Digital Identity SDK for Secure Network Authentication

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Existing systems for managing user identities in networks often require cumbersome verification processes, involving physical documents or manual digital verification, which can be inefficient and inconvenient, especially when integrating with various network-based applications.

Innovation Solution

The integration of a digital identity software development kit (SDK) within network-based applications allows for the transformation of these applications into digital identity providers, enabling secure and efficient user verification through API calls, key pair generation, and biometric authentication, facilitating seamless interactions between users and relying parties.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If physical documents or manual digital verification are used for identity verification, then verification reliability is improved, but verification process complexity and time consumption increase

Engineering Contradiction:
Improveidentity verification reliabilityVSAvoidverification process complexity
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

The patent replaces manual physical document verification with an automated digital verification system. The SDK captures images of physical identity documents, performs optical character recognition (OCR) to extract text, and automatically validates the information against databases, substituting the manual mechanical verification process with an automated digital system that maintains reliability while reducing complexity

Inventive Principle:
Principle #28Mechanics substitution (Replace mechanical system)

Solution Approach 2:

The patent introduces an intermediary verification system that acts as a mediator between the user's physical identity documents and the digital verification process. The SDK serves as an intermediary layer that captures, processes, and validates document information, then transmits verified data to the application, simplifying the overall verification process while maintaining reliability

Inventive Principle:
Principle #24Intermediary (Mediator)

2Measurement precision

If manual digital verification processes are used, then verification accuracy is improved, but processing speed and efficiency decrease

Engineering Contradiction:
Improveverification accuracyVSAvoidverification processing speed
Core Design Contradiction:
Measurement precisionVSProductivity

Solution Approach 1:

The patent performs preliminary actions by pre-configuring the SDK with verification rules, validation algorithms, and database connections before the actual verification process. Document images are captured and pre-processed (enhanced, normalized) before validation, allowing the system to maintain high accuracy while processing verifications rapidly without manual intervention during the actual verification moment

Inventive Principle:
Principle #10Preliminary action

Solution Approach 2:

The patent replaces manual verification processes with automated optical character recognition (OCR) and digital validation algorithms. The SDK automatically extracts text from document images, validates formats, checks against databases, and makes verification decisions, achieving both high accuracy through sophisticated algorithms and high speed through automation, eliminating the speed-accuracy tradeoff of manual processes

Inventive Principle:
Principle #28Mechanics substitution (Replace mechanical system)

3Reliability

If comprehensive identity verification is implemented, then security is improved, but impact on application functionality and user convenience worsen

Engineering Contradiction:
ImprovesecurityVSAvoiduser convenience
Core Design Contradiction:
ReliabilityVSEase of operation

Solution Approach 1:

The patent implements self-service verification where the user simply captures images of their identity documents using the device camera, and the SDK automatically performs all verification steps including OCR, validation, and database checking. The user receives instant verification results without manual intervention, maintaining high security through comprehensive verification while preserving convenience through automation and minimal user effort

Inventive Principle:
Principle #25Self-service

Solution Approach 2:

The SDK acts as an intermediary that handles the complex verification process in the background, shielding the user from complexity. The user interacts only with simple document capture and receives clear verification results, while the SDK manages comprehensive security checks, document validation, and data processing, maintaining both security and ease of operation

Inventive Principle:
Principle #24Intermediary (Mediator)

4Productivity

If digital identity SDK is integrated into network applications, then verification efficiency is improved, but integration complexity increases

Engineering Contradiction:
Improveverification efficiencyVSAvoidintegration complexity
Core Design Contradiction:
ProductivityVSDevice complexity

Solution Approach 1:

The patent designs the digital identity SDK with universal functionality that can be integrated into various network applications through a standardized interface. The SDK performs multiple verification functions (document validation, biometric verification, database checking) through a single integration point, improving verification efficiency across different applications while reducing integration complexity through a unified, multi-functional solution rather than application-specific implementations

Inventive Principle:
Principle #6Universality (Multi-functionality)

Data Source

PatentUS20230246840A1Systems and methods for managing user identities in networks
Publication Date: 2023.08.03 MASTERCARD INT INC
  • US20230246840A1 patent drawing
  • US20230246840A1 patent drawing
  • US20230246840A1 patent drawing

AI summary

Systems and methods are provided for managing user identities in networks. One example method includes receiving, at a communication device, a request from a relying party for an assertion of an identity of a user where the communication device includes a software development kit (SDK). The method also includes, after receiving the request for the assertion, authenticating, by the communication device, the user and, based on a successful authentication of the user, compiling, via the SDK, an assertion packet including an attestation regarding authentication of the user where the assertion packet is signed with a private key of a private-public key pair stored in a memory of the communication device. The method then includes transmitting the assertion packet to the relying party.