authentication by non-fungible token

Abstract

The invention includes a method for digitally authenticating a user (3) with a service provider (9), implemented by a computer module (1) and comprising the following steps: - access by the service provider (9) to a digital wallet (8) of the user's (3) tokens, the digital wallet (8) corresponding to an address registered on a blockchain; - access by the service provider (9), within the digital wallet (8), to a non-fungible authentication token (5, 6) of the user (3), the non-fungible authentication token (5, 6) certifying a match between the user (3) and at least one piece of user identification data (13); - rewarding the user (3), comprising the transmission, to a digital wallet (8) of the user corresponding to an address registered on a blockchain, of reward tokens (7, 11). Figure for the abstract: Figure 1

Description

Title of the invention: authentication by non-fungible token Technical field of the invention

[0001] The invention relates to uses linked to technologies involving blockchains (technologies grouped under the name ("blockchain")), in particular the digital authentication of users of services associated with the blockchain. Technical background

[0002] Uses related to blockchain, and in particular the adoption of cryptocurrencies, have developed in a poorly regulated environment. In particular, the acquisition by a user of cryptocurrency tokens, the exchange of these tokens on specialized marketplaces or cryptocurrency exchange platforms, or the connection of a user to a decentralized service backed by a blockchain, are actions that were initially carried out in a manner with little or no control over the identity of the user. However, on the one hand, access by the greatest number of people to the services made possible by the blockchain requires securing uses, in particular against identity theft or token theft.On the other hand, public authorities have undertaken the implementation of regulations aimed at forcing providers of blockchain-based services to reliably authenticate their users, in order to identify the economic beneficiaries of this environment and to combat fraud or the use of blockchain for dishonest purposes.

[0003] Thus, it has now become necessary for a good number of blockchain users to provide personal data to the various providers of services backed by the blockchain, service providers who are facing more and more legal constraints inviting them to put in place reliable user authentication processes.

[0004] This development, however, poses drawbacks.

[0005] In particular, the authentication procedures implemented are uncomfortable for users. They must provide personal data such as images of their identity documents, film or photograph themselves accompanied by these documents or declarations on their honour, produce certain required gestures, respond to questionnaires, then wait a minimum verification time before accessing the requested service. These procedures must be repeated for each service provider.

[0006] In addition, users are increasingly aware of the use of their personal data online, particularly for sometimes unwanted commercial purposes. There is a growing movement for maximum control over access to one's data. personal, contrary to the constraints increasingly imposed on blockchain service providers. The authentication processes implemented are all the more inconvenient for users since one of the interests of the blockchain has traditionally resided precisely in access to services in an easy, often anonymous manner.

[0007] Finally, the authentication processes implemented are complex and costly for service providers.

[0008] The state of the art of projects for implementing non-fungible authentication tokens to certify, with an online service provider backed by the blockchain, a user's identity is already known. However, no ecosystem supports these projects in order to develop the use of these tokens with the various blockchain service providers. Summary of the invention

[0009] The invention aims in particular to meet the authentication requirements of the blockchain while overcoming the constraints induced by authentication for a user.

[0010] To this end, the invention relates to a method for digitally authenticating a user with a service provider, implemented by a computer module and characterized in that it comprises the following steps: - access by the service provider to a digital wallet of the user's tokens, the digital wallet corresponding to an address recorded on a blockchain; - access by the service provider, within the digital wallet, to a non-fungible user authentication token, the non-fungible authentication token certifying a correspondence between the user and at least one user identification data item; - user reward, including the transmission, to a user's digital wallet corresponding to an address recorded on a blockchain, of reward tokens.

[0011] Thus, here, access to the authentication token by the service provider makes it possible to avoid making the user repeatedly go through a long, complex and uncomfortable authentication process. By "non-fungible token" (known in English as "non-fungible token", or "NFT"), those skilled in the art will understand that it refers in particular to any digital object that can be the subject of transactions on a blockchain and is associated with data that is not traditionally interchangeable. Here, for the "non-fungible authentication token", this data is the certification of the correspondence between an identification data of the user, for example a name provided by the user, and the user claiming the token. Since the token certifies that the user is who he claims to be, the authentication rules are fulfilled without additional constraints and without verification time, the computer module easily verifying the contents of the token and automatically validating the authentication. The legally required authentication is therefore respected while being greatly simplified for both the user and the service provider.

