Blockchain Identity Token Verification System
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing identity verification systems are vulnerable to identity theft due to the exposure of long-lived identification sources during electronic communications, as they often require multiple sensitive information types to be shared with various online services.
Innovation Solution
A blockchain-based identity verification system that generates and manages tokens based on multiple distributed data sources, allowing for secure authentication without exposing the actual identity sources, by creating a blockchain that represents an online identity and using tokens with hash values to verify identities without direct access to sensitive information.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If multiple identification sources are shared with online services for identity verification, then identity verification capability is improved, but security against identity theft deteriorates
Solution Approach 1:
The patent extracts the essential verification capability from the original identification sources by generating tokens that represent verified attributes without exposing the actual sensitive data. The token contains only the necessary proof of identity verification while the underlying personal information remains protected in the blockchain, effectively separating verification functionality from sensitive data exposure.
Solution Approach 2:
The patent introduces tokens as an intermediary between the identity verification system and online services. Instead of directly sharing sensitive identification sources with multiple services, the system issues tokens that serve as mediators - these tokens prove identity verification without revealing the underlying personal information, thus reducing direct exposure of sensitive data while maintaining verification capability.
2Stability of the object's composition
If long-lived identification sources are used for identity verification, then verification stability is improved, but exposure risk during electronic communications increases
Solution Approach 1:
The patent employs short-lived tokens as disposable verification credentials instead of reusing long-lived identification sources. Each token is generated for a specific verification purpose and can be used once or for a limited time, then discarded. This approach maintains verification stability through consistent token generation from stable blockchain data while minimizing exposure risk because each token has a limited lifecycle and cannot be reused indefinitely.
3Adaptability or versatility
If multiple forms of identification are requested by different online services, then identity verification comprehensiveness is improved, but data transmission vulnerability increases
Solution Approach 1:
The patent creates a universal token system that can serve multiple online services with a single verification mechanism. Instead of requiring separate transmission of different identification sources to each service, the blockchain-based system generates tokens that can be universally accepted across different services. This maintains verification comprehensiveness by leveraging multiple underlying identity sources stored in the blockchain while reducing data transmission vulnerability by using a single token interface for all services.
Data Source
AI summary
An online identity can be verified based on data from multiple identity sources stored in a blockchain. For example, a request for a token is received from an entity for authenticating an online identity of the entity to an online service. The request can be stored in a blockchain that represents the online identity of the entity by adding a new block to the blockchain. The new block can include data indicating the request for the token. The token can be generated based on the one or more ordered blocks in the blockchain. The token can be transmitted to the entity. The token can be received from the online service. Confirmation of the online identity of the entity can be transmitted to the online service based on receiving the token from the online service.