An NFC-based digital authentication system operating with a zero-data protocol.

Abstract

TrustBridge ID - Invention Summary Technical Area: The invention relates to information systems and cybersecurity, particularly protocols that provide secure authentication and user privacy via mobile devices. Technical Problem: In current authentication systems, user data is stored on centralized servers, increasing the risk of data leaks and complicating GDPR / KVKK compliance processes. Furthermore, there are security vulnerabilities stemming from manual entry when digitizing physical identity documents. Solution and Key Features: The invention is a system that uses Near Field Communication (NFC) technology to read data from a physical ID card via mobile devices and verify this data using a Zero-Knowledge architecture without storing it on a central server. The system shares only the verification result with the relevant institution, without turning the data into an advertising or analytical target. Primary Uses: The system; market

Description

INVENTION TITLE: A digital authentication system based on NFC and operating with a zero-data protocol. SYSTEM / TECHNICAL FIELD: Invention; cybersecurity, digital identity management, and Near Field Communication (NFC) It is related to technologies, especially personal data protection and secure identity data storage. It is related to a system that allows for verification. TECHNICAL PROBLEM: Today, when verifying user identity on digital platforms, personal data (Turkish Republic Identity Number, etc.) is used. (Name, Surname, Photo, etc.) are stored on central servers. This situation poses a risk of data leakage. risks, GDPR compliance challenges, and the targeting of users' digital footprint for advertising purposes. This leads to the situation. Furthermore, manual data entry increases the margin of error and the risk of fraud. It increases. THE SOLUTION TO THE INVENTION: The invention allows users to transfer data from chips embedded in their physical ID cards to mobile devices. It transfers the data to a digital environment via NFC readers on the devices. However, the system itself does not process this data. Instead of saving it to their servers, they validate it using a "Zero-Knowledge" architecture. The data is used only for immediate verification and is destroyed at the end of the process. It will only be sent to the relevant institution. A cryptographic confirmation is sent containing the information "Identity True / False". DESCRIPTION OF THE INVENTION: The invention consists of the following technical steps: 1. NFC Integration: The mobile application integrates the user's physical ID card with NFC. It reads the chip and accurately extracts the digital data inside. 2. Cryptographic Verification: The data being read is transmitted through an end-to-end encrypted channel. It is transmitted to the verification server via this method. 3. Zero-Knowledge Protocol: The validation server reads the data. However, it does not record this in any database. It only verifies the authenticity of the data through official sources. confirms it. 4. Secure Confirmation Transmission: The confirmation code generated as a result of verification is sent to the platforms. The request is transmitted to the third-party organization via a multi-tenant architecture. During the process, the user's raw data is never passed to a third-party server. HOW THE INVENTION WAS APPLIED TO INDUSTRY: The invention relates to marketplace websites, banking applications, digital subscription services, and cyberspace. all types of digital software that require secure authentication, such as security software. applicable on the platform. 35 1

Claims

1. The invention enables user authentication on digital platforms. It is a system whose feature is that the data from the user's physical identification document is transmitted to the mobile device's vicinity. Reading the data via the Field Communication (NFC) unit, and then storing that data permanently on a central server... The fact that it is not stored as is, the accuracy of that data is guaranteed using the Zero-Knowledge protocol. Confirmation using its architecture, after that verification process only a cryptographic one This includes the stages of communicating the approval result to third-party platforms.

2. A system compliant with Claim 1, characterized by its end-to-end encrypted security of identity data. the raw data is transmitted to the verification server via the channel and when verification is complete It is characterized by the complete deletion of data from the system.

3. A system that complies with claim 1 or 2, characterized by the fact that different institutions can use the same verification. It has a multi-tenant software architecture that allows it to utilize its infrastructure. It is the fact that. 2 3