[0012] In addition, the reward step encourages the user to make their authentication token available. It allows the user to better control their personal data and to obtain an exchangeable counterpart for access to their identification token, under the conditions they deem relevant. Therefore, not only are the constraints of digital authentication reduced, but they are even compensated by a reward for the user. This makes it possible to create an ecosystem that promotes the use of the identification token and therefore facilitates the continued growth of the blockchain while respecting the new regulatory authentication constraints.

[0013] By "reward token", those skilled in the art will understand that it means any digital object that can be the subject of transactions on a blockchain, traditionally interchangeable, generally associated with rights to a blockchain service and / or an economic value. This includes cryptocurrency tokens.

[0014] The reward may be carried out automatically by a computer module, in return in particular for the provision of the non-fungible authentication token by the user. But it may also be a reward in tokens resulting from a sale of access to his authentication token, carried out by the user, for example to a third-party platform profiting from the personal data for commercial purposes. In all cases, the user receives a reward from the controlled provision of some of his personal data.

[0015] The reward tokens are transmitted to a digital wallet that may be the same as the wallet including the user's non-fungible authentication token. Alternatively, it may be a different digital wallet.

[0016] By "blockchain", those skilled in the art will understand that we are referring to a specific block chain, for example the block chain called "Ethereum", unlike the term "blockchain" which will refer generally to technologies involving one or more block chains.

[0017] The invention may also include one or more of the following optional features, taken alone or in combination.

[0018] Advantageously, at least some of the reward tokens are transmitted by the service provider.

[0019] Thus, the service provider rewards the user in return for access to his authentication token. This is particularly the case if the authentication is valid, that is to say if the identification data, the correspondence of which with the user is certified by the token, meets a criterion required by the service and allows use of the service.

[0020] Furthermore, the reward by sending reward tokens, and not by fiat currency, makes it possible to reward the user directly and simply, while remaining within the framework of the blockchain. This reward thus takes advantage of the known advantages of cryptocurrencies, in particular transactions that do without an intermediary such as a bank. The reward tokens may correspond to tokens from different services backed by the blockchain, used by or for the service provider, or to governance tokens of the service provider that it distributes to its users. By "governance token", those skilled in the art will understand that it designates any digital object that can be the subject of a transaction on a blockchain, designed and issued by a particular service provider, and traditionally allowing access to a governance right associated with this provider.A governance token is thus associated with a right to the service, and often with an economic value. It is therefore a reward token, but which is distinguished from others by the fact that it comes from a specific platform.

[0021] Preferably, at least some of the reward tokens are transmitted by a provider of the authentication method, for example in the form of governance tokens from the provider of the method.

[0022] By "provider of the authentication method", those skilled in the art will understand that this designates any entity organizing the authentication method of the invention, that is to say any entity legitimate to make the authentication method available to the user and the service provider.

[0023] Thus, it is here the provider of this authentication method, or organizer of this protocol, who distributes tokens to the user in order to encourage the use of this authentication method.

[0024] Advantageously, the method comprises a step of locking the non-fungible token with the service provider or the method provider, the reward tokens being transmitted to the user in return for the locking.

[0025] Thus, the user has the possibility of "locking" (in English "staking") his non-fungible authentication token with a service provider or a provider of the authentication method or protocol. Those skilled in the art will understand that "locking" or "staking" in English means the act of the user placing his tokens with a third party, for example here a provider of service or process, in particular on a specific address on the blockchain, in exchange for a reward. This alternative involves keeping the token in the wallet, but locking, with the third-party entity, an identifier (called an "asset ID") reliably associated with the token. The advantage for the provider of the process or service is that the user cannot delete their token while it is "staked", "locked". Here again, the aim is to encourage the use of these tokens by adopting a well-known process for reward tokens in the blockchain and aiming to discourage the destruction or stopping of the token's provision by the user.

[0026] Preferably, the step of locking the non-fungible token is carried out with several third-party entities.

[0027] Thus, the non-fungible authentication token is copied in several copies, through a process known as “mirroring”, on the blockchain where it was issued, so as to allow the simultaneous locking of at least some of these copies with entities different from each other, and not only with a single entity, the provider of the process or the service provider. Here again, it is not necessarily the copies themselves which are locked, but the identifiers (“asset ID”) of these copies.

[0028] Preferably, the quantity of reward tokens depends on a number of authentications performed via the user's token, an update level of the token, and / or a duration of holding the token in the user's digital wallet.

[0029] Thus, in particular, the provider of the authentication method can distribute its governance tokens to the user according to these criteria, to encourage constant use and updating of the user's authentication token over time.

