any other component.

[0043] It should be understood that although Figure 1 While machine-readable instruction components 108, 110, 112, 114, 116, 118, and 120 are shown as being implemented in a single processing unit, in embodiments where processor(s) 126 include multiple processing units, one or more of machine-readable instruction components 108, 110, 112, 114, 116, 118, and / or 120 may be implemented remotely from other machine-readable instruction components. The description of functionality provided by the different machine-readable instruction components 108, 110, 112, 114, 116, 118, and / or 120 described below is for illustrative purposes and not limiting, as any of the machine-readable instruction components 108, 110, 112, 114, 116, 118, and / or 120 may provide more or less functionality than described. For example, one or more of the machine-readable instruction components 108, 110, 112, 114, 116, 118, and / or 120 may be deleted, and some or all of their functionality may be provided by other components of the machine-readable instruction components 108, 110, 112, 114, 116, 118, and / or 120. As another example, the processor(s) 126 may be configured to execute one or more additional machine-readable instruction components that may perform some or all of the functionality described below with respect to one of the machine-readable instruction components 108, 110, 112, 114, 116, 118, and / or 120.

[0044] Figure 2A method 200 for establishing a verification address on a blockchain to provide blockchain-based multi-factor personal identity authentication is shown according to one or more embodiments. The operations of the method 200 presented below are intended to be illustrative. In some embodiments, the method 200 may be completed with one or more additional operations not described, and / or without one or more operations discussed. In addition, Figure 2 The order in which the operations of method 200 are illustrated and described below is not intended to be limiting.

[0045] In some embodiments, one or more operations of method 200 may be implemented in one or more processing devices (e.g., digital processors, analog processors, digital circuits designed to process information, analog circuits designed to process information, state machines, and / or other mechanisms for electronically processing information). The one or more processing devices may include one or more devices that perform some or all of the operations of method 200 in response to instructions stored electronically on an electronic storage medium. The one or more processing devices may include one or more devices configured by hardware, firmware, and / or software that are specifically designed to perform one or more operations of method 200.

[0046] At operation 202, an identifier may be associated with an individual having a previously verified personal identity. A first identifier may be associated with a first individual. The first individual may have a previously verified personal identity. According to one or more embodiments, operation 202 may be performed by one or more hardware processors configured to perform (e.g., in conjunction with Figure 1 The individual identifier component 108 described herein may be the same or similar machine readable instruction component.

[0047] At operation 204, a verification address on the blockchain may be assigned to an individual. A given verification address may include a public key and a private key. A first verification address may be assigned to a first individual. The first verification address may include a first public key and a first private key. According to one or more embodiments, operation 204 may be performed by one or more hardware processors configured to perform operations related to (e.g., in conjunction with Figure 1 The device may further include a machine readable instruction component that is the same or similar to the machine readable instruction component 110 described herein.

[0048] At operation 206, an identifier and biometric data associated with the individual may be recorded at a corresponding verification address. A first identifier and a first biometric data associated with a first individual may be recorded at a first verification address. Upon receiving matching biometric data and a private key, or in response to receiving matching biometric data and a private key, the identity of one or more individuals may be verifiable. Upon receiving (1) biometric data that matches the first biometric data and (2) a private key that matches the first private key, or in response to receiving (1) and (2), the personal identity of the first individual may be verifiable. According to one or more embodiments, operation 206 may be performed by one or more hardware processors configured to perform operations related to (e.g., in combination with) Figure 1 The address recording component 112 described above may be a machine readable instruction component that is the same as or similar to the address recording component 112.

[0049] Figure 3 A method 300 for performing blockchain-based multi-factor personal identity authentication using a verification address is shown according to one or more embodiments. The operations of the method 300 presented below are intended to be illustrative. In some embodiments, the method 300 can be completed with one or more additional operations not described and / or without one or more operations discussed. In addition, Figure 3 The order in which the operations of method 300 are illustrated and described below is not intended to be limiting.

[0050] In some embodiments, method 300 may be implemented in one or more processing devices (e.g., a digital processor, an analog processor, a digital circuit designed to process information, an analog circuit designed to process information, a state machine, and / or other mechanisms for electronically processing information). The one or more processing devices may include one or more devices that perform some or all of the operations of method 300 in response to instructions stored electronically on an electronic storage medium. The one or more processing devices may include one or more devices configured by hardware, firmware, and / or software that are specifically designed to perform one or more operations of method 300.

[0051] At operation 302, one or more identifiers may be received in association with one or more requests for verifying the identity of one or more individuals. A first identifier may be received in association with a request for verifying the identity of a first individual. According to one or more embodiments, operation 302 may be performed by one or more hardware processors configured to perform operations (e.g., in conjunction with Figure 1 The verification request component 116 described above may be the same or similar machine readable instruction component.

