Credential Transactions With Digital Trust Assessment Signals

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Current self-sovereign identity (SSI) infrastructure lacks mechanisms to securely track, log, and monetize transactions, and there are challenges in establishing trust between entities due to the limitations in verifying the authenticity and trustworthiness of cryptographically verifiable credentials.

Innovation Solution

A system is introduced that incorporates a digital trust assessment service to monitor and assess the reputation of entities based on network activity and telemetry data, providing an additional layer of trust through cryptographically secure signaling information, and uses transaction agents to track and monetize transactions without altering the core SSI infrastructure.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If cryptographically verifiable credentials are used for transactions, then security and trust are improved, but the complexity of verifying authenticity and trustworthiness increases

Engineering Contradiction:
ImprovetrustworthinessVSAvoidverification complexity
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

The patent introduces a digital trust assessment service as an intermediary that generates trust assessments based on telemetry data. This mediator simplifies the verification process by providing pre-evaluated trust information, reducing the complexity for entities to verify credential authenticity while maintaining high reliability through cryptographic verification of the trust assessments.

Inventive Principle:
Principle #24Intermediary (Mediator)

2Reliability

If transaction tracking and logging mechanisms are added to SSI infrastructure, then transaction security and monetization are improved, but the complexity of the system increases

Engineering Contradiction:
Improvetransaction securityVSAvoidsystem complexity
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

The patent segments the SSI system into distinct functional components: credential issuance, transaction execution, telemetry collection, trust assessment generation, and transaction tracking. Each component operates independently with well-defined interfaces, allowing transaction security and monetization features to be added without significantly increasing overall system complexity. The segmentation enables modular implementation and maintenance of tracking mechanisms.

Inventive Principle:
Principle #1Segmentation

3Measurement precision

If telemetry data monitoring is implemented to assess entity reputation, then trust assessment accuracy is improved, but the amount of data processing and storage requirements increase

Engineering Contradiction:
Improvetrust assessment accuracyVSAvoiddata volume
Core Design Contradiction:
Measurement precisionVSQuantity of substance

Solution Approach 1:

The patent extracts only the essential and relevant features from the collected telemetry data that are necessary for trust assessment, rather than processing and storing all raw data. By selecting and extracting key indicators of entity behavior and reputation, the system achieves high trust assessment accuracy while minimizing data processing and storage requirements, effectively separating the essential assessment information from the bulk raw telemetry data.

Inventive Principle:
Principle #2Taking out (Extraction)

Data Source

PatentUS12483422B2Systems and methods for credential-based transactions over a network
Publication Date: 2025.11.25 GEN DIGITAL INC
  • US12483422B2 patent drawing
  • US12483422B2 patent drawing
  • US12483422B2 patent drawing

AI summary

Systems and methods for transacting over a network enable transacting on behalf of a first entity at a plurality of first network locations based on one or more first cryptographically verifiable credentials for a plurality of first network-enabled services. One or more assessments of the first entity are determined based on the transacting on behalf of the first entity at the plurality of first network locations based on the one or more first cryptographically verifiable credentials. One or more second cryptographically verifiable credentials are generated as one or more digitally signed credentials based on the one or more assessments of the first entity. The systems and methods further enable transacting on behalf of the first entity at one or more second network locations based on the one or more second cryptographically verifiable credentials for a second network-enabled service.