Universal Digital Identity Authentication via Trusted Providers
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current online authentication methods lack security, consistency, and ease of use, with companies struggling to verify user identities effectively, leading to issues with password theft and invalid sign-ups.
Innovation Solution
A universal digital identity system that utilizes a network of trusted identity providers, such as banks, to authenticate users across multiple platforms, using cryptographic technology and device reputation scoring to ensure secure and consistent identity verification.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Adaptability or versatility
If companies use traditional authentication methods with multiple providers, then coverage and usability improve, but security and consistency deteriorate
Solution Approach 1:
The patent implements a universal authentication system where a single authenticated digital identity can be used across multiple online services and platforms. The system allows one identity provider to authenticate a user for multiple relying parties, eliminating the need for separate authentication systems at each company while maintaining security through centralized verification and cryptographic validation.
2Reliability
If companies implement their own authentication systems, then security control improves, but device complexity and ease of operation worsen
Solution Approach 1:
The patent introduces an intermediary authentication system that mediates between identity providers and relying parties. This intermediary layer handles the complex cryptographic operations, identity verification, and secure communication protocols, allowing individual companies to maintain security control without implementing complex authentication infrastructure themselves. The system acts as a trusted mediator that simplifies the overall architecture while preserving security.
3Ease of manufacture
If traditional authentication methods are used, then implementation ease improves, but security and validity deteriorate
Solution Approach 1:
The patent implements preliminary authentication actions where identity providers verify user identities and issue authenticated digital identities before users access multiple services. The system performs preliminary cryptographic validation, identity verification, and security checks upfront, so that subsequent access to different platforms is both easy and secure. This preliminary action ensures validity is established before ease of use is provided.
4Adaptability or versatility
If multiple identity providers are used, then authentication coverage improves, but consistency and user experience worsen
Solution Approach 1:
The patent implements homogeneous authentication experiences across multiple identity providers by standardizing the authentication interface, user interaction flow, and response formats. The system presents a unified authentication mechanism to users regardless of which identity provider is used, ensuring consistent user experience. The underlying diversity of providers is abstracted away, providing homogeneous interaction while maintaining broad authentication coverage.
Applied Scientific Principles
This section explains which scientific principles are used to turn an abstract innovation direction into a practical engineering solution.
Function Achieved in This Case
Provides a secure, consistent, and user-friendly method for authenticating users across different online services, reducing the risk of identity theft and improving the efficiency of user onboarding and account creation.
Implementation Method 1
The validation and the user information may be encrypted with a cryptographic key
Data Source
AI summary
Disclosed herein is an identity network that can provide a universal, digital identity for users that can be used to authenticate the user by an identity provider for relying parties. The identity network receives a request from a relying party that includes deep linking to an identity provider selected by the user. The request specifies the user as well as any other information about the user the relying party is requesting. A service of the identity network launches the application for the identity provider on the user's device using a software development kit. The user can log into the identity provider's application, which validates the user and provides the user authentication/validation and information about the user to the identity network. The identity network can then provide the indication of the user's authentication and the user information to the relying party.