Digital ID Access Credentials Without Storing Personal Data
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing electronic access control systems require storing personal identifying information of presenters, which raises privacy concerns and increases the risk of data breaches.
Innovation Solution
A decentralized identity-based access control system using blockchain and digital signatures to verify the authenticity and validity of electronic access keys, allowing issuers to grant access without storing personal identifying information on the access devices.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If traditional electronic access control systems store personal identifying information on access devices, then access control functionality is achieved, but privacy concerns increase and data breach risk increases
Solution Approach 1:
The patent extracts personal identifying information from the access control system by using digital IDs stored on users' personal devices rather than on the access control devices themselves. The access control system only stores and processes cryptographic keys and access credentials, while sensitive personal information remains on the user's device, thereby eliminating the harmful effect of centralized personal data storage.
Solution Approach 2:
The patent introduces digital signatures and cryptographic verification mechanisms as intermediaries between the access control system and personal identifying information. These intermediaries enable secure verification of user identity and access rights without requiring the system to store or process actual personal data, thus maintaining functionality while eliminating privacy risks.
2Object-affected harmful factors
If decentralized identity-based access control uses blockchain and digital signatures, then privacy is preserved and data storage is minimized, but system complexity increases
Solution Approach 1:
The patent uses cryptographic copies of access credentials and digital signatures instead of storing complete personal identifying information. The access control system stores only encrypted access rights and public keys, while the full digital ID with personal information remains on the user's device. This copying approach reduces storage requirements while maintaining the ability to verify identity and access rights.
3Reliability
If digital identification-based access control verifies authenticity using public keys, then security is improved, but processing time and computational requirements increase
Solution Approach 1:
The patent performs preliminary cryptographic operations during the access credential issuance phase, where the access control system pre-computes and stores encrypted access rights and public keys. During actual access verification, the system only needs to perform relatively simple decryption and signature verification operations, significantly reducing real-time processing time while maintaining high security through the preliminary establishment of cryptographic relationships.
Data Source
AI summary
An electronic key system is configured to provide an electronic key for physical space. The electronic key system includes a transaction terminal and an operator computing system communication with the transaction terminal. The transaction terminal is configured to communicate with a personal computing device of a user to which access rights are to be issued. The transaction terminal sends requests to the personal computing device for information from a digital identification of a user and for consent of the user to send an access credential thereto. The operator computing system validates the information of the digital identification with a public key of the issuer of the digital identification.