Abstract: A processor-implemented system and method for enabling a relying party device associated with a relying party to verify an identity of a user. The method includes the steps of (i) generating, using a cryptographic processor on a user device associated with the user, a first set of credentials including a public-private key pair associated with the user, (ii) receiving at least one cryptographic challenge from the relying party device associated with the relying party, (iii) verifying at least one of a biometric or a PIN code, (iv) responding to the at least one cryptographic challenge by performing the at least one cryptographic operation on the cryptographic challenge using the user private key to form a result of the at least one cryptographic operation and (v) transmitting the result of the at least one cryptographic operation as a cryptographic challenge response to the relying party device.

Abstract: An embodiment herein provides a processor implemented method for blockchain-based electronic payment transaction authentication based on a cryptographic challenge using a user device, that includes: i) obtaining a payment card information associated with a payment card for storing the payment card with an application associated with the user device; ii) checking whether an attribute certificate issued by an issuing party for the user matches with the payment card information obtained from the payment card; (iii) storing the payment card for a user on a blockchain if the attribute certificate matches with the payment card information; iv) signing a record on the blockchain to obtain a signed record; v) obtaining the cryptographic challenge from the relying party device if the payment card is stored with the blockchain; and vi) transmitting a response to the cryptographic challenge to the relying party device.

Abstract: An embodiment herein provides a processor implemented method for blockchain-based device authentication by a user device to enable a second device to perform an action on a first device on behalf of a user linked to the user device, based on a command received from the second device. The method includes the steps of: (i) obtaining an identify information associated with an identity document of the user; (ii) storing the identity information, and a set of credentials, with a blockchain to link the identity information with the set of credentials for the user; (iii) signing a first trust certificate by a user private key on the blockchain to obtain a first signed trust certificate; and (iv) signing a second trust certificate by the user private key on the blockchain to obtain a second signed trust certificate. The first device receives the second trust certificate from the second device when the first device receives the command from the second device.

Abstract: An embodiment herein provides a processor implemented method for blockchain-based secure credential and token management for open identity management that enables a first device to provision at least one additional device to present tokens issued to the first device, that includes i) creating, using a hardware-based cryptographic processor on a first device associated with an end user, a first set of credentials; ii) obtaining and caching at least one attestation token from one or attestation issuing parties, the at least one attestation token is restricted by default to be unusable from any device other than the first device; (iii) providing the at least one attestation token to at least one relying party that is interested in receiving attestations about the end user; and iv) signing a trust record on the blockchain using the first device associated with the end user.

Abstract: A processor-implemented system and method for enabling a relying party device associated with a relying party to verify an identity of a user. The method includes the steps of (i) generating, using a cryptographic processor on a user device associated with the user, a first set of credentials including a public-private key pair associated with the user, (ii) receiving at least one cryptographic challenge from the relying party device associated with the relying party, (iii) verifying at least one of a biometric or a PIN code, (iv) responding to the at least one cryptographic challenge by performing the at least one cryptographic operation on the cryptographic challenge using the user private key to form a result of the at least one cryptographic operation and (v) transmitting the result of the at least one cryptographic operation as a cryptographic challenge response to the relying party device.

Abstract: An embodiment herein provides a processor implemented method for blockchain-based authentication of a user using a user device, that includes (i) obtaining an identify information associated with an identity document of the user; (ii) storing the identity information, and a set of credentials, with a blockchain to link the identity information with the set of credentials for the user; (iii) obtaining a cryptographic challenge from a relying party device when a record that includes a user identity information of the user and the set of credentials associated with the user identity information for the user device is found to be stored with the blockchain; and (iv) transmitting a response to the cryptographic challenge to the relying party device. The relying party device checks whether the response matches with a predetermined correct response or not. The relying party device authenticates the user only if the response matches with the predetermined correct response.

Abstract: An embodiment herein provides a processor implemented method for blockchain-based electronic payment transaction authentication based on a cryptographic challenge using a user device, that includes: i) obtaining a payment card information associated with a payment card for storing the payment card with an application associated with the user device; ii) checking whether an attribute certificate issued by an issuing party for the user matches with the payment card information obtained from the payment card; (iii) storing the payment card for a user on a blockchain if the attribute certificate matches with the payment card information; iv) signing a record on the blockchain to obtain a signed record; v) obtaining the cryptographic challenge from the relying party device if the payment card is stored with the blockchain; and vi) transmitting a response to the cryptographic challenge to the relying party device.

Abstract: A processor implemented method for generating a recovery key for a first device associated with a user and conditionally registering an identifier of the recovery key in a blockchain is provided. The method includes the steps of generating, using a first cryptographic processor on the first device associated with the user, a first set of credentials; generating a mnemonic sentence from pseudorandom data; applying a key derivation algorithm to generate the recovery key and conditionally registering an identifier of the recovery key for the first public key of the first device in a smart contract in the blockchain. The first set of credentials includes a first blockchain-compatible public-private key pair associated with the user. The first blockchain-compatible public-private key pair includes a first public key and a first private key. The first private key is restricted to the first cryptographic processor on the first device.

Abstract: An embodiment herein provides a processor implemented method for blockchain-based secure credential and token management for open identity management that enables a first device to provision at least one additional device to present tokens issued to the first device, that includes i) creating, using a hardware-based cryptographic processor on a first device associated with an end user, a first set of credentials; ii) obtaining and caching at least one attestation token from one or attestation issuing parties, the at least one attestation token is restricted by default to be unusable from any device other than the first device; (iii) providing the at least one attestation token to at least one relying party that is interested in receiving attestations about the end user; and iv) signing a trust record on the blockchain using the first device associated with the end user.

Abstract: An embodiment herein provides a processor implemented method for blockchain-based device authentication by a user device to enable a second device to perform an action on a first device on behalf of a user linked to the user device, based on a command received from the second device. The method includes the steps of: (i) obtaining an identify information associated with an identity document of the user; (ii) storing the identity information, and a set of credentials, with a blockchain to link the identity information with the set of credentials for the user; (iii) signing a first trust certificate by a user private key on the blockchain to obtain a first signed trust certificate; and (iv) signing a second trust certificate by the user private key on the blockchain to obtain a second signed trust certificate. The first device receives the second trust certificate from the second device when the first device receives the command from the second device.