Blockchain Certificate Storage for Privacy-Preserving Identity Linking
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current blockchain ecosystems lack effective methods for securely linking public keys to real-world identities, leading to privacy and security risks, and existing certificate authority systems are fragmented, requiring complex certificate chaining and lacking industry-wide standards for know-your-customer protocols.
Innovation Solution
A method and system for storing digital certificates on a blockchain, utilizing a simplified CA hierarchy, optimized data structure, and cryptographic techniques like ECDSA to embed and manage digital certificates efficiently, enabling on-chain identity management and privacy-preserving key updates.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If digital certificates are stored on blockchain using traditional CA hierarchy, then identity verification capability is improved, but system complexity increases due to certificate chaining requirements
Solution Approach 1:
The patent extracts the root of trust from the complex traditional CA hierarchy and embeds it directly into the blockchain as a root certificate. This eliminates the need for multiple intermediate CAs and certificate chaining, reducing system complexity while maintaining identity verification capability. The root certificate stored on blockchain serves as the single source of trust for all subsequent certificate validations.
Solution Approach 2:
The patent creates a universal root certificate that serves multiple functions: it acts as the trust anchor for identity verification, enables KYC protocol validation, and provides the basis for all certificate issuances on the blockchain. This single root certificate replaces the need for multiple specialized CAs, simplifying the overall system architecture.
2Reliability
If public keys are linked to real-world identities through centralized KYC protocols, then security is improved, but privacy is reduced due to centralized control
Solution Approach 1:
The patent segments the trust verification process into two independent layers: identity verification (KYC) is performed off-chain by the user's own wallet, while certificate validation is performed on-chain by the blockchain network. This segmentation allows users to maintain privacy by keeping their identity information off-chain while still enabling secure verification through cryptographic proofs on-chain.
Solution Approach 2:
The patent introduces the user's own wallet as an intermediary that holds and manages their digital certificate locally. The wallet acts as a self-sovereign identity manager, allowing users to verify their own identities without revealing personal information to third parties. This intermediary approach enables secure identity verification while preserving user privacy through cryptographic techniques.
3Adaptability or versatility
If multiple CAs are used for certificate issuance, then adaptability is improved, but operational complexity increases due to lack of industry standards
Solution Approach 1:
Instead of having multiple CAs issue certificates independently, the patent inverts the approach by having a single root certificate on the blockchain issue all certificates. This reversal of the traditional multi-CA model simplifies operations while maintaining adaptability, as the root certificate can issue certificates to multiple different entities following a unified standard.
Data Source
AI summary
A method of storing certified data on a blockchain is disclosed. The method comprises generating a first blockchain transaction (Tx1) having a first output (Output 3) containing a first public key of a first private/public key pair, comprising a first private key and a first public key, of a cryptography system, first data related to the first public key, and a first digital signature applied, using a second private key of a second private/public key pair, comprising a second private key and a second public key, of a cryptography system, to the first data and to the first public key. The first blockchain transaction is broadcast to the blockchain.