Reusable Identity Certificates for Anonymous Uniqueness Verification

Resolve Bottlenecks,
Find Innovative SolutionsGenerate Solutions

Solution Overview

Problem

Existing methods for user authentication and certification on the internet fail to ensure the uniqueness of identities, as public keys can be easily replicated, and users cannot prove their uniqueness without revealing identifying information, leading to potential de-anonymization and lack of verifiable credentials across different information systems.

Innovation Solution

A system comprising a central authority database server and certifying entities that issue reusable certificates of user uniqueness by verifying identification documents and cryptographic hashes, ensuring each user has a unique internal identifier, and allowing for context-dependent uniqueness certificates without revealing the user's globally unique public key.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Ease of operation

If public keys are used for user identification, then users can create their own self-sovereign identity, but a single person can create many public keys and cannot prove uniqueness of identity

Engineering Contradiction:

Improveself-sovereign identity managementVