Blockchain Zero Knowledge Protocol for Privacy-Preserving Data Verification
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Conventional approaches lack a standardized method for verifying data, fail to prevent unauthorized access to related but unnecessary information, and lack mechanisms for ensuring data removal and identifying accessing entities.
Innovation Solution
A blockchain-based zero knowledge protocol is implemented to facilitate secure data sharing by allowing users to approve the release of verified data to specific entities, using tags to represent verified facts without disclosing extraneous information.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If conventional data sharing methods are used to provide verified information to requesting entities, then the requesting entity can obtain the necessary data, but unauthorized access to related but unnecessary information occurs
Solution Approach 1:
The patent extracts only the specific verified fact needed for verification (e.g., age, graduation status) from the complete data set and transmits it to the requesting entity. The zero-knowledge proof mechanism allows the verifier to confirm the truth of a statement without learning anything else about the underlying data, thus extracting only the necessary information while leaving sensitive details behind.
Solution Approach 2:
The patent introduces a federated registry as an intermediary that issues verified tags representing confirmed facts. This registry acts as a trusted mediator that certifies specific attributes without exposing the complete personal data. The tag serves as an intermediary representation that conveys verification status while protecting the underlying sensitive information.
2Measurement precision
If complete personal information is shared to verify identity or credentials, then verification accuracy is improved, but privacy protection deteriorates
Solution Approach 1:
The system extracts and transmits only the specific verified attribute (e.g., 'age >= 18', 'graduated from University X') without revealing the complete personal information. The zero-knowledge proof enables precise verification of the required fact while extracting and discarding all other unnecessary personal data elements.
Solution Approach 2:
The patent applies different levels of information disclosure to different verification needs. Each verified fact is represented by a specific tag that provides exactly the level of detail required for that verification purpose, no more and no less. This local quality approach ensures each data element is shared only to the extent necessary for its specific verification function.
3Adaptability or versatility
If data is released to multiple entities, then service accessibility is improved, but control over data removal deteriorates
Solution Approach 1:
Instead of sharing the original sensitive data with multiple entities, the system creates and distributes copies in the form of verified tags. These tags are self-contained representations of verified facts that can be independently validated without requiring access to the original data. The user maintains control over which tags are issued and can revoke access by preventing further tag distribution.
Solution Approach 2:
The federated registry acts as an intermediary that manages the issuance and potential revocation of verified tags. When a user wants to revoke access, they can instruct the registry to stop issuing new tags or to invalidate existing ones, maintaining control over data distribution without requiring direct intervention at each receiving entity.
4Reliability
If traditional verification systems are used to track data access, then audit capability is improved, but system complexity increases
Solution Approach 1:
The federated registry serves as a trusted intermediary that maintains the authoritative record of which entities have received which verified tags. This centralizes the audit function in a single trusted location rather than requiring complex distributed tracking across multiple entities. The registry can provide comprehensive audit trails by recording tag issuance and verification events.
Solution Approach 2:
The system implements feedback mechanisms where entities presenting tags for verification are recorded in the registry's audit trail. This creates a feedback loop that tracks data access without requiring complex monitoring at each verification point. The registry receives feedback about tag usage and maintains an immutable record of all verification events.
Data Source
AI summary
A system and associated methods or functionality for implementing a decentralized framework that facilitates independent third-party entities to authenticate and access specific confirmed facts about individuals. This enables individuals to share validated facts without revealing extraneous details or additional information they wish to remain confidential with regards to the third-party. The disclosed protocol and systems in which it is implemented enable achieving the goal of maintaining privacy and data security while facilitating exchange of the minimal amount of information required for a specific task, to comply with a regulation, or to fulfill a request.