Identity Verification Service Using Hashed Claims and Signatures
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
The challenge of securely verifying personal identity documents in a shared ledger network, where the database is publicly visible or widely distributed, and the need to protect personal information while ensuring efficient identity verification across various services.
Innovation Solution
An Identity Verification Service (IVS) is used to manage identity documents on a shared ledger, where end users register their documents with a public key, and identity claims are verified using digital signatures and hashed information, ensuring secure and efficient identity verification without exposing personal information.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If personal ID details are stored electronically on a database accessible only to the IMO, then the certainty that the details held are genuine is improved, but the productivity of identity verification across multiple services deteriorates due to the need for repeated validation requests
Solution Approach 1:
The patent introduces an Identity Verification Service (IVS) as an intermediary between services and the IMO database. The IVS is granted controlled access to validate ID documents against the IMO database and cache verification results. This allows multiple services to verify identities through the IVS without directly querying the IMO database repeatedly, thus maintaining reliability while improving productivity through the intermediary caching mechanism.
Solution Approach 2:
The system performs preliminary identity verification through the IVS before services need to access the IMO database. Verification results are cached in advance, allowing subsequent identity checks to be performed quickly without repeated database queries. This preliminary validation action resolves the contradiction by preparing verification data beforehand, maintaining reliability while enabling fast subsequent verifications.
2Ease of operation
If all services hold complete identity information on all potential users, then the ease of identity verification is improved, but the security of personal information deteriorates
Solution Approach 1:
The IVS acts as an intermediary that holds verification capabilities and cached results, rather than services holding complete identity information. The IVS can verify identities against the secure IMO database and provide verification confirmations to services without exposing personal data. This resolves the contradiction by enabling easy verification through the intermediary while maintaining information security through controlled access architecture.
Solution Approach 2:
The system extracts only the necessary verification capability and minimal required data from the secure IMO database, placing it in the IVS intermediary. Services receive only verification confirmations rather than complete identity information. This extraction approach enables ease of verification while minimizing security risks by removing unnecessary personal information exposure.
3Reliability
If a shared ledger network is used to host the IVS database, then the transparency and trustworthiness of the system is improved, but the security of stored personal information deteriorates due to public visibility
Solution Approach 1:
The patent extracts only verification-related data and metadata from personal identity information, storing only what is necessary for verification purposes in the shared ledger. Complete personal identity details remain in the secure IMO database. This extraction allows the shared ledger to provide transparency and trust for verification operations while preventing exposure of sensitive personal information that should not be publicly visible.
Solution Approach 2:
The system segments data storage across multiple locations: complete personal information remains in the secure IMO database, verification metadata and hashed data are stored in the shared ledger IVS database, and services receive only verification confirmations. This segmentation allows the shared ledger to provide transparency for verification processes while protecting personal information by keeping it separate in secure storage.
Data Source
Figure 1A~1D
Figure 2A
Figure 2B
AI summary
A system for verifying information associated with a user, comprising a first information processing device, a second information processing device and a third information processing device, wherein: the first information processing device is configured to transmit to the second information processing device, information associated with the user, a unique identifier uniquely associated with the user associated information and an identity digital signature generated using an identity private key of an identity private key and identity public key pair associated with the user and a message comprising a previously determined hash of a portion of the user associated information combined with the unique identifier associated with the user associated information; the second information processing device is configured to generate the hash of the portion of the user associated information combined with the unique identifier associated with the user associated information and transmit the generated hash and the identity digital signature to the third information processing device; and the third information processing device is configured: to lookup the generated hash in a database relating the previously determined hash of the portion of the user associated information combined with the unique identifier associated with the user associated information with the identity public key of the identity private key and identity public key pair associated with the user, to verify the identity digital signature using the identity public key related to the generated hash in the database, and upon successful verification of the identity digital signature, to transmit a response to the second information processing device indicating the successful verification.