Decentralized Identity Authentication Using Challenge-Based Access Control
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Managing user identities and securing data on the Internet is challenging, with centralized systems facing issues of privacy concerns, surveillance, and high infrastructure costs, while existing solutions fail to provide robust privacy controls for secure information exchange.
Innovation Solution
A decentralized Internet Protocol-based communication protocol (@protocol) enables user-controlled access control, allowing individuals to manage their personal information and data through a namespace directory and decentralized resource directories, ensuring secure and private exchanges without reliance on third-party services.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If centralized identity management systems are used, then infrastructure costs are high and surveillance risks increase, but user identity security and access control capability are improved
Solution Approach 1:
The patent extracts the identity verification function from centralized systems and places it in decentralized resource directories. Each user's authentication data is stored in their own decentralized directory, eliminating the need for centralized identity management infrastructure while maintaining security and access control capabilities.
Solution Approach 2:
The patent segments the centralized identity management system into distributed decentralized resource directories. Instead of one central authority, identity verification is distributed across multiple independent directories, each managing its own authentication data, thereby reducing infrastructure complexity and surveillance risks.
2Object-affected harmful factors
If decentralized resource directories are used, then privacy control and reduced surveillance are achieved, but authentication complexity increases
Solution Approach 1:
The patent implements preliminary action by pre-establishing authentication challenge values and keys in decentralized resource directories before actual authentication is needed. When authentication is required, the system simply retrieves and verifies these pre-stored values, simplifying the real-time authentication process while maintaining strong security and privacy controls.
3Reliability
If authentication challenge values are stored in decentralized resource directories, then secure access control is enabled, but data storage and retrieval overhead increases
Solution Approach 1:
Authentication challenge values and keys are pre-stored in decentralized resource directories during setup or registration phases. This preliminary action ensures that when authentication is needed, the system only needs to perform quick retrieval and verification operations, minimizing data retrieval time while maintaining strong access control security.
Data Source
AI summary
The present disclosure involves systems, software, and computer implemented methods for user-controlled access control for user information. One example method includes sending an authentication request to authenticate as a requesting entity to a first decentralized resource directory of a providing entity. An authentication challenge is received, via the connection, from the providing entity, and in response to the authentication request, to store an authentication challenge value for an authentication challenge key in a second decentralized resource directory of the requesting entity. The authentication challenge value for the authentication challenge key is stored in the second decentralized resource directory. An authentication challenge response is sent to the providing entity requesting the providing entity to verify the authentication challenge. An indication is received from the providing entity indicating that the requesting entity is authenticated to the first decentralized resource directory as the requesting entity.