[0030] Advantageously, beforehand, types of identification data are associated with respective quantities of reward tokens, for example, a piece of data identifying a name of the user is associated with a first quantity, a piece of data identifying an age of the user with a second quantity, a piece of data identifying a level of personal income of the user with a third quantity, a piece of data identifying a home address of the user with a fourth quantity, so that, during the step of rewarding the user, the quantity of reward tokens transmitted to the user's wallet depends on the type of identification data whose correspondence with the user is certified by the authentication token.

[0031] Thus, it is known that some personal data are of more interest to the service provider than others. A non-fungible authentication token may correspond to a single type of data, or to several types of data of greater interest. different. The user's reward then depends on the types of data to which they provide access. For example, a user who provides access to their email address, age, and income level will receive more reward tokens, or tokens of greater value or importance, than a user who provides access only to their age. This system encourages users to make the most valued types of data accessible.

[0032] This reward is carried out automatically by a computer module, upon access by the service provider, upon validation of authentication or at other times depending on the data made available. It can come both from the service provider, in return for access to the user's non-fungible authentication token, and from the provider of the method to encourage the user to participate in this ecosystem.

[0033] Preferably, the rewarding step further comprises transmitting fiat money to the user.

[0034] Thus, in addition to sending reward tokens on the blockchain, the user can be rewarded with fiat money, that is, with conventional currency circulating through the conventional banking system.

[0035] Advantageously, the method comprises a step of rewarding a provider of the authentication method by the service provider, comprising the transmission, by the service provider to the provider of the authentication method, of a quantity of reward tokens which depends on a quantity of reward tokens transmitted to the user by the service provider, and / or the transmission, by the service provider to the provider of the authentication method, of a predetermined fiat currency value.

[0036] Thus, the provider of the method is rewarded, in return for making the authentication method available, by the service provider, based on the authentication tokens that have benefited the service provider. The provider of the method recovers, for example, a share of the reward tokens sent to the user by the service provider.

[0037] Preferably, the method comprises, prior to the steps of the method described above, the following steps: - the user transmits to a non-fungible authentication token provider a personal document presenting the user's identification data, such as an identity document, proof of address, a bank account statement; - the authentication token provider authenticates the correspondence between the user and the identification data and produces the non-fungible authentication token certifying the correspondence; - the token is transmitted on the blockchain to the user's digital wallet.

[0038] By "non-fungible authentication token provider", those skilled in the art will understand that this refers to any entity whose role is to provide such a token in return for authentication. These are in particular entities certified by authorities, which subject the user to a reliable authentication process, aimed at certifying that one or more personal identification data provided by the user belong to him. The token provider, after ensuring that the wallet belongs to the authenticated user, creates the authentication token and transmits it to the wallet. This token certifies the correspondence between the identification data(s) authenticated by the token provider, and the user.Therefore, the user no longer needs to go through this process for the blockchain service providers, he can use the token, a token to which trust is granted through the certification of the token provider by the authorities.

[0039] Furthermore, the authentication token provider and the service provider may be the same entity. Thus, the user can use his token for other subsequent services with this same entity.

[0040] Advantageously, in addition, the method comprises a step of associating the non-fungible token with an address of the user corresponding to a domain name of the blockchain.

[0041] By "domain name of the blockchain", a person skilled in the art will understand that it designates any domain name administered in accordance with a protocol for organizing domain names in the blockchain, in a manner similar to the "DNS" system for web addresses. For example, the Ethereum blockchain is associated with a domain name protocol called "ENS" for "Ethereum Name Services", which organizes the use of intelligible domain names instead of complex addresses in the blockchain. Thus, a user having a domain name corresponding to his person on the blockchain can directly associate the non-fungible token with it. This makes it possible in particular to strengthen the identification of the user.

[0042] Preferably, the authentication token comprising an expiry date such that authentication of the user by the service provider is refused once the date has passed, the user subsequently repeats the step of transmitting a personal document to update the expiry date of the token.

[0043] Thus, in accordance with regulatory obligations, it is provided that the validity of the token expires according to an expiry date. This is configured within the process according to the rules in force. Therefore, the module automatically invalidates authentication in the event of the token expiring.

[0044] Advantageously, the authentication method described is implemented within the framework of user authentication in a virtual world, in particular a metaverse.

[0045] Thus, the user, interacting for example by means of a three-dimensional avatar in the metaverse, uses the non-fungible authentication token to demonstrate that the person he claims to be, the person he is in the real world, really is.

[0046] The invention also provides a computer program comprising instructions which, when the program is executed by a computer, cause the latter to implement the steps of the authentication method described above.

[0047] Also provided according to the invention is a computer-readable recording medium comprising instructions which, when executed by a computer, cause the latter to implement the steps of the method described above.

