Digital Identity Provisioning With Device ID Validation

Resolve Bottlenecks,
Find Innovative SolutionsGenerate Solutions

Solution Overview

Problem

Existing digital identity verification systems lack validation of unique device identifiers, leading to exposure in data security and proliferation of multiple identities across devices, compromising user authentication.

Innovation Solution

Systems and methods that validate unique device identifiers associated with computing devices, combined with biometrics and other verifications, to ensure secure and efficient registration of digital identities, utilizing a multi-factor authentication process.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If digital identities are registered without validating unique device identifiers, then the registration process is simple and fast, but data security is compromised and identity multiplication occurs

Engineering Contradiction:

Improvedata securityVSAvoidregistration process complexity

Core Design Contradiction:

ReliabilityVSDevice complexity

Solution Approach 1:

The system performs preliminary validation of the unique device identifier against the database before completing the digital identity registration. This preliminary check ensures that the device has not been previously associated with a digital identity, preventing identity multiplication while maintaining a streamlined registration process.

Inventive Principle:

Principle #10Preliminary action

Solution Approach 2:

The unique device identifier acts as an intermediary element between the user and the digital identity registration system. By validating this intermediary identifier, the system establishes a secure link between the user and the digital identity without requiring complex multi-step verification processes.

Inventive Principle:

Principle #24Intermediary (Mediator)

2Adaptability or versatility

If multiple digital identities can be registered across different devices, then user accessibility is improved, but identity theft and fraud risk increase

Engineering Contradiction:

Improveuser accessibilityVSAvoididentity theft risk

Core Design Contradiction:

Adaptability or versatilityVSObject-affected harmful factors

Solution Approach 1:

The system segments the digital identity registration process into distinct components: user authentication, device identifier validation, and identity creation. By validating the unique device identifier as a separate segment, the system ensures that each digital identity is tied to a specific device, preventing fraud while allowing users to access their identities across different devices.

Inventive Principle:

Principle #1Segmentation

3Ease of operation

If device identifiers are not validated against existing digital identities, then the system is simple to operate, but proliferation of multiple identities occurs

Engineering Contradiction:

Improveregistration easeVSAvoidnumber of digital identities

Core Design Contradiction:

Ease of operationVSQuantity of substance

Solution Approach 1:

The system incorporates feedback by checking the unique device identifier against the database of previously registered digital identities. This feedback mechanism automatically prevents registration of additional identities on the same device, controlling the quantity of digital identities while maintaining ease of operation through automated validation.

Inventive Principle:

Principle #23Feedback

Data Source

PatentUS12580911B2Systems and methods for use in securing digital identities for user authentication

Publication Date: 2026.03.17 MASTERCARD INT INC

AI summary

Systems and methods are provided for use in provisioning digital identities for users. One example computer-implemented method includes receiving, by a computing device, a request to register a digital identity to the communication device, where the request includes a unique device identifier specific to the communication device and at least one biometric, and determining, by the computing device, whether the unique device identifier is associated with an existing digital identity. The method also includes, in response to determining that the unique device identifier is associated with the existing digital identity, declining, by the computing device, provisioning of a digital identity to the communication device.