Blockchain Trust Verification for Secure Data Space Authentication
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current data spaces rely on central identity providers, which are vulnerable to security breaches and lack non-repudiation mechanisms, allowing attackers to infiltrate and compromise the network, leading to the consumption of counterfeit or unreliable data.
Innovation Solution
A decentralized trust verification module using blockchain technology for identity verification, ensuring secure authentication and authorization by validating identity certificates through a distributed system, including issuer verification and signature checks, preventing unauthorized access.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If a central identity provider is used for trust verification, then the authentication process is simplified and centralized, but the system becomes vulnerable to security breaches and single points of failure
Solution Approach 1:
The patent divides the centralized identity provider into multiple distributed identity verification nodes across a blockchain network. Each node independently verifies identities using cryptographic proofs, eliminating the single point of failure while maintaining authentication functionality through distributed consensus mechanisms.
Solution Approach 2:
The patent introduces blockchain technology as an intermediary layer between participants and the identity verification system. The blockchain ledger serves as a trusted mediator that records and verifies identity credentials without requiring a central authority, thereby enhancing security while preserving ease of authentication.
2Device complexity
If a centralized identity provider is implemented, then the system architecture is simpler to manage, but the risk of system collapse due to compromise increases
Solution Approach 1:
The patent segments the identity provider functionality across multiple distributed nodes in the blockchain network. Each node maintains a copy of the verification logic and independently processes authentication requests, ensuring that compromise of individual nodes does not lead to system-wide failure.
Solution Approach 2:
The patent changes the operational parameters of the identity verification system by implementing cryptographic proof mechanisms and distributed consensus protocols. These parameter changes transform the system from a centralized vulnerable architecture to a decentralized resilient architecture that can withstand node failures and attacks.
3Loss of time
If traditional identity verification methods are used, then the authentication process is faster to implement, but non-repudiation mechanisms are absent allowing attackers to infiltrate
Solution Approach 1:
The patent implements preliminary action by pre-issuing cryptographic credentials and establishing verification rules on the blockchain before authentication events occur. This allows for rapid authentication without compromising security, as the non-repudiation mechanisms are already in place through cryptographic signatures and immutable ledger records.
Data Source
Figure 1~2
AI summary
The invention relates to a computer-implemented method performed by a trust verification module (30) in a data space. The method comprises receiving (110), from a first participant (10), a registration request for registration to the data space; transmitting (120), to the first participant (10), a certificate request for requesting transmission of an identity certificate; receiving (130), from the first participant (10), the identity certificate; verifying (140), by utilizing a blockchain, whether the received identity certificate is valid; transmitting (150), to the first participant (10), a token for enabling data transfer between the first participant (10) and a second participant (20) if the identity certificate is valid.