[0048] The invention also provides a digital authentication platform for a user for a service provider, comprising a computer module capable of: - accessing, within a digital wallet of the user corresponding to an address of a blockchain, a non-fungible authentication token of the user, the non-fungible authentication token certifying a correspondence between the user and at least one piece of identification data of the user; - authenticate the user based on the content of the token; - reward the user by transmitting reward tokens to a digital wallet of the user corresponding to an address recorded on a blockchain.

[0049] The invention also provides a platform for governing a method for digitally authenticating a user, comprising a computer module capable of: - receiving a reward from a service provider, in the form of reward tokens on a blockchain and / or fiat currency; - distribute governance tokens, from a provider of an authentication process as described above, to the user's digital wallet.

[0050] The invention also provides a digital wallet of tokens for a blockchain, corresponding to an address of a blockchain, including: - at least one non-fungible token for authentication of a user, certifying a correspondence between the user and at least one piece of identification data of the user; - governance tokens from a provider of an authentication method as described previously. Brief description of the figures

[0051] The invention will be better understood on reading the following description, given solely by way of example and with reference to the appended drawings in which:

[0052] [Fig-1] [Fig.l] is an overall diagram of a system through which is implemented a method of the invention;

[0053] [Fig.2] [Fig.2] is a flowchart of an embodiment of the invention. Detailed description

[0054] The technical means 1 implemented in the method described may be designated by the generic term "computer module". They include conventional computer means, or conventional computer calculation means, such as processors, RAM and hard memories. The method being implemented in a distributed manner, that is to say at the level of several devices, both hardware and software, these means are distributed at the level of these distinct physical and logical locations, and will all be designated for convenience by the numerical reference 1. They may therefore also be designated indifferently by "computer module 1". These means execute the instructions of computer programs, that is to say executable codes, also distributed, recorded on computer-readable media, that is to say by the computer module 1.For convenience, the set of computer programs executed to implement the method will be designated by the numerical reference 2. Those skilled in the art will understand that, here again, all of these programs may be designated as “computer program 2”. This computer program 2 allows the implementation by the module 1 of all the computer-related steps of the method, such as the transmission of tokens, access to a wallet, authentications, connections, and any other step implemented through the computer module 1. This computer module 1 and this program 2 allow the automation of these steps based on predetermined events, without human intervention. This is the case, for example, for the transmission of reward tokens, on a blockchain, which will be described below.

[0055] The blockchain implemented in the method described is Ethereum, the non-fungible authentication tokens which will be the subject of the rest of the document are therefore Ethereum tokens or "tokens". The standard applied for these tokens is that of the "ERC-721 token" or "ERC-1155", the latter standard making it possible to recall a transaction in the event of an error. Any other applicable Ethereum standard may alternatively be concerned. Similarly, the method can be implemented using any other blockchain with the necessary capabilities. Finally, as mentioned below, the non-fungible authentication token aims to be interoperable across several different blockchains.

[0056] With reference to [Fig.l], the system according to one embodiment of the invention comprises a user 3 provided with a digital wallet 8 corresponding to an address of the Ethereum blockchain, a cryptocurrency purchasing platform 9, a provider 4 of non-fungible authentication token, and a provider 12 of the authentication method 100. Apart from the user 3, a natural person, each of these entities includes part of the computer module 1 and the program 2. This system aims to simplify the digital authentication of the user 3 with the platform 9, through non-fungible authentication tokens 5 and 6 obtained from the supplier 4, and aims to encourage the development of the use of these non-fungible tokens, by the transmission of reward tokens 7 and 11, the entire system being organized by the supplier 12 of the authentication process.

[0057] All of these entities communicate, via the computer module 1, by conventional means, in particular via the Internet.

[0058] We will describe below a mode of implementation of a method 100 for digital authentication of the user 3 with the cryptocurrency purchasing platform 9. We will return to each of the entities of [Fig.l] during the description of the steps of the method 100.

[0059] The purchasing platform 9 is one of the blockchain service providers, i.e. entities backed by one or more services relating to blockchains in general. The platform 3 needs to ensure the name and age of the user 3. This is the purpose of this method 100.

[0060] We will first focus on obtaining non-fungible authentication tokens, certifying the correspondence between the user and one or more user identification data.

[0061] First of all, prior to identification with the supplier, the user 3 addresses, in step 10 of the method 100, the provider 4 of non-fungible authentication token to provide him with at least one identification data 13 such as a copy of his passport. This provider 4 is an entity, advantageously certified or recognized by public authorities, capable of providing a non-fungible token certifying the correspondence between the identification data 13 provided by the user and the user. It may be a recognized company or service such as Onfido, iProo, Jumio, or any other entity having the capacity to authenticate a user and to produce a non-fungible authentication token certifying the correspondence between the data provided by the user and the user.

