US 11,941,100 B2
Selective access and verification of user information
Daniel A. Boyd, Arlington, VA (US); Kelli L Biegger, Fort Worth, TX (US); Chang Ellison, Arlington, VA (US); Brandon P. Gutierrez, Johns Creek, GA (US); Jason Lim, Alexandria, VA (US); and William Washington, North Potomac, MD (US)
Assigned to The Government of the United States of America, represented by the Secretary of Homeland Security, Washington, DC (US)
Filed by The Government of the United States of America, as represented by the Secretary of Homeland Security, Washington, DC (US)
Filed on May 4, 2023, as Appl. No. 18/143,458.
Application 18/143,458 is a continuation of application No. 17/955,801, filed on Sep. 29, 2022, granted, now 11,675,886.
Application 17/955,801 is a continuation of application No. 17/538,356, filed on Nov. 30, 2021, granted, now 11,461,450, issued on Oct. 4, 2022.
Application 17/538,356 is a continuation of application No. 17/180,421, filed on Feb. 19, 2021, granted, now 11,277,265, issued on Mar. 15, 2022.
Claims priority of provisional application 63/053,188, filed on Jul. 17, 2020.
Prior Publication US 2023/0367858 A1, Nov. 16, 2023
This patent is subject to a terminal disclaimer.
Int. Cl. H04L 9/40 (2022.01); G06F 21/32 (2013.01); G06V 10/40 (2022.01); H04L 9/08 (2006.01); H04L 9/32 (2006.01)
CPC G06F 21/32 (2013.01) [G06V 10/40 (2022.01); H04L 9/0825 (2013.01); H04L 9/3213 (2013.01); H04L 9/3247 (2013.01); H04L 63/0823 (2013.01); G06F 2221/2133 (2013.01)] 29 Claims
OG exemplary drawing
 
1. An apparatus, to verify an age of a user, comprising:
a processing system having a hardware processor configured to perform a predefined set of basic operations by loading corresponding ones of a predefined native instruction set of codes, the predefined native instruction set of codes constituting a set of instructions selectable for execution by the hardware processor;
a memory accessible to the processing system;
a communication controller, under control of the processing system;
engagement logic, stored in the memory, comprising a first respective sequence of instructions selected from the predefined native instruction set of codes of the hardware processor and adapted to establish a secure connection with a user mobile-identification-credential device (UMD), having a mobile identification credential (MIC) associated with official information including a date of birth of the user, via the communication controller;
information request logic, stored in the memory, comprising a second respective sequence of instructions selected from the predefined native instruction set of codes of the hardware processor and adapted to send the UMD a MIC user information request message, seeking the official information associated with the MIC, over the secure connection;
verification logic, stored in the memory, comprising a third respective sequence of instructions selected from the predefined native instruction set of codes of the hardware processor and adapted to send an authorizing party system (APS) a token received from the UMD;
APS verification logic, stored in the memory, comprising a fourth respective sequence of instructions selected from the predefined native instruction set of codes of the hardware processor and adapted to receive the official information and to cryptographically verify the official information; and
the memory further storing instructions, selected from the predefined native instruction set of codes, defining logic adapted to:
send, by the online host serving as a relying party system (RPS), a MIC user information request message, with a scope custom tailored for use in requesting verification of an age of the user while maximizing privacy of the user, requesting the user to furnish their identity to verify the age;
receive, from the UMD, a user consent response token indicating selective approval of the user's consent to release a date of birth of the user corresponding to the age;
transmit the user consent response token to the APS; and
receive, from the APS, the MIC user information for the date of birth, corresponding to the user consent response token consenting to release only the date of birth from the APS to the RPS.