Airport Identity Management via Distributed Ledger

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Current airport identity management systems are inefficient due to the lack of data sharing between independent organizations, leading to human errors, database inconsistencies, and reduced security, as travelers' identities are verified multiple times at each checkpoint, increasing costs and time consumption.

Innovation Solution

A distributed ledger system utilizing a global identity blockchain and security blockchains, where travelers register once on the global blockchain, and their identity data is shared securely among entities involved in their flight segment, using biometric data and secure cloud storage to enhance verification efficiency and security.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If travelers' identities are verified at each checkpoint by independent organizations, then security is ensured, but verification time and cost increase

Engineering Contradiction:
ImprovesecurityVSAvoidverification time
Core Design Contradiction:
ReliabilityVSLoss of time

Solution Approach 1:

The patent merges multiple independent verification databases into a single shared database accessible by all checkpoint organizations. This allows travelers to be verified once against a consolidated database, eliminating repeated verifications at each checkpoint while maintaining security through shared access controls and audit trails.

Inventive Principle:
Principle #5Merging (Combining)

Solution Approach 2:

The shared database serves multiple functions simultaneously: it stores traveler identity information, verification results, security clearance status, and travel authorization data. This universal database replaces multiple separate verification systems, reducing verification time while maintaining comprehensive security checks.

Inventive Principle:
Principle #6Universality (Multi-functionality)

2Loss of information

If independent organizations do not share their databases, then data privacy is maintained, but database inconsistencies and human errors increase

Engineering Contradiction:
Improvedatabase consistencyVSAvoidsecurity guarantees
Core Design Contradiction:
Loss of informationVSReliability

Solution Approach 1:

The patent introduces a shared database as an intermediary between independent organizations. This mediator enables consistent data access for all checkpoint entities while maintaining privacy through controlled access mechanisms. The shared database ensures all organizations work with the same verified information, eliminating inconsistencies without requiring direct data sharing between organizations.

Inventive Principle:
Principle #24Intermediary (Mediator)

Solution Approach 2:

The system implements feedback mechanisms where verification results and security clearance status are continuously updated and reflected across all checkpoint systems. This ensures all organizations have access to the most current verified information, maintaining database consistency through real-time synchronization and audit trails.

Inventive Principle:
Principle #23Feedback

3Reliability

If multiple third parties participate in the airport security process, then comprehensive security checks are performed, but data sharing becomes infeasible

Engineering Contradiction:
Improvesecurity processVSAvoiddata sharing
Core Design Contradiction:
ReliabilityVSEase of operation

Solution Approach 1:

The patent segments the shared database into logically separated sections for different organization types (airlines, security agencies, immigration, border control). Each organization can access only the data segments relevant to their function, enabling comprehensive security checks while maintaining operational independence and simplifying data access control.

Inventive Principle:
Principle #1Segmentation

Solution Approach 2:

The shared database acts as a neutral intermediary that enables multiple third parties to participate in the security process without direct data sharing between them. All organizations access verified information through the mediator, making comprehensive security checks feasible while respecting organizational boundaries and data sharing constraints.

Inventive Principle:
Principle #24Intermediary (Mediator)

4Reliability

If travelers go through multiple identity verification checkpoints, then security is ensured, but the process becomes lengthy and cumbersome

Engineering Contradiction:
ImprovesecurityVSAvoidprocessing efficiency
Core Design Contradiction:
ReliabilityVSProductivity

Solution Approach 1:

The patent combines multiple verification steps into a single integrated verification process against the shared database. Travelers undergo one comprehensive identity check that validates all necessary information (identity, security clearance, travel authorization) simultaneously, eliminating the need to repeatedly present documents at each checkpoint and dramatically improving processing efficiency.

Inventive Principle:
Principle #5Merging (Combining)

Data Source

PatentEP3906524B1Method and distributed ledger system for supporting identity management of travelers in an airport
Publication Date: 2024.11.27 NEC CORP
  • EP3906524B1 patent drawingFigure 1
  • EP3906524B1 patent drawingFigure 2
  • EP3906524B1 patent drawingFigure 3

AI summary

A method for supporting identity management of travelers in an airport using a distributed ledger system, wherein the distributed ledger system includes a global identity blockchain and several security blockchains, wherein the global identity blockchain is accessible by entities of the distributed ledger system, and wherein a security blockchain is employed for a predetermined flight segment, such that the security blockchain is accessible only by entities of the distributed ledger system that are involved in the predetermined flight segment, the method comprising: receiving, by the global identity blockchain, a registration request from a traveler via a traveler device, wherein the registration request includes a commitment for identity data that is uploaded by the traveler in a secure cloud storage, and wherein said commitment is recorded in the global identity blockchain; receiving, by the global identity blockchain, a result of an identity verification with respect to the traveler from a verifier entity, wherein said result is recorded in the global identity blockchain; receiving, by the security blockchain, a ticket registration transaction that is issued by an airline entity, wherein the ticket registration transaction comprises a unique traveler ID of the traveler, and issuing, by the security blockchain, an access control list update upon reception of consent by the traveler in order to allow one or more entities to have access to the identity data of the traveler stored in the secure cloud storage.