COMPUTING SYSTEMS AND METHODS FOR PROVISIONING PRIVACY-PRESERVING IDENTITY-BOUND PASSKEYS AND DIGITAL SIGNATURES

Abstract

Systems and methods are provided that allows users to execute a secure digital action that is authenticated by their digital wallet app (or wallet) on a user device or a wallet server. An identity issuer server issues a batch of verification credentials (VCs) for an identity holder to the wallet. The wallet stores the batch of VCs, respectively binds each VC in the batch of VCs with a given passkey from a plurality of passkeys, generates selective disclosures via a content generator server, and transmits the batch of VCs, as a plurality of VC presentations, to an identity verification server. An identity verification server requests and validates the plurality of VC presentations, and, responsive to validating the plurality of VC presentations, registers the plurality of device-bound passkeys respectively bound to the batch of VCs to generate a plurality of registered passkeys. In a secure digital action, after generating the plurality of registered passkeys, the identity verification server is further configured to authenticate the identity holder using one or more of the registered passkeys.

CPC Classifications