Event-Based DID Authority Transfer Mechanism
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Centralized identity management systems lack flexibility in managing delegated authority changes, such as those occurring due to legal relationships or agreements, which can lead to unauthorized access or loss of control for DID users.
Innovation Solution
Implementing an event-based transfer mechanism for delegated authority of Decentralized Identifiers (DIDs), where the system automatically revokes or maintains delegation based on changes in legal relationships or agreements, ensuring that the DID user regains control upon specified events, like reaching adulthood or termination of agreements.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If centralized identity management systems are used to manage delegated authority, then security and control are maintained, but flexibility and automatic revocation capability are lost
Solution Approach 1:
The patent introduces a distributed ledger as an intermediary between the centralized identity management system and the delegation relationships. This intermediary enables automatic detection of revocation events (such as termination of legal relationships) and triggers automated revocation of delegated authority, combining the security of centralized systems with the flexibility of automatic adaptation to changing conditions.
2Ease of operation
If manual management of delegated authority is used, then user control is maintained, but time consumption and operational complexity increase
Solution Approach 1:
The system implements self-service by automatically monitoring for revocation events (such as changes in legal relationships or agreement terminations) and automatically revoking delegated authority without requiring user intervention. This eliminates the time-consuming manual processes while maintaining user control through the automated response to user-defined conditions.
Solution Approach 2:
The patent establishes a feedback mechanism where the system continuously monitors for events indicating changes in legal relationships or agreement status, and automatically responds by revoking delegation when such events are detected. This closed-loop feedback system eliminates manual intervention while ensuring timely revocation of authority.
3Ease of operation
If delegated authority is granted without automatic revocation mechanisms, then ease of delegation is maintained, but risk of unauthorized access increases
Solution Approach 1:
The patent implements preliminary action by pre-configuring revocation conditions and event monitoring mechanisms at the time of delegation. When predefined events occur (such as termination of legal relationships), the system automatically executes revocation before unauthorized access can occur, thus maintaining ease of delegation while eliminating the risk of prolonged unauthorized access.
Data Source
AI summary
Embodiments are related to computing systems and methods for event based transfer of DID delegated authority. An indication is received that a first DID user is attempting to use a delegated DID on behalf of a second DID user. The first DID user has previously been delegated authority to use the delegated DID by operation of a legal relationship or a legal agreement between the first and second DID users. A determination is made if an event has occurred that has changed the legal relationship or the legal agreement between the first and second DID users. If an event has occurred, the delegation of authority to use the delegated DID is automatically revoked such that the first DID user is no longer able to use the delegated DID. If an event has not occurred, the first DID user is allowed to continue to use the delegated DID.