A method for authenticating a user, the method comprising: receiving , by a mobile carrier system from a device of the user, a request for a service; providing , by the mobile carrier system to the device of the user, an authentication challenge in response to the request for service; receiving , by the mobile carrier system , from the device of the user, and in response to the authentication challenge , an address of an identity management blockchain, a symmetric key, and an address of an identity server ; requesting , by the mobile carrier system , from the identity server at the address received from the device of the user, an encrypted identity claim token for the user; receiving , by the mobile carrier system , from the identity server , the encrypted identity claim token for the user in response to the request; decrypting , by the mobile carrier system , the received encrypted identity claim token using the symmetric key received from the device of the user; generating , by the mobile carrier system , a hash of the decrypted identity claim token; determining , by the mobile carrier system , whether the generated hash of the decrypted identity claim token matches the hash of the identity claim token for the user in the identity management blockchain ; and providing, by the mobile carrier system , to the device of the user, the requested service in response to the generated hash of the decrypted identity information matching the hash of the identity claim token for the user in the identity management blockchain . receiving , by a mobile carrier system from a device of the user, a request for a service; providing , by the mobile carrier system to the device of the user, an authentication challenge in response to the request for service; receiving , by the mobile carrier system , from the device of the user, and in response to the authentication challenge , an address of an identity management blockchain, a symmetric key, and an address of an identity server ; requesting , by the mobile carrier system , from the identity server at the address received from the device of the user, an encrypted identity claim token for the user; receiving , by the mobile carrier system , from the identity server , the encrypted identity claim token for the user in response to the request; decrypting , by the mobile carrier system , the received encrypted identity claim token using the symmetric key received from the device of the user; generating , by the mobile carrier system , a hash of the decrypted identity claim token; determining , by the mobile carrier system , whether the generated hash of the decrypted identity claim token matches the hash of the identity claim token for the user in the identity management blockchain ; and decrypting , by the mobile carrier system , the received encrypted identity claim token using the symmetric key received from the device of the user; generating , by the mobile carrier system , a hash of the decrypted identity claim token; determining , by the mobile carrier system , whether the generated hash of the decrypted identity claim token matches the hash of the identity claim token for the user in the identity management blockchain ; and providing, by the mobile carrier system , to the device of the user, the requested service in response to the generated hash of the decrypted identity information matching the hash of the identity claim token for the user in the identity management blockchain . <EOS>