Blockchain Credential Management with Selective Attribute Disclosure
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current blockchain-based credential management systems face challenges in selectively hiding attributes, issuing multiple credentials in batches, verifying credentials without issuer involvement, and efficiently revoking credentials, leading to increased costs and administrative burdens.
Innovation Solution
A blockchain-based system that allows for selective disclosure of credential attributes, batch issuance of credentials, and on-demand revocation, utilizing auditable Merkle trees and smart contracts to ensure security and privacy, with user-friendly interfaces for issuers, holders, and verifiers.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If traditional triangulation method is used to verify credentials, then credential security is improved, but verification time and cost increase significantly
Solution Approach 1:
The patent creates a digital copy of the credential on the blockchain that contains all verification information. Verifiers can independently validate credentials by checking the blockchain record without contacting issuers, eliminating the need for time-consuming reconfirmation while maintaining security through cryptographic verification of the credential hash and issuer public key.
Solution Approach 2:
The blockchain acts as an intermediary layer between issuers and verifiers. Instead of direct communication requiring issuer involvement, the blockchain stores and verifies credential information, enabling autonomous verification while preserving credential security through its decentralized and immutable nature.
2Loss of information
If redactable signature technique is used for selective disclosure, then privacy is improved, but redacted attributes become conspicuous and raise questions
Solution Approach 1:
The patent extracts only the necessary credential information into a verification record on the blockchain, excluding sensitive attributes from public view. Holders can selectively disclose attributes by providing specific proof paths, and verifiers only see what is necessary for verification, preventing conspicuous redaction while maintaining privacy through selective information extraction.
Solution Approach 2:
The credential is segmented into mandatory components (verified and recorded) and optional components (selectively disclosed). The verification record contains segmented information including credential hash, issuer public key, and selective attribute proofs, allowing privacy protection without conspicuous gaps that would raise verification questions.
3Adaptability or versatility
If one Merkle tree is built per credential for selective disclosure, then selective disclosure capability is improved, but issuance cost increases proportionally with number of credentials
Solution Approach 1:
The patent merges multiple credential verification operations into a single batch verification process. Instead of processing each credential separately with individual Merkle tree operations, the system batches multiple credentials and performs verification in parallel, reducing issuance and verification costs while maintaining selective disclosure capability through shared verification logic.
Solution Approach 2:
The verification record structure and validation logic serve multiple credentials simultaneously. A single verification mechanism can validate any number of credentials by checking their respective proofs against the blockchain record, providing universal verification capability that reduces per-credential costs while maintaining adaptability for selective disclosure.
4Measurement precision
If credentials are verified by contacting issuers, then verification accuracy is improved, but administrative bureaucracy increases
Solution Approach 1:
The system enables self-service verification where verifiers can independently validate credentials using the information stored on the blockchain. The verification record contains all necessary data (credential hash, issuer public key, selective proofs) for autonomous validation without requiring issuer involvement, eliminating administrative bureaucracy while maintaining verification accuracy through cryptographic validation.
Data Source
AI summary
A blockchain based system for managing credentials in batch with selective attributes disclosing/hiding capability and auditable Merkle tree are disclosed with include a SmartCert unit coupled to a blockchain ecosystem and a public key infrastructure (PKI); the SmartCert unit further includes an issuer SmartCert and SmartCert verifier interface so that the holder can select to hide optional components completely from the verifier; and the verifier can check the certificate using the auditable Merkle tree.