System and Method for Zero-Knowledge, Anonymous Verification and Management

Abstract

A verification system using additional factors such as biometrics can provide a tenant system with the ability to verify the identity of an end user. The enrollment and verification can be performed without sharing identity knowledge between the tenant and the verification ensuring the privacy of the end user. The enrollment and verification can also be performed in an auditable way while maintaining anonymity.

1 . A method for biometric verification of an end user associated with an electronic device, the method comprising:
 receiving, at the electronic device, a first request, the first request being sent from a verification system, the first request further soliciting identity information associated with the end user;   capturing, at the electronic device, biometric data belonging to the end user;   generating, at the electronic device, the solicited identity information from the captured biometric data;   sending, from the electronic device to the verification system, the solicited identity information;   receiving, at the electronic device, a user receipt, the user receipt being sent from the verification system, the user receipt further comprising a transaction identifier.   
     
     
         2 . The method of  claim 1 , the user receipt being encrypted using a public key, the public key being stored on the electronic device. 
     
     
         3 . The method of  claim 2 , the method further comprising:
 decrypting the user receipt using a private key, the private key being stored on the electronic device.   
     
     
         4 . The method of  claim 1 , the first request being received via a first digitally signed message. 
     
     
         5 . The method of  claim 1 , the user receipt being received via a second digitally signed message. 
     
     
         6 . The method of  claim 1 , the user receipt further comprising a request type, a transaction outcome, a detailed outcome, a request timestamp, or a combination thereof. 
     
     
         7 . The method of  claim 1 , the biometric data being formed from a fingerprint of the end user, an iris of the end user, the face of the end user, or a combination thereof. 
     
     
         8 . The method of  claim 1 , the solicited identity information further comprising the name of the end user, the birthdate of the end user, the social security number of the end user, an address associated with the end user, a password associated with the end user, a personal identification number associated with the user, an identifier associated with the electronic device, a phone number associated with the end user, or a combination thereof. 
     
     
         9 . The method of  claim 1 , the transaction identifier being associated with a transaction, the transaction being stored in an immutable database. 
     
     
         10 . The method of  claim 9 , the immutable database being a blockchain. 
     
     
         11 . An electronic device operable for biometric verification of an end user, the electronic device comprising:
 a memory;   a processor operable to:
 receive a first request, the first request being sent from a verification system, the first request further soliciting identity information associated with the end user; 
 capture biometric data belonging to the end user; 
 generate the solicited identity information from the biometric data; 
 send, to the verification system, the solicited identity information; 
 receive, from the verification system, a user receipt, the user receipt comprising a transaction identifier. 
   
     
     
         12 . The electronic device of  claim 11 , the user receipt being encrypted using a public key, the public key being stored in the memory. 
     
     
         13 . The electronic device of  claim 12 , the processor being further operable to:
 decrypt the user receipt using a private key, the private key being stored in the memory.   
     
     
         14 . The electronic device of  claim 11 , the first request being received via a first digitally signed message. 
     
     
         15 . The electronic device of  claim 11 , the user receipt being received via a second digitally signed message. 
     
     
         16 . The electronic device of  claim 11 , the user receipt further comprising a request type, a transaction outcome, a detailed outcome, a request timestamp, or a combination thereof. 
     
     
         17 . The electronic device of  claim 11 , the biometric data being formed from a fingerprint of the end user, an iris of the end user, the face of the end user, or a combination thereof. 
     
     
         18 . The electronic device of  claim 11 , the solicited identity information further comprising the name of the end user, the birthdate of the end user, the social security number of the end user, an address associated with the end user, a password associated with the end user, a personal identification number associated with the user, an identifier associated with the electronic device, a phone number associated with the end user, or a combination thereof. 
     
     
         19 . The electronic device of  claim 11 , the transaction identifier being associated with a transaction, the transaction being stored in an immutable database. 
     
     
         20 . The electronic device of  claim 19 , the immutable database being a blockchain. 
     
     
         21 . A computer-readable medium storing instructions that, when executed by a computer, cause the computer to:
 receive, at the computer, a first request, the first request being sent from a verification system, the first request further soliciting identity information associated with an end user;   capture, at the computer, biometric data belonging to the end user;   generate, at the computer, the solicited identity information from the captured biometric data;   send, from the computer to the verification system, the solicited identity information;   receive, at the computer, a user receipt, the user receipt being sent from the verification system, the user receipt further comprising a transaction identifier.