[0062] In step 20, the provider 4 produces two non-fungible authentication tokens: a non-fungible token 5 certifying the correspondence between the user possessing this token and the name claimed by the user, taken from the copy 13 of the user's passport, and a non-fungible token 6 certifying the correspondence between the user possessing this token and the age claimed by the user, the age also coming from the copy 13 of the passport.

[0063] These tokens 5 and 6 do not certify any correspondences other than those chosen. For example, these tokens 5 and 6 do not allow the authentication of a home address of user 3, since it was not planned to extract home data from the passport copy to authenticate it through one of these tokens. In this sense, these tokens 5 and 6 form a "zero knowledge proof" type authentication, by limiting authentication to certain chosen personal data. Of course, if the user wishes to have a token to certify the correspondence between him and his home, or to authenticate any other data, he can request it from the provider 4. Thus, non-fungible authentication tokens allow the precise selection of personal data to be authenticated.

[0064] These non-fungible tokens 5 and 6 each have at least one expiry date. Thus, once the date has passed, they can no longer allow the authentication of the user 3 with the platform 9 or any other service provider. The user 3 can then update this date by contacting the provider 4 again to authenticate the identification data.

[0065] In step 30, the non-fungible authentication token provider 4 sends these non-fungible tokens 5 and 6 to a digital wallet 8 of the user 3, the wallet 8 corresponding, like any token wallet of the blockchain, to an address on a block chain, here to an address on the Ethereum block chain. This transmission of the tokens to the wallet is done via a bridge, or "bridge", allowing the passage of tokens from one environment to another, for example from one block chain to another if the token was designed by the provider 4 on a block chain other than Ethereum.

[0066] These non-fungible tokens 5 and 6 circulate on the Ethereum blockchain. However, the use of bridges between blockchains, such as those enabled in particular by the Polkadot service, allows transactions of these tokens on other blockchains if necessary. Furthermore, although the following will focus on single tokens 5 and 6 on the Ethereum blockchain, the provider 4 can produce, for the same user 3, as many tokens 5 and 6 as there are blockchains envisaged for the use of these non-fungible authentication tokens. The use of the non-fungible authentication tokens in the invention is therefore not restricted to a particular blockchain.

[0067] In an additional option not illustrated in this step 30, the non-fungible tokens 5 and 6 are then associated with a domain name of the user 3 corresponding to his wallet 8. Indeed and in particular, the Ethereum blockchain has a domain name administration system, called "ENS" for "Ethereum Name Services", making it possible to replace the use of a raw address of the blockchain with a chosen and easily manipulated domain name. In this variant, the program 3 provides for the registration of the non-fungible tokens of the method 100 in the code of this system, allowing the association between these tokens and the address of the wallet 8 of the user 3. Optionally, the provider 12 of the method 100, on which we will return to below, can create a domain name for user 3 and make it available to him and his authentication tokens 5 and 6.

[0068] At the end of these steps, the user 3 therefore has non-fungible authentication tokens 5 and 6 in a digital wallet 8 to which he has access in a conventional manner, for example by login and password on an online account, on a web browser extension or on a physical medium.

[0069] The following step 40 then corresponds to the authentication of the user 3 with the platform 9. The user registers on the cryptocurrency purchasing platform 9. To do this, he conventionally connects his wallet 8 to the purchasing platform 9, through a digital authentication platform owned or used by the purchasing platform 9, so that the two will be considered inseparable in this description. To authenticate his name and age, the authentication platform then has access, upon authorization from the user, to the authentication tokens 5 and 6 through his wallet 8. Given that these certify the age and name of the user 3, the platform validates the authentication of the user and authorizes him to use its services. The authentication of the user is then carried out.

[0070] As mentioned above, all of these steps are carried out by the means of the computer module 2, here those of the platform 9 and the user's wallet 8, automatically. The authentication of the user 3 with the platform 9 is therefore rapid. It is also reliable, the tokens 5 and 6 having been obtained from a recognized token supplier 4, in particular certified by the authorities. These same authorities are those who established the authentication rules to be respected, so that the entire authentication process is both respectful of the regulations, reliable, and rapid.