[0052] At operation 304, biometric data associated with one or more individuals may be extracted from corresponding verification addresses on the blockchain. A given verification address may include a public key and a private key. First biometric data associated with a first individual may be extracted from a first verification address assigned to the first individual. The first verification address may include a first public key and a first private key. According to one or more embodiments, operation 304 may be performed by one or more hardware processors configured to perform operations associated with (e.g., in conjunction with Figure 1 The information extraction component 118 described herein may be a machine readable instruction component that is the same or similar to the information extraction component 118.

[0053] At operation 306, the identity of the one or more individuals may be verified upon or in response to receiving the matching biometric data and private key. The personal identity of the first individual may be verified upon or in response to receiving (1) biometric data that matches the first biometric data and (2) a private key that matches the first private key. According to one or more embodiments, operation 306 may be performed by a processor configured to perform (e.g., in conjunction with) Figure 1 The identity verification component 120 described herein may be executed by one or more hardware processors of a machine-readable instruction component that is the same or similar to the one described herein.

[0054] Exemplary embodiments can assist in storing personal data on a blockchain. Personal data can be stored on a blockchain in an encrypted manner. One or more of a private key, fingerprint, fingerprint hash, eye retina, eye retina hash, and / or other unique information can be used at the blockchain level to identify an individual. The stored data may include or be about one or more of the following: a passport, an ID card, extracted passport information, a driver's license, extracted driver's license information, a fingerprint, an eye retina, and / or other information. According to some embodiments, if some data is changed, a new record can be created for the person in the blockchain. That is, all changes will be added as new records. Old records will always be stored on the blockchain. In general, all records on the blockchain are permanently stored and cannot be deleted. More than one copy of the blockchain will exist to ensure that the records are not manipulated.

[0055] Exemplary embodiments may facilitate access to personal data. There may be multiple levels of access to personal data in the blockchain. Access control may be authorized at the public / private key pair level. Examples of access levels may include one or more of the following: Super Admin (full access to the blockchain), Authority-National Level (full read-only access), Authority-State / Local Level (limited read-only access), Police and other services including emergency (access to certain individual data only through the person's fingerprint / retina of the eye), Participating Merchants (limited access), and / or other access levels.

[0056] Exemplary embodiments may assist with verification checks. There may be multiple levels of how verification is checked. For example, some embodiments may ensure that an individual has a record at a "company" but personal data is not provided. Some embodiments may ensure that an individual has a record at a company and obtain very basic individual information such as full name, DOB, gender, and / or other basic information. Some embodiments may ensure that an individual has a record at a company and obtain all personal data.

[0057] Although the present technology has been described in detail for purposes of illustration based on what are presently considered to be the most practical and preferred embodiments, it should be understood that such details are provided for that purpose only and that the technology is not limited to the disclosed embodiments, but rather is intended to cover modifications and equivalent arrangements within the spirit and scope of the appended claims. For example, it should be understood that the present technology contemplates that, to the extent possible, one or more features of any embodiment may be combined with one or more features of any other embodiment.

Claims

1. A system for providing blockchain-based personal identity verification, the system comprising: One or more computer-readable storage media configured to store a blockchain; A computer system comprising one or more processors programmed to execute computer program instructions which, when executed, cause the computer system to: assigning a first verification address associated with the blockchain to an individual having a previously verified personal identity, wherein the first verification address is a first specific location on the blockchain where information is stored, and wherein the first verification address includes a first public key and a first private key; storing, at the one or more computer-readable storage media, a first identifier of the individual and first biometric data of the individual in association with the first verification address associated with the blockchain; obtaining, from a client-side device, a received first identifier and received first biometric data in association with a request for verifying the identity of the individual, the request indicating the first verification address associated with the blockchain; obtaining, using the first verification address indicated in the request, a stored first identifier and a stored first biometric data, wherein at least the stored first biometric data is obtained from the first specific location on the blockchain; and signing a verification of the individual's identity in response to determining that the received first biometric data matches the stored first biometric data; assigning a second verification address associated with the blockchain to the individual, wherein the second verification address is a second specific location on the blockchain where information is stored, and wherein the second verification address includes a second public key and a second private key; storing, at the one or more computer-readable storage media, second biometric data of the individual in association with the second verification address associated with the blockchain; obtaining, from the client-side device, received second biometric data in association with the request for verifying the identity of the individual, the request further indicating the second verification address associated with the blockchain; obtaining, using the second verification address indicated in the request, stored second biometric data, wherein at least the stored second biometric data is obtained from the second specific location on the blockchain; and signing a verification of the identity of the individual in response to determining that the received first biometric data matches the stored first biometric data and the received second biometric data matches the stored second biometric data; The second biometric data is different from the first biometric data, and the second specific location on the blockchain is different from the first specific location on the blockchain.

2. The system according to claim 1, wherein: The computer system is configured to perform the following operations: obtaining, via a user interface, a user-initiated command to add the second verification address as an address of the blockchain for the individual; and The second verification address associated with the blockchain is assigned to the individual based on the command initiated by the user.

3. The system according to claim 1, wherein: The computer system is configured to perform the following operations: obtaining, via a user interface, a user-initiated command to remove the second verification address as an address of the blockchain for the individual; and Based on the command initiated by the user, the second verification address associated with the blockchain is disassociated from the individual.

