Blockchain Identity Verification with Side Chain Storage

Resolve Bottlenecks,
Find Innovative SolutionsGenerate Solutions

Solution Overview

Problem

Current identity verification systems are not secure enough to prevent identity theft, as certifications can be discoverable, making it difficult to keep valuable certifications secret and effectively manage user identities when interacting with third parties.

Innovation Solution

A method and system that uses a blockchain to obfuscate user identity certifications with a unique salt, allowing users to login without usernames or passwords, and securely verify identities by hashing and signing data with private keys, storing certification records on a side chain for enhanced security.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If user identity certifications are stored in a discoverable manner, then identity verification can be performed efficiently, but security is compromised and identity theft risk increases

Engineering Contradiction:

ImprovesecurityVSAvoidsystem complexity

Core Design Contradiction:

ReliabilityVSDevice complexity

Solution Approach 1:

The patent segments the certification storage system into two parts: a public blockchain that stores only hashed certification records (for verification) and a private sidechain that stores the actual certification data (for security). This segmentation allows the system to maintain both security and verification efficiency without requiring complex additional security layers.

Inventive Principle:

Principle #1Segmentation

Solution Approach 2:

The patent introduces hashed certification records as an intermediary between the actual certification data and the verification process. These hashes are stored on the public blockchain and serve as verifiable proofs without exposing the actual certification information, thus maintaining security while enabling efficient verification.

Inventive Principle:

Principle #24Intermediary (Mediator)

2Reliability

If traditional username and password authentication is used, then system implementation is simple, but security is insufficient to prevent identity theft

Engineering Contradiction:

ImprovesecurityVSAvoiduser operation complexity

Core Design Contradiction:

ReliabilityVSEase of operation

Solution Approach 1:

The patent implements self-service authentication where users independently generate and manage their own cryptographic key pairs (private and public keys). The system automatically handles the secure storage and utilization of these keys for authentication, eliminating the need for traditional password management while maintaining user control and security.

Inventive Principle:

Principle #25Self-service

Solution Approach 2:

The patent replaces the mechanical username-password authentication system with a cryptographic-based authentication mechanism. Instead of relying on memorized secrets, the system uses mathematical proofs through digital signatures and hash functions, providing superior security while simplifying the user interaction model.

Inventive Principle:

Principle #28Mechanics substitution (Replace mechanical system)

3Productivity

If certification records are made discoverable for verification purposes, then verification efficiency improves, but the ability to keep valuable certifications secret is lost

Engineering Contradiction:

Improveverification efficiencyVSAvoidloss of privacy

Core Design Contradiction:

ProductivityVSLoss of information

Solution Approach 1:

The patent creates a copy of the certification record in hashed form and stores it on the public blockchain. This copy enables efficient verification without exposing the actual certification information. The original secret certification data remains privately stored on the sidechain, while the public copy provides verification capabilities.

Inventive Principle:

Principle #26Copying

Solution Approach 2:

The patent transforms the certification data by applying cryptographic hashing functions, changing its parameter state from readable/secret to verifiable/obfuscated. This parameter change allows the same data to serve dual purposes: maintaining secrecy while enabling public verification through the hash comparison mechanism.

Inventive Principle:

Principle #35Parameter changes

Data Source

PatentUS11799668B2Electronic identification verification methods and systems with storage of certification records to a side chain

Publication Date: 2023.10.24 PING IDENTITY CORP

AI summary

Method of certification including receiving user data at a device of a certifying entity. The method includes generating a salt that is unique. The method includes hashing the data combined with the salt to create a generated hashed data. The method includes generating a certification record based on signing the generated hashed data using a private key of the certifying entity to create a signed certification of the data. The method includes hashing the certification record. The method includes transmitting the hashed certification record to a blockchain for storing. The method includes receiving a certification tx-ID of the hashed certification record. The method includes generating a certification data block including the certification record and the certification tx-ID. The method includes storing the certification data block to a side chain.