Abstract: A method, system, and computer program product are disclosed. The method includes separating a user certificate into a private component and a non-private component. The method further includes storing the non-private component in a database and providing a pointer to the non-private component stored in the database.

Abstract: The present invention is directed to a computer-implemented method for linking identity information of a physical identifier to a digital identifier. The identity information comprises a plurality of symbols. The method comprises cryptographically obfuscating one or more symbols of the identity information separately into an obfuscated symbol such that a separate deobfuscation information is needed for each obfuscated symbol to deobfuscate it and storing the obfuscated symbols within the digital identifier.

Abstract: An example operation may include one or more of extracting a data object from a machine-readable code, where the data object comprises fields of data signed with a digital signature of a private key, detecting an identifier of an issuer of the data object from the extracted data object, retrieving a public key from a blockchain based on the identifier of the issuer detected from the field of the extracted data object, and verifying the digital signature of the private key based on the fetched public key

Abstract: An example operation may include one or more of receiving an export identifier to initiate an asset ownership transfer of an asset from a current owner to a new owner, identifying an asset identifier assigned to the asset and a current asset ownership session stored in a blockchain transaction, responsive to identifying the export identifier, assigning a new asset identifier to the asset, assigning a random number to an import identifier used to identify the asset transfer to the new owner, and creating a new blockchain transaction including the new asset identifier, the random number, and a new asset ownership session.

Abstract: An example operation may include one or more of receiving an export identifier to initiate an asset ownership transfer of an asset from a current owner to a new owner, identifying an asset identifier assigned to the asset and a current asset ownership session stored in a blockchain transaction, responsive to identifying the export identifier, assigning a new asset identifier to the asset, assigning a random number to an import identifier used to identify the asset transfer to the new owner, and creating a new blockchain transaction including the new asset identifier, the random number, and a new asset ownership session.