Decentralized Biometric Identity Management with Reversible Deployment
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Conventional identity management systems face challenges when deployed across countries or organizations due to policy differences, privacy concerns, and logistical difficulties, making it hard to unsubscribe or revert to previous systems, especially when unforeseen drawbacks arise.
Innovation Solution
A decentralized identity management system that can be deployed incrementally and reversibly, using a biometric processing engine to match records across independently established databases, with a poly-unique identity table maintaining links between unique identifiers, allowing organizations to easily access and manage biometric and ancillary information while enabling easy withdrawal from the system.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If a conventional identity management system is deployed across countries or organizations, then system performance is optimized, but policy differences and privacy concerns prevent common deployment
Solution Approach 1:
The system is segmented into independent national or organizational instances, each maintaining its own database and identity management infrastructure. These segmented instances can operate autonomously while being connected through the poly-unique identifier system, allowing each to adhere to local policies while participating in the broader network.
Solution Approach 2:
The system changes the parameter of identifier uniqueness from global to local/national level. By using poly-unique identifiers that are unique within each country or organization but not necessarily across all, the system adapts to local policy requirements while maintaining functional equivalence across different jurisdictions.
2Adaptability or versatility
If an organization subscribes to an identity management system, then system functionality is gained, but it becomes difficult to unsubscribe or revert to existing systems
Solution Approach 1:
The poly-unique identifier table acts as an intermediary layer between organizations and the central system. This intermediary maintains mapping relationships that allow organizations to easily disconnect by simply removing their mappings from the poly-unique table, without affecting the core infrastructure or requiring complex reversal procedures.
Solution Approach 2:
The system allows organizations to easily discard their participation by removing their data mappings from the poly-unique identifier table. The original local systems and data remain intact and can be recovered or reused independently, enabling reversible deployment without permanent commitment.
3Measurement precision
If biometric matching is performed across independently established databases, then identification accuracy is improved, but system complexity increases
Solution Approach 1:
The system extracts the complexity of cross-database matching by separating the identification function into two independent parts: local biometric matching within each database (simple) and poly-unique identifier resolution across databases (coordinated). This extraction reduces the complexity burden on individual database systems while maintaining high identification accuracy through coordinated querying.
Data Source
AI summary
This disclosure describes methods and systems for a biometric identity management system capable of being deployed incrementally one organization at a time, and also reversibly, such that any organization can unsubscribe at any time. A biometric processing engine can perform biometric matching between records from a first database and a second database, whereby the databases have been established independently of each other. Each record comprises a biometric record and a corresponding identifier unique across databases. If a biometric record of a first record and a biometric record of a second record are from a same individual, the first record comprising a first unique identifier and the second record comprising a second unique identifier are linked. Using the first or second unique identifiers, access to information about the individual linked to both the first record in the first database and the second record in the second database is provided.