Blockchain Identity with Multi-Level Data Encryption

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Current identity management systems lack effective methods for remote identity proofing, especially in digital environments, and fail to provide granular control over sensitive identity data access, which is crucial for secure payroll transactions and employee verification.

Innovation Solution

A distributed ledger system, utilizing blockchain technology, encrypts multi-level identity data with digital public keys, allowing employees to control access levels and grant permissions to third parties, combining public key infrastructure and payroll cloud services for secure and remote identity verification.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Adaptability or versatility

If identity data is stored in a distributed ledger for remote identity proofing, then identity verification capability is improved, but data security and access control become more complex

Engineering Contradiction:
Improveremote identity proofing capabilityVSAvoiddata access control complexity
Core Design Contradiction:
Adaptability or versatilityVSDevice complexity

Solution Approach 1:

The patent segments identity data into multiple sensitivity levels (e.g., public information, private information, confidential information). Each level is stored in the distributed ledger with different access permissions, allowing remote identity proofing while maintaining granular control over what information is accessible to third parties.

Inventive Principle:
Principle #1Segmentation

Solution Approach 2:

The patent applies different access control policies to different portions of identity data based on their sensitivity levels. Third parties can access only the specific level of data required for their purpose, while more sensitive data remains protected. This allows versatile identity verification while keeping access control manageable through localized permission settings.

Inventive Principle:
Principle #3Local quality

2Reliability

If all identity data is made accessible for verification, then identity proofing effectiveness is improved, but data privacy and security are compromised

Engineering Contradiction:
Improveidentity verification effectivenessVSAvoiddata privacy risk
Core Design Contradiction:
ReliabilityVSObject-affected harmful factors

Solution Approach 1:

The patent implements partial action by allowing third parties to access only the specific level of identity data required for verification purposes. Instead of exposing all identity information, the system provides sufficient data for reliable identity proofing while withholding excessive information that would compromise privacy. For example, a third party may only need to verify basic identity attributes rather than accessing sensitive personal information.

Inventive Principle:
Principle #16Partial or excessive action

3Object-affected harmful factors

If granular access control is implemented for multi-level identity data, then data security is improved, but system complexity increases

Engineering Contradiction:
Improvedata securityVSAvoidsystem architecture complexity
Core Design Contradiction:
Object-affected harmful factorsVSDevice complexity

Solution Approach 1:

The patent adds a dimensional layer to identity data storage by organizing data across multiple sensitivity levels rather than a single flat structure. This dimensional organization allows the system to maintain simple access control rules at each level while achieving comprehensive security through the layered architecture. The multi-level structure enables granular security without requiring complex permission management for every individual data element.

Inventive Principle:
Principle #17Another dimension (Dimensionality change)

Data Source

PatentUS11238543B2Payroll based blockchain identity
Publication Date: 2022.02.01 ADP INC
  • US11238543B2 patent drawing
  • US11238543B2 patent drawing
  • US11238543B2 patent drawing

AI summary

A method of using a distributed ledger maintained solely in a computer network. Wage payment information is received from an employer regarding an employee. A copy of a digital public key uniquely associated with the employee is received. A transaction is issued to the distributed ledger at a time of wage issuance, along with identity data encrypted with the digital public key, the identity data uniquely associated with the employee, the identity data being multi-level identity data based on levels of data sensitivity, and the identity data including information controllable by the employee to designate which level of the multi-level identity data can be accessed using a data level code and a digital signing key belonging to the employee. A level of the multi-level identity data can be made available to a third party upon being identified with the data level code and upon being decrypted with the digital signing key.