Blockchain Identity Translation via PKI Certificate Mapping
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current blockchain digital certificates are not associated with verified real-world identities via existing PKI certificates issued by third-party certificate authorities, making them redundant in high-assurance industries and lacking integration with external public key infrastructure to enhance identity management.
Innovation Solution
The system and methods involve obtaining a digital certificate from a certificate authority, registering it with a blockchain identity translation service, and mapping the certificate to a user's cryptographic wallet, ensuring authentication through public key verification and biometric tests, thereby linking the certificate to blockchain accounts.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Adaptability or versatility
If blockchain digital certificates are issued independently without association with existing PKI certificates, then blockchain identity systems can operate autonomously, but the certificates become redundant in high-assurance industries and lack integration with external public key infrastructure
Solution Approach 1:
The patent merges blockchain digital certificates with traditional PKI certificates by creating a mapping service that associates blockchain addresses with verified real-world identities through existing certificate authorities. This combining approach allows blockchain systems to leverage the trust and verification mechanisms of established PKI infrastructure while maintaining blockchain autonomy.
Solution Approach 2:
The patent introduces a mapping service as an intermediary component that bridges blockchain identity systems and external PKI infrastructure. This mediator translates and associates blockchain addresses with traditional digital certificates, enabling integration without requiring direct modification of either system's core architecture.
2Reliability
If blockchain identity systems use only cryptographic verification without external certificate authority validation, then the systems can operate independently, but user identities may not be verified in the real world leading to identity fraud
Solution Approach 1:
The patent implements preliminary action by requiring users to obtain and register verified PKI certificates with the mapping service before engaging in blockchain transactions. This pre-verification process ensures that identities are validated by trusted external certificate authorities in advance, preventing identity fraud before it occurs on the blockchain.
Solution Approach 2:
The mapping service acts as an intermediary verification layer that connects cryptographic verification on the blockchain with real-world identity validation through external certificate authorities. This mediator enables both cryptographic and traditional verification mechanisms to work together without increasing overall system complexity.
3Reliability
If existing PKI certificates are mapped to blockchain addresses, then identity fraud is reduced and validity is enhanced, but blockchains must be adapted to manage previously issued certificates increasing system complexity
Solution Approach 1:
The patent uses a mapping service as an intermediary layer that handles the adaptation complexity of integrating existing PKI certificates with blockchain systems. This mediator translates and associates traditional certificate data with blockchain addresses without requiring fundamental changes to blockchain architecture, thereby maintaining blockchain versatility while improving certificate validity.
Solution Approach 2:
The patent segments the identity verification process into distinct components: external PKI certificate validation, mapping service association, and blockchain transaction verification. This segmentation allows each component to operate independently with its own verification standards, reducing the adaptation burden on blockchain systems while enhancing overall certificate validity.
Data Source
AI summary
Blockchain applications can generate public/private key pairs without knowing the true identity of the owner of the private key. Many applications, such as in healthcare or corporate banking, require known identities for legal or regulatory reasons. Therefore a mapping between PKI certificate credentials maintained by certificate authorities and blockchain credentials is needed as one means of transferring real-world identity to blockchain applications. A method and system are provided to associate a PKI certificate to one or more accounts in a cryptographic wallet and extend the due diligence of a third-party certificate authority for identity management on blockchains.