Blockchain Identity Verification Under Cross-Border Data Sovereignty
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
The challenge of performing transnational and transregional identity verification is hindered by strict data control policies in different countries, preventing the cross-border exchange of sensitive identity authentication data such as fingerprints and facial data.
Innovation Solution
A blockchain-based identity verification method that allows identity verification by sending a request to a digital identity client for signature information and a public key, which is then checked against a first blockchain node, ensuring compliance with data control regulations by using hash values instead of sensitive information.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If traditional identity verification methods are used that require transmitting sensitive data across borders, then identity verification can be performed, but data sovereignty laws and strict data control policies are violated
Solution Approach 1:
The patent extracts only the essential verification element (public key) from the complete identity data set, allowing verification to occur without transmitting sensitive personal information across borders. The public key is stored locally in each country's blockchain, enabling cross-border verification while maintaining data sovereignty.
Solution Approach 2:
The patent introduces blockchain technology as an intermediary layer between identity data and verification processes. The blockchain stores public keys and verification records in a distributed, immutable manner, allowing third-party verification without direct access to sensitive identity data, thus resolving the conflict between verification needs and data protection.
2Ease of operation
If sensitive identity data is stored and transmitted across borders for verification, then verification can be performed, but security risks and data leakage vulnerabilities increase
Solution Approach 1:
The patent creates a cryptographic copy (public key) of the identity data that can be freely transmitted and verified without exposing the original sensitive information. The public key serves as a functional copy that enables verification while containing no personally identifiable information that could be leaked.
Solution Approach 2:
The patent replaces the mechanical system of direct data transmission and storage with a cryptographic system based on public key infrastructure. Instead of transmitting actual identity data, the system uses mathematical cryptography to enable verification, eliminating the security vulnerabilities associated with data transmission and storage.
3Device complexity
If centralized identity verification systems are used, then verification processes can be simplified, but single points of failure and tampering vulnerabilities are created
Solution Approach 1:
The patent segments the centralized verification system into distributed blockchain nodes across multiple countries. Each node maintains a copy of the verification data locally, eliminating the single point of failure. The segmentation also allows each country to maintain control over its own data while participating in the global verification network.
Solution Approach 2:
The patent merges multiple distributed blockchain nodes into a unified verification network that operates as a single reliable system. Despite the physical distribution, the blockchain technology combines the nodes' data and verification capabilities into a consistent, tamper-proof system that provides the reliability of a centralized system without the vulnerability to single points of failure.
Data Source
Figure 1
Figure 2
Figure 3
AI summary
The present application relates to the field of computer technologies, and discloses method and a system for identity verification, so that transnational identity verification can be performed under the conditions that data leaving countries is controlled by respective countries. The method includes: sending, by an application requiring an identity verification service, a first request to a digital identity client, the first request including an identifier and first information; receiving, by the application, signature information and a public key corresponding to the identifier returned by the digital identity client, wherein the signature information is acquired by digitally signing the first information using a private key corresponding to the public key by the digital identity client; sending, by the application, a second request to a first node of a first blockchain, the second request including the signature information and the public key for the first node to perform checking according to the signature information and the public key; and receiving, by the application, a checking result of the checking returned by the first node, and performing identity verification according to the checking result.