Digital ID Linking for Multi-Certificate Authentication
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing trust services face challenges in accommodating various assurance levels, managing multiple electronic certificates, and facilitating cross-border operations due to differences in laws and regulations, leading to complexity and inconvenience in identity verification and service cooperation.
Innovation Solution
An electronic authentication system that issues a digital ID linked to multiple electronic certificates with varying assurance levels, enabling certificate switching and flexible inter-service cooperation by incorporating eKYC methods like My Number card and passport verification, and employing multiple certification authorities to ensure compatibility with diverse legal requirements.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If strict identity authentication using electronic certificates is performed to ensure high assurance level, then security and legal compliance are improved, but privacy is compromised and management complexity increases
Solution Approach 1:
The patent segments the traditional single electronic certificate system into multiple certificate types (basic electronic certificate, qualified electronic certificate, foreign electronic certificate) that can be selectively used. This segmentation allows users to choose appropriate certificates for different services, protecting privacy while maintaining necessary assurance levels for legal compliance.
Solution Approach 2:
The patent implements dynamic certificate selection and switching capabilities, allowing the system to adaptively choose the appropriate certificate type based on service requirements and legal conditions. This dynamic approach enables flexible balance between privacy protection and assurance level requirements.
2Adaptability or versatility
If multiple electronic certificates are managed separately to satisfy different assurance levels, then adaptability to various services is improved, but management complexity increases
Solution Approach 1:
The patent creates a universal digital ID system that serves as a common foundation for multiple electronic certificates. This digital ID can be linked to various certificate types (domestic, foreign, different assurance levels), providing a multi-functional management approach that reduces complexity while maintaining service adaptability.
Solution Approach 2:
The patent introduces a trust service provider as an intermediary that manages the linkage between digital ID and multiple electronic certificates. This intermediary handles the complexity of certificate management, verification, and switching, allowing users to benefit from multi-certificate adaptability without directly managing the complexity.
3Reliability
If different identity authentication methods are used for each country to comply with local laws, then legal compliance is improved, but cross-border trust service capability deteriorates
Solution Approach 1:
The patent creates a universal digital ID framework that can accommodate multiple country-specific authentication methods. The system can link digital IDs with foreign electronic certificates from different countries, enabling cross-border trust services while maintaining compliance with each country's legal requirements through appropriate certificate selection.
4Ease of operation
If a single electronic certificate is used for all services, then management simplicity is improved, but inter-service cooperation capability deteriorates
Solution Approach 1:
The patent implements automatic certificate selection and switching mechanisms that enable the system to self-manage the appropriate certificate for each service context. This self-service capability maintains management simplicity for users while achieving inter-service cooperation through automatic adaptation to different service requirements.
Data Source
Figure 1
Figure 2
Figure 3
AI summary
This electronic authentication system comprises: an ID provider which issues a digital ID to a user after confirming the identity of the user; a first authentication authority which issues a first electronic certificate to the user; and a second authentication authority which issues a second electronic certificate to the user, wherein the first authentication authority and the second authentication authority combine the same digital ID issued to the user by the ID provider into the first electronic certificate and the second electronic certificate.