4. The system according to claim 1, wherein: The computer system is configured to perform the following operations: In the step of obtaining the stored first identifier and the stored first biometric data using the first verification address indicated in the request, obtaining the first identifier from the blockchain at the first verification address; In the step of obtaining the stored second biometric data using the second verification address indicated in the request, the first identifier is obtained from the blockchain at the second verification address.

5. The system according to claim 1, wherein: The signing step utilizes the first private key and the second private key.

6. The system according to claim 1, wherein: The first biometric data and the second biometric data are related to fingerprint, palm vein, facial recognition, DNA, palm print, hand geometry, iris recognition, retina, scent, gait, or voice, wherein the first biometric data and the first identifier are different from each other.

7. The system according to claim 1, wherein: The computer system is configured to perform the following operations: Prior to the storing step, one or more processors are used to initially verify the identity of the individual using a government issued identification of the individual.

8. A system for providing blockchain-based personal identity verification, the system comprising: One or more computer-readable storage media configured to store a blockchain; as well as A computer system comprising one or more processors programmed to execute computer program instructions which, when executed, cause the computer system to: assigning a plurality of verified addresses of the blockchain to an individual having a previously verified personal identity, the plurality of verified addresses comprising a first verified address associated with the blockchain and a second verified address associated with the blockchain, wherein the first verified address provides a first specific location on the blockchain and the second verified address provides a second specific location on the blockchain; The one or more computer-readable storage media may perform the following operations: (i) storing a first identifier of the individual and first biometric data of the individual in association with the first verification address associated with the blockchain, and (ii) storing the first identifier of the individual and second biometric data of the individual in association with the second verification address associated with the blockchain, The first verification address is different from the second verification address, the first verification address includes a first public key and a first private key, and the second verification address includes a second public key and a second private key; obtaining, from a client-side device, the received first identifier, the received first biometric data, and the received second biometric data in association with a request for verifying the identity of the individual, the request indicating the first verification address associated with the blockchain and the second verification address associated with the blockchain; Do the following: (i) obtaining from the blockchain a stored first identifier and a stored first biometric data using the first verification address indicated in the request, and (ii) obtaining from the blockchain the stored first identifier and the stored second biometric data using the second verification address indicated in the request; and In response to determining that the received first biometric data matches the stored first biometric data and the received second biometric data matches the stored second biometric data, signing a verification of the individual's identity using the first private key and using the second private key.

9. The system according to claim 8, wherein: The computer system is configured to perform the following operations: In the step of obtaining the stored first identifier and the stored first biometric data, the stored first identifier and the stored first biometric data are obtained using the first verification address indicated in the request, and In the step of obtaining the stored first identifier and the stored second biometric data, the stored first identifier and the stored second biometric data are obtained using the second verification address indicated in the request.

10. The system according to claim 8, wherein: The computer system is configured to perform the following operations: In the storage step, storing the first biometric data as a hash of the first biometric data, and The second biometric data is stored as a hash of the second biometric data.

11. The system according to claim 9, wherein: The stored first biometric data is a hash of the first biometric data, and the stored second biometric data is a hash of the second biometric data.

12. The system according to claim 8, wherein: The first identifier and the first biometric data and the second biometric data are each different from each other.

13. The system according to claim 8, wherein: The computer system includes a server-side computer.

14. A system for providing blockchain-based personal identity verification, the system comprising one or more hardware processors configured by machine-readable instructions to: A verification address is established on the blockchain in the following way: associating an identifier with an individual having a previously verified personal identity, the first identifier being associated with a first individual, the first individual having a previously verified personal identity; Assigning a verification address on the blockchain to the individual, the given verification address including a public key and a private key, a first verification address is assigned to the first individual, the first verification address including a first public key and a first private key, wherein the first verification address is a first specific location for storing information on the blockchain; as well as recording an identifier and biometric data associated with the individual at a corresponding verification address, the first identifier and first biometric data associated with the first individual being recorded at the first verification address; and Perform blockchain-based personal identity verification using the verification address by doing the following: receiving one or more identifiers in association with one or more requests for verifying the identity of one or more individuals, the first identifier being received in association with the request for verifying the identity of the first individual; extracting the biometric data associated with the one or more individuals from corresponding verification addresses, the first biometric data associated with the first individual being extracted from the first verification address from the first specific location on the blockchain; obtaining an identifier and biometric data from a client-side device in association with a request for verifying the identity of the one or more individuals, the request indicating one or more of the verification addresses associated with the blockchain; as well as verifying the identity of the one or more individuals upon receiving matching biometric data and a private key, the personal identity of the first individual being verified upon receiving a received private key that matches the first private key and received biometric data that matches the first biometric data, The system is configured to perform the following operations: Using the first verification address indicated in the request to obtain a stored first identifier and a stored first biometric data, wherein the first biometric data is related to: fingerprint, palm vein, facial recognition, DNA, palm print, hand geometry, iris recognition, retina, smell, gait, or voice, wherein the first biometric data and the first identifier are different from each other.

Images