Blockchain User Authentication With Root-System Identity Retrieval
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing authentication systems impose time and resource burdens on institutions and users due to repeated authentication requests across multiple institutions, lack non-repudiable records of authentication interactions, and share personal information excessively.
Innovation Solution
A distributed authentication system using a blockchain to maintain a non-repudiable record of interactions while limiting personal information sharing, where a root system stores user identification data in a database and member systems interact with the root system to retrieve this data.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If institutions implement their own authentication systems, then authentication security is improved, but time and resource burdens increase
Solution Approach 1:
Multiple institutions merge their authentication systems into a single shared authentication system. The patent describes how institutions participate in a common authentication framework where authentication records are stored and verified across the network, eliminating the need for each institution to maintain separate authentication infrastructure while maintaining security through distributed verification.
Solution Approach 2:
The authentication system is designed to serve multiple institutions simultaneously with a single authentication record. The patent shows how one authentication interaction can be recognized by multiple participating institutions through the shared ledger, allowing the system to perform multiple authentication functions across different institutions without requiring repeated authentication processes.
2Measurement precision
If institutions share personal information for authentication, then authentication accuracy is improved, but information security risks increase
Solution Approach 1:
The patent extracts and stores authentication records in a separate distributed ledger system independent of personal information databases. Authentication interactions are recorded on the blockchain without requiring institutions to share or store sensitive personal data, separating the authentication verification function from personal information storage while maintaining authentication accuracy through cryptographic proof.
Solution Approach 2:
The blockchain ledger acts as an intermediary that enables authentication verification without direct sharing of personal information between institutions. The patent describes how the distributed ledger mediates the authentication process by storing verification records that institutions can query without accessing each other's personal data, reducing information security risks while maintaining authentication precision.
3Device complexity
If a centralized authentication system is implemented, then system complexity is reduced, but trust and reliability decrease
Solution Approach 1:
The authentication system is segmented into distributed nodes across multiple institutions rather than being centralized in a single authority. The patent shows how the authentication ledger is divided and replicated across participating institutions, with each node maintaining a copy of the authentication records. This segmentation reduces reliance on any single central authority while maintaining system functionality, thereby increasing trust through distributed verification.
Solution Approach 2:
The distributed ledger provides continuous feedback and verification of authentication records across all participating institutions. The patent describes how each institution can verify the authenticity and integrity of authentication records through cryptographic proofs and consensus mechanisms, creating a feedback loop that enhances trust in the system without requiring complex centralized management.
Data Source
AI summary
Computer-implemented methods and systems are provided for blockchain-mediated user authentication. Consistent with disclosed embodiments, authentication may comprise operations including receiving, from a user system, an authentication request for a user. The operations may also include determining a root system for the user using a blockchain, and redirecting the user system to the root system. The operations may include receiving, following redirection, a verification message indicating that the root system successfully authenticated the user, and including an authorization code for receiving, from the root system, a root system secret. The operations may include receiving from a database, identification data using the root system secret. Determining the root system may comprise identifying, using the authentication request and index information stored in the blockchain, a block of the blockchain storing root system information for the user. Receiving the identification data may comprise retrieving identification data from the database.


