Assertion Package Mediator for Digital Identity Integration
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
The integration of digital identities from various sources creates an N×N computing problem, leading to exponential growth in integrations, and existing systems lack a standard for creating digital identities, resulting in high-friction experiences and security risks due to the need for entities to access and share private information.
Innovation Solution
A method and system for providing assertions about entities, involving a relying entity requesting assertions for a target entity, with an assertions model determining the necessary assertion values, generating a package of assertions, and transmitting them securely, without direct access to underlying information, using a server computer and distributed ledger technology.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Loss of information
If digital identities are integrated from multiple sources, then information completeness improves, but system complexity grows exponentially
Solution Approach 1:
The patent introduces an intermediary entity (the system with server computer) that mediates between multiple digital identity sources and relying parties. This intermediary standardizes the integration process by receiving assertions from various sources, validating them against predefined criteria, and providing standardized responses, thereby eliminating the need for direct N×N integrations between all sources.
Solution Approach 2:
The system implements a universal assertions model that can handle multiple types of digital identity sources and relying parties through a single standardized interface. The model defines universal assertion types and validation rules that work across different identity providers and consumers, allowing one system to serve multiple functions rather than requiring separate integration logic for each source pair.
2Measurement precision
If entities access underlying assertion information, then verification accuracy improves, but privacy security deteriorates
Solution Approach 1:
The system extracts only the essential verification elements needed for accurate verification while leaving out sensitive underlying information. The assertions model defines specific assertion types that capture the necessary verification data (e.g., identity status, eligibility criteria) without exposing the raw underlying information from digital identity sources, thus providing verification accuracy while protecting privacy.
Solution Approach 2:
The system applies different levels of information disclosure to different entities based on their needs and trust levels. The assertions model allows relying parties to receive customized assertion packages that provide sufficient information for their specific verification needs without granting universal access to all underlying data, implementing a localized quality approach where each entity gets exactly what it needs, no more.
3Reliability
If comprehensive information is shared, then trustworthiness improves, but friction in information gathering increases
Solution Approach 1:
The system performs preliminary validation and structuring of information from multiple digital identity sources before it reaches relying parties. The assertions model pre-organizes information into standardized categories and validates assertions against predefined criteria in advance, so that when relying parties request information, they receive pre-validated, trustworthy data without needing to engage in friction-gathering processes themselves.
Solution Approach 2:
The system creates standardized assertion copies from the underlying digital identity information. Rather than requiring relying parties to access and validate raw information directly, the system produces standardized assertion copies that maintain trustworthiness through validation while being much easier to consume and process, thereby reducing friction in the information gathering process.
Data Source
AI summary
Methods and systems disclosed herein relate to providing a receiving entity with a package of assertions. A package of assertions may include a group of yes or no statements (e.g., as an answer to a question). Alternatively, or additionally, a package of assertions may comprise a clustered assertion, which is a singular yes or no statement, that is itself based on a set of underlying assertions made using information from one or more sources. A particular type of package of assertions may be selected based on the relying entity requesting the assertions, based on an assertions model. The package of assertions may be cryptographically secured.