Digital Identity Certificate Validation Without Issuer Communication
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Relying parties face challenges in validating Mobile Driver's Licenses (mDLs) issued by unfamiliar issuing entities, as they may not trust the validation provided by the issuing entity and lack direct communication channels.
Innovation Solution
A processing network computer receives account identifying information and a digital identity certificate, associates a token with the certificate, and transmits a message confirming provisioning, enabling validation and authorization of transactions using a public key infrastructure.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If relying parties use issuing entities to validate mDLs, then validation can be performed, but relying parties may not trust validation from unfamiliar issuing entities and may lack communication channels
Solution Approach 1:
The patent introduces a relying party toolkit as an intermediary component that enables relying parties to validate mDLs without requiring direct communication with or trust in the issuing entity. The toolkit provides standardized validation mechanisms that operate independently of the specific issuing entity, allowing any relying party to validate any mDL using common cryptographic principles and trusted root certificates.
2Reliability
If traditional plastic IDs are used, then issuing entities are familiar to relying parties, but they are easier to counterfeit and harder to update
Solution Approach 1:
The patent replaces the mechanical plastic ID system with a digital cryptographic system. Instead of physically secure plastic cards that can be copied, the system uses cryptographic signatures, public key infrastructure, and digital certificates that are computationally secure and cannot be physically replicated. The mDL is stored as digital data on a mobile device, eliminating the physical medium that enables counterfeiting.
Solution Approach 2:
The patent changes the fundamental parameters of the identification system from physical properties (plastic material, visual design) to digital properties (cryptographic keys, digital signatures, data structures). This transformation enables unlimited copies without degradation, instant updates through software, and cryptographic security that is theoretically unbreakable.
3Ease of manufacture
If mDLs are used, then they are harder to counterfeit and quicker to update, but relying parties cannot validate them without direct trust in the issuing entity
Solution Approach 1:
The relying party toolkit enables self-service validation where the relying party independently verifies the mDL using its own computational resources and trusted root certificates. The system does not require centralized validation services or direct trust relationships with issuing entities, allowing any relying party to autonomously validate any mDL without external assistance.
Data Source
AI summary
Techniques described herein enable a digital certificate (e.g., a mobile Driver's License (mDL)) to be used as a proxy for a credential. Using the digital certificate as a proxy for the credential can improve transaction security and benefit from trust established by processes implemented by a certification authority. The techniques can add functionality to a digital certificate since the digital certificate can be used as an account credential in addition to its previous function.