Digital Credential Instances With Unique MSOs for Unlinkable Sharing
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing digital credentials can be linked across different requestors, compromising user privacy and allowing unauthorized sharing of personal information.
Innovation Solution
Generating multiple instances of digital credentials with unique mobile security objects (MSOs) for each request, ensuring that different instances are used for different requestors to prevent linkage and maintain privacy.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If a single digital credential instance is used for multiple requestors, then operational simplicity is maintained, but user privacy is compromised and linkage between requests occurs
Solution Approach 1:
The patent segments the digital credential system by creating multiple independent credential instances, each with its own unique mobile security object (MSO). Instead of using a single credential for all requestors, the system divides credentials into separate instances that can be independently used and cannot be linked to each other, thereby protecting user privacy while maintaining manageable complexity through automated instance selection
Solution Approach 2:
The patent introduces a new dimension of credential instantiation by creating multiple versions of the same credential with different MSOs. This dimensional expansion allows the system to provide both privacy protection (through unlinkability) and operational simplicity (through automated selection), resolving the contradiction between reliability and complexity
2Loss of information
If multiple instances of digital credentials are generated with unique mobile security objects, then user privacy and unlinkability are enhanced, but credential generation and management complexity increases
Solution Approach 1:
The patent introduces an intermediary credential management system that handles the complexity of generating and managing multiple credential instances. This intermediary layer automatically selects appropriate credential instances for different requestors, preventing personal information sharing while abstracting away the complexity of multi-instance management from the end user
Solution Approach 2:
The patent changes the parameters of credential generation by introducing unique mobile security objects for each credential instance. This parameter change ensures that each credential instance has distinct cryptographic properties, preventing linkage and information sharing, while the automated management system handles the increased complexity of generating these parameterized variants
Data Source
AI summary
A computing device can receive a request from a requesting device for one or more data elements associated with a digital credential. The computing device can store the digital credential which includes a set of data elements and a security object. The computing device can determine a subset of the data elements based at least in part on the request. The computing device can generate the response, wherein the response includes the subset of the data elements and the security object. The computing device can transmit the response to the requesting device.