[0071] In step 50, reward tokens 7 are transmitted to the user's wallet 8. These reward tokens 7 are conventional blockchain tokens, such as cryptocurrency or governance tokens that are the subject of transactions on blockchains. They are conventionally endowed with an economic value that evolves on the markets, but also with rights allowing their holder to access services specific to the types of tokens. These tokens can be sold, exchanged, used. It is therefore an interchangeable counterpart rewarding the user for the provision and / or use of their tokens 5 and 6.

[0072] We will now detail the forms of reward undertaken at this step 50.

[0073] A first form 51 of reward is the transmission by the platform 9 of reward tokens 7, initially possessed by the platform 9, to the wallet 8 of the user 3, in return for access to his tokens 5 and 6. Thus, simple access to the contents of the wallet and in particular to the certifications of the non-fungible tokens 5 and 6 is rewarded.

[0074] A second form 52 is the transmission of reward tokens 7 by the platform 9 in return for the validated authentication of the user 3. This reward confirms the validation of the authentication to the platform 9.

[0075] For these first two forms of reward, from the platform 9 to the user 3, the value of the reward tokens 7, that is to say the quantity, the assumed or known economic value and / or the use value of these tokens, depends on the type of identification data of the non-fungible authentication tokens 5 and 6. Thus, the computer module 2 is configured to ensure transmission, by the platform 9, of a greater value of tokens 7 in return for the token 5, which authenticates the name of the user, than for the token 6, which authenticates his age.

[0076] Those skilled in the art will understand that the terms “value”, “importance” and “quantity” of reward tokens are interchangeable within the scope of the rewarding step of the invention. This quantity represents the importance of the reward for the user.

[0077] Any type of identification data can be configured to correspond to a certain quantity of tokens. Thus, it may have been decided that a name corresponds to a certain quantity, an address to another, an age to another, an income level to another. This configuration is carried out upstream, by the platform 9 or by the provider 12 of this authentication method 100, which will be discussed below. This makes it possible to encourage the user 3 to make authentication tokens available certifying important personal data for third-party platforms.

[0078] A third form 53 of reward is the transmission of governance tokens 11 from the provider 12 of the authentication method, to the wallet 8 of the user 3. The provider 12 is an organizing entity of this authentication method, or protocol. In particular, the provider 12 has pre-established a partnership with the platform 9 allowing the use of the authentication method 100 for the user 3. It is to encourage the user 3 to use the method that these governance tokens are transmitted to him. By "governance token" 11, those skilled in the art will understand that we designate a type of reward token specifically created by the provider 12 of the method 100, and not any reward token 7 attached to another service. Thus, the governance token 11 is a particular type of reward token since it is, from the outset and through the possible rights that it grants, associated with this process 100.

[0079] This transmission of the governance tokens 11 is generated at the time of use of the non-fungible tokens 5 and 6 to authenticate to the platform 9, but also subsequently, when the user 3 updates his tokens 5 and 6. It is also carried out when the tokens 5 and 6 have remained accessible to the platform 9 for a predetermined duration in the wallet 8, or locked to a platform any. Thus, the quantity of governance tokens 11 transmitted to wallet 8 depends on the use of tokens 5 and 6, their update, and their holding period.

[0080] Other criteria could be added to determine the quantity of governance tokens to be transmitted and their time of transmission.

[0081] The provider 12 could also transmit any reward tokens 7 to the user, and not necessarily governance tokens 11 from the provider 12.

[0082] A fourth form 54 of reward, not illustrated in [Fig. 1], rewards the locking (or "staking" of tokens in English) of the non-fungible authentication tokens 5 and 6. The user 3 thus has the possibility of locking his tokens 5 and 6 with the platform 9, the provider 12, or another third-party platform. Like the conventional locking of fungible tokens, the locking of these non-fungible tokens 5 and 6 assures the entity with which these tokens are locked that they cannot be withdrawn or deleted as easily as tokens simply made available. The reward by granting the wallet 8 of tokens 7 or 11 therefore comes in return for this locking.

[0083] Alternatively, tokens 5 and 6 are not moved to be locked with an entity. It is an identifier (“asset ID”) reliably associated with these tokens that is “locked” with the entity, from the digital wallet 8, which stores the non-fungible tokens 5 and 6.

[0084] Alternatively, tokens 5 and 6 are “locked” with several entities simultaneously. In this alternative, and in agreement with the user or even at his initiative, copies of tokens 5 and 6 are copied onto the blockchain issuing tokens 5 and 6, for example by the provider of the non-fungible token, or by another entity capable of copying non-fungible tokens. This method of copying or replicating a blockchain token is known to those skilled in the art as “mirroring”. The user then has several copies of his token 5 and several copies of his token 6. He then locks the identifiers (“asset ID”) of each of these copies with the different entities. Thus, starting with a single token 5 and a single token 6 at the start, the user ultimately has several copies of these tokens allowing him to lock these tokens simultaneously with several entities.It can then be rewarded by each of these entities. These third-party entities with which tokens 5 and 6 are locked can correspond to platform 9, provider 12 or other types of platforms foreign to the authentication process.

