Digital Identity Network for Secure Consent Verification

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Obtaining secure and verified consent from authorized users for operations, such as financial transactions, is challenging due to the lack of secure digital verification methods, where the authenticity of the user providing consent may not be guaranteed in electronic requests.

Innovation Solution

A system utilizing a digital identity network, including a permissioned blockchain, where a unique key is generated and managed to ensure that only authorized users can consent to operations, with the key being blind to both institutions involved, ensuring secure and verified consent through a decentralized peer-to-peer network.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Ease of operation

If digital or electronic requests for consent are used, then the ease of operation is improved, but the reliability deteriorates as the user providing consent may not be verified as the authorized user

Engineering Contradiction:
Improveease of obtaining consentVSAvoidverification of authorized user
Core Design Contradiction:
Ease of operationVSReliability

Solution Approach 1:

The patent introduces a digital identity network as an intermediary between the entity and the authorized user. This network receives consent requests from entities, verifies the identity of users providing consent through cryptographic methods, and returns verification results. The intermediary solves the contradiction by enabling electronic consent operations while maintaining reliable verification of authorized users through its identity verification capabilities.

Inventive Principle:
Principle #24Intermediary (Mediator)

2Reliability

If physical presence is required for consent, then the reliability of verification is improved, but the ease of operation deteriorates as the authorized user must be physically present

Engineering Contradiction:
Improveverification of authorized userVSAvoidease of obtaining consent
Core Design Contradiction:
ReliabilityVSEase of operation

Solution Approach 1:

The patent replaces the mechanical system of physical presence verification with a digital/cryptographic system. Instead of requiring the authorized user to be physically present, the system uses digital identity verification methods where the user's device communicates with the digital identity network through encrypted channels. The network verifies identity cryptographically and returns verification results, substituting physical verification mechanisms with digital ones while maintaining reliability.

Inventive Principle:
Principle #28Mechanics substitution (Replace mechanical system)

3Reliability

If a permissioned blockchain is used for digital identity network, then the reliability of consent verification is improved through decentralized verification, but the device complexity increases

Engineering Contradiction:
Improveverification of consentVSAvoidsystem complexity
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

The patent implements a permissioned blockchain where multiple nodes (institutions) perform identical verification functions. Each node in the digital identity network can independently verify consent requests using the same cryptographic protocols and consensus mechanisms. This multi-functionality distributes the verification capability across multiple identical systems, improving reliability through decentralization while managing complexity through standardized, reusable verification components that each node implements.

Inventive Principle:
Principle #6Universality (Multi-functionality)

Data Source

PatentUS11989278B2Method and system for obtaining consent to perform an operation
Publication Date: 2024.05.21 THE TORONTO DOMINION BANK
  • US11989278B2 patent drawing
  • US11989278B2 patent drawing
  • US11989278B2 patent drawing

AI summary

A server comprises a communications module; a processor coupled with the communications module; and a memory coupled to the processor and storing processor-executable instructions which, when executed by the processor, configure the processor to receive, via the communications module and from a computing device, a signal representing a request to add an authorized user to an account of an entity hosted by a first institution associated with the server; send, via the communications module and to a second server associated with a second institution hosting an account of the authorized user, a signal that includes a unique key and an identifier of the entity, the signal causing the second server to store the unique key and the identifier in memory and associating the unique key and the identifier with the account of the authorized user; receive a signal representing a request to perform an operation for the entity; in response to receiving the request to perform the operation, send, via the communications module and to a digital identity network, a request for a unique key associated with the entity; receive, via the communications module and from the digital identity network, the unique key; and in response to receiving the unique key, perform the operation.