Accumulator-Based Multi-Party Authentication Without Data Disclosure
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Contemporary authentication processes require disclosure of confidential or personal information, posing risks of data theft and undesired exposure due to unsecured data repositories and untrustworthy parties.
Innovation Solution
Implementing an independent accumulator that stores user confidential information and verifies user possession of items without disclosing any personal information, using encrypted proxies and separate verifications with the user and the item issuer.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If traditional authentication processes are used to verify user identity and items, then authentication reliability is improved, but user privacy and security deteriorate due to disclosure of confidential information
Solution Approach 1:
The patent introduces an accumulator as a trusted intermediary that holds confidential user information and verifies authentication requests without requiring the user to disclose sensitive data to the requesting party. The accumulator acts as a mediator between the user, the item issuer, and the requesting entity, enabling verification while preserving privacy through cryptographic proofs and selective disclosure mechanisms.
2Measurement precision
If confidential information is disclosed to verify authentication, then verification accuracy is improved, but data security deteriorates due to storage in unsecured repositories
Solution Approach 1:
The patent extracts confidential information from the user's direct control and places it into the accumulator's secure custody. The user's private key and sensitive data are stored only in the accumulator, not in unsecured repositories. The system enables verification by having the accumulator selectively disclose cryptographic proofs rather than the actual confidential data, thus maintaining verification accuracy while eliminating the need for insecure data storage.
3Reliability
If personal information is disclosed during authentication, then authentication completeness is improved, but information exposure risk increases due to inadvertent disclosure to unauthorized parties
Solution Approach 1:
The patent implements selective disclosure where different parties receive different levels of information access. The accumulator holds complete user information in secure storage, while requesting parties receive only the specific verification results they are entitled to. Cryptographic mechanisms enable the accumulator to provide proof of authentication status without revealing the underlying personal information, thus achieving complete verification while preventing information exposure to unauthorized parties.
Data Source
AI summary
In various examples, a user may be authenticated without disclosing any confidential or private information of the user. An independent accumulator stores user confidential information, and accumulates items issued by various parties for the user. When another entity requests to verify the item and the user, the accumulator may verify the user by verifying his or her possession of the item and his or her private information. The accumulator may also verify the item with the issuing party and verify that the item was intended for the user. Once verification has occurred, the accumulator informs the requesting entity that their request is confirmed. In this manner, entities may verify items of a user, without requiring the user to disclose any of his or her confidential or private information to the requestor.