Digital Credential File Verification With Device-Bound Authentication
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current payment and digital identification systems are fragmented and insecure, leading to data compromise and identity theft during electronic transactions, with a growing need for secure storage and display of user credentials.
Innovation Solution
A computer-implemented method and apparatus for generating and verifying officially verifiable electronic representations (OVER Files) using a credential database that stores credentials with status indicators, incorporating additional information like passwords, biometrics, and device identifiers for secure verification.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Productivity
If digital credentials are stored and transmitted during electronic transactions, then convenience and efficiency are improved, but security and risk of identity theft deteriorate
Solution Approach 1:
The patent introduces a credential verification system that acts as an intermediary between credential holders and verification systems. This intermediary validates credentials through a standardized process, ensuring security while maintaining transaction efficiency. The system mediates the interaction by providing a trusted third-party verification mechanism that prevents direct exposure of sensitive credential data.
Solution Approach 2:
The patent transforms credentials into a standardized digital format with specific parameters including unique identifiers, status indicators, and verification codes. By changing the parameter structure of credentials from varied physical formats to a unified digital schema, the system enables automated verification while maintaining security through controlled data exposure.
2Ease of operation
If traditional forms of ID are replaced by digital credentials, then convenience is improved, but security and risk of fraud deteriorate
Solution Approach 1:
The patent creates digital copies of traditional credentials that maintain the essential verifying information while eliminating the physical vulnerabilities of paper IDs. These digital copies include verified attribute data that can be authenticated without exposing the entire credential, providing convenience while reducing fraud risk through selective information disclosure.
Solution Approach 2:
The patent segments credential information into distinct components: unique identifiers, status indicators, verification codes, and attribute data. This segmentation allows the system to provide only the necessary verification information during transactions rather than exposing the complete credential, thereby maintaining convenience while enhancing security through controlled information release.
3Reliability
If credentials are verified through additional information like passwords and biometrics, then security is improved, but device complexity and verification time deteriorate
Solution Approach 1:
The patent implements preliminary verification by pre-establishing the credential database structure with all necessary verification fields and status indicators before transactions occur. Additional verification information such as biometric data and device identifiers are pre-linked to credentials during issuance, allowing rapid verification during transactions without adding real-time complexity.
Solution Approach 2:
The patent designs a universal credential verification system that handles multiple verification methods (passwords, biometrics, device identifiers) through a single standardized process. The credential database structure is multi-functional, capable of storing and verifying different types of additional information using the same verification protocol, thereby reducing overall system complexity despite supporting multiple security layers.
Data Source
AI summary
In various embodiments, a computer-implemented method for generating and verifying officially verifiable electronic representations may be disclosed. The method may include storing information associated with a credential of a user for proving the user's identity or qualifications; receiving a file generation request to provide authentication of the user based on the information associated with the credential; generating a file comprising a virtual representation of the credential that has been verified by an issuing agency to be an official representation of the credential; transmitting the file; receiving a verifying request whether the file transmitted to the user authenticates the user; verifying that a NFC or Bluetooth protocol-based communication associated with the file corresponds with the credential of the user, in response to the verifying request; and transmitting an authentication message indicating whether the NFC or Bluetooth protocol-based communication corresponds to the information associated with the credential of the user.