Digital Identity System Secure Electronic Verification
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Conventional identity verification methods, such as passports and national ID cards, are cumbersome and valuable, making it undesirable to carry them everywhere, while digital alternatives lack security and reliability.
Innovation Solution
A digital identity system that creates a computer-stored digital identity using a network interface, persistent storage, and a processor to manage profiles, generate credentials, and publish them securely, allowing entities to verify identities electronically with confidence values and one-time use credentials.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If physical identity documents (passports, ID cards) are carried everywhere for verification, then identity verification reliability is improved, but convenience deteriorates and security risk increases
Solution Approach 1:
The patent creates digital copies of physical identity documents and stores them in a secure database. These digital profiles contain all necessary identification data (personal details, photograph, document number) and can be accessed electronically without carrying the physical document, thus improving convenience while maintaining verification reliability.
Solution Approach 2:
The patent replaces the mechanical system of physically carrying and presenting documents with an electronic system. The verification process substitutes physical document handling with electronic data retrieval and comparison, eliminating the need to carry physical documents while maintaining verification capability.
2Reliability
If physical identity documents are carried everywhere for verification, then identity verification reliability is improved, but security risk worsens due to document theft or loss
Solution Approach 1:
By creating digital copies of identity documents and storing them in a secured database with controlled access, the system eliminates the need to carry physical documents. The digital profile can be verified electronically without exposing the user to risks of physical document theft or loss, while maintaining verification reliability through secure access protocols.
Solution Approach 2:
The patent introduces a digital profile as an intermediary between the physical identity document and the verification process. This intermediary layer allows verification to occur without direct exposure of the original document, reducing security risks while maintaining verification integrity through controlled access and digital validation.
3Ease of operation
If digital identity profiles are made accessible for verification, then ease of operation is improved, but security deteriorates due to potential unauthorized access
Solution Approach 1:
The patent implements different access levels and permissions for different users of the digital identity system. The profile data is structured with selective visibility, allowing verification of specific attributes (name, date of birth, photograph) while protecting sensitive information. This localized access control enables easy verification where needed while maintaining security for protected data.
Solution Approach 2:
The system uses a controlled access mechanism as an intermediary between the digital profile and verifying entities. Access to the profile is mediated through authentication protocols that verify the requesting entity's authorization, enabling convenient verification while preventing unauthorized access through layered security controls.
Data Source
AI summary
The disclosure relates to a digital identity system for creating a computer stored digital identity. The system includes a network interface configured to send and receive electronic messages, persistent electronic storage, a profile management module executing on a processor configured to receive from an entity an electronic message comprising a data item, extract the data item from the electronic message and store the data item in a digital profile in the persistent electronic storage. The system also includes a credential creation module executing on a processor, a publication module executing on a processor, and a receipt generation module executing on a processor.