[0085] It should be noted that optionally, some or all of the reward tokens 7 and 11 mentioned during these steps may be transmitted to another wallet of user 3, and therefore not necessarily to wallet 8. However, this other wallet should be reliably associated with the person of user 3.

[0086] A fifth form 55 of reward, not illustrated, concerns the reward for making personal data of the user 3 available to a third-party entity, separate from the system described. Indeed, the user 3 can decide to make his tokens 5 and 6 available to an entity, without this necessarily being the platform 9 or another entity intended to authenticate the user so that the latter registers for its services. It is indeed known that web entities trade in personal data. The invention makes it possible to give control of his data to the user, who decides to which entities he makes them accessible on his wallet 8, independently of any authentication with a service provider. This process can be referred to as a “reverse cookie”, since it involves reversing the monetization of personal data. The user can also be paid by fiat currency for this access to his tokens 5 and 6.

[0087] All rewards, of reward forms 51 to 55, are cumulative. However, the computer module 1 can be configured to decide to implement only some of them and according to certain predetermined criteria, depending for example on the partnerships established between the supplier 12 of the method 100 and the service providers such as the platform 9.

[0088] In step 60, it is the provider of the method 100 who is rewarded in reward tokens 7, by the purchasing platform 9. This reward is realized when the purchasing platform rewards the user in accordance with the reward form 51. The reward tokens 7 transmitted to the provider 12 of the method 100 by the platform 9 represent a predetermined share of the tokens transmitted to the user by the platform 9.

[0089] As mentioned, we recall that these reward steps 50 and 60 are based on predetermined criteria, in particular a function of the tokens 5 and 6, their content and duration and usage criteria, and are therefore carried out automatically by the computer module 1 as soon as these criteria are met.

[0090] Rewards between the different entities may take place at other times and according to other criteria.

[0091] Furthermore, the user has the possibility, if he wishes and not automatically, to transmit interchangeable tokens, that is to say reward tokens, governance tokens, from his wallet 8 to the supplier 12 of the process 100. These are tokens that can be described as a “donation”, to help in the development of the process 100.

[0092] In addition to the token rewards 11 and 7, sending fiat money, through the traditional banking system, is possible. Thus, in a variant not illustrated, the platform 9 does not transmit reward tokens 7 to the user 3. It pays the provider 12 of the fiat currency method, and the method 12 is responsible for rewarding, by means of the form of reward 53, described above, the user 3 and his wallet 8.

[0093] It also emerges from the description of this method 100 that the digital authentication platform used by the purchasing platform 9, to authenticate the user 3, comprises a computer module 1, capable of: - access, within the digital wallet 8 of the user 3 corresponding to an address of a blockchain, the non-fungible authentication tokens 5 and 6 of the user 3, these tokens certifying a correspondence between the user 3 and the identification data 13 of the user; - authenticate user 3 based on the content of tokens 5 and 6; - reward user 3 by transmitting, to a digital wallet of the user corresponding to an address recorded on a blockchain, reward tokens 7 and 11.

[0094] Similarly, the supplier 12 of the method holds a governance platform for the method 100 for digital authentication of a user, comprising a computer module 1 capable of: - receive a reward from the service provider 9, in the form of reward tokens 7 on a blockchain and / or fiat currency; - distribute governance tokens 11, from the provider 12 of the authentication process 100, to the user's digital wallet 8.

[0095] Finally, the digital wallet 8 is a blockchain token wallet, corresponding to an address of a blockchain, including: - at least one non-fungible token, here two tokens 5 and 6, for authentication of user 3, certifying a correspondence between the user and the user's identification data 13; - governance tokens 11 from the provider 12 of the authentication process 100.

[0096] The invention is not limited to the embodiments presented and other embodiments will become clear to those skilled in the art. In particular, any service provider can use the method instead of the platform 9, in particular within the framework of agreements entered into between the provider 12 of the method and these service providers.

[0097] Since it is possible to authenticate with any blockchain service provider using authentication tokens, these can be used in the context of user authentication in a metaverse. Indeed, this type of interaction through an avatar in a three-dimensional universe makes necessary user authentication, that is, verification that the user behind the avatar is who he claims to be.

[0098] Furthermore, a non-fungible authentication token may, within the scope of the invention, correspond to an assembly or a synthesis of several non-fungible authentication tokens. For example, the same non-fungible authentication token, called synthetic, may replace the two tokens 5 and 6, and therefore certify the correspondence between the user and simultaneously his name and his age. The user may have in his digital wallet both his tokens 5 and 6 and his synthetic token.

[0099] Thus, in the context of a metaverse, given that a virtual avatar can have several virtual attributes (hat, clothing, others), the user can have, for each of these attributes, corresponding non-fungible authentication tokens, but also a single synthetic non-fungible authentication token, which certifies the correspondence between the user and all or several of these virtual elements.

Claims

Claims

1. Method (100) for digitally authenticating a user (3) with a service provider (9), implemented by a computer module (1) and characterized in that it comprises the following steps: **first: - the user (3) transmits to a provider (4) of non-fungible authentication token a personal document (13) presenting at least one piece of identification data of the user, such as an identity document, proof of address, a bank account statement; - the provider (4) of authentication token authenticates the correspondence between the user (3) and said at least one piece of identification data (13) and produces a non-fungible authentication token (5, 6) certifying the correspondence; - the token (5, 6) is transmitted on the blockchain to a digital wallet (8) of tokens of the user, the digital wallet (8) corresponding to an address recorded on a blockchain;**for user authentication: - access by the service provider (9) to the digital wallet (8) of tokens of the user (3); - access by the service provider (9), within the digital wallet (8), to the non-fungible authentication token (5, 6) of the user (3); - rewarding the user (3), comprising the transmission, to a digital wallet (8) of the user corresponding to an address recorded on a blockchain, of reward tokens (7, 11).;

2. Method (100) according to the preceding claim, wherein at least some of the reward tokens (7) are transmitted by the service provider (9).

3. A method (100) according to any preceding claim, wherein at least some of the reward tokens (11) are transmitted by a provider (12) of the authentication method, for example in the form of governance tokens (11) from the provider (12) of the method (100).

4. Method (100) according to any one of claims 2 and 3, comprising a step of locking the non-fungible token (5, 6) with the service provider (9) or the provider (12) of the method, the reward tokens (7, 11) being transmitted to the user (3) in return for the locking.

5. Method (100) according to the preceding claim, in which the step of locking the non-fungible token (5, 6) is carried out with several third-party entities.

6. Method (100) according to any one of the preceding claims, wherein the quantity of reward tokens (7, 11) depends on a number of authentications carried out via the user's token (5, 6), an update level of the token, and / or a duration of holding the token in the user's digital wallet.

7. Method (100) according to any one of the preceding claims, in which, beforehand, types of identification data (13) are associated with respective quantities of reward tokens (7, 11), for example, a data item identifying a name of the user is associated with a first quantity, a data item identifying an age of the user with a second quantity, a data item identifying a personal income level of the user with a third quantity, a data item identifying a home address of the user with a fourth quantity, so that, during the step of rewarding the user, the quantity of reward tokens transmitted to the wallet (8) of the user (3) depends on the type of the identification data (13) whose correspondence with the user is certified by the authentication token (5, 6).

8. A method (100) according to any preceding claim, wherein the rewarding step further comprises transmitting fiat currency to the user (3).

9. A method (100) according to any preceding claim, further comprising performing a step of rewarding a provider (12) of the authentication method (100) by the service provider (9), comprising transmitting, by the service provider (9) to the provider (12) of the authentication method (100), a quantity of reward tokens (7) which depends on a quantity of reward tokens (7) transmitted to the user by the service provider, and / or transmitting, by the service provider to the provider of the authentication method, a predetermined fiat currency value.

10. Method (100) according to any one of the preceding claims, further comprising a step of associating the token non-fungible (5, 6) to a user address (3) corresponding to a domain name of the blockchain.

11. Method (100) according to any one of the preceding claims, wherein, the authentication token (5, 6) comprising an expiry date such that the authentication of the user (3) by the service provider (9) is refused once the date has passed, the user (3) subsequently repeats the step of transmitting a personal document (13) to update the expiry date of the token (5, 6).

12. Method (100) according to any one of the preceding claims, implemented in the context of authentication of the user (3) in a virtual world, in particular a metaverse.

13. A computer program (2) comprising instructions which, when the program is executed by a computer (1), cause the computer (1) to implement the steps of at least one of claims 1 to 10

14. 1Z. A computer-readable recording medium (1) comprising instructions which, when executed by a computer, cause the computer to carry out the steps of at least one of claims 1 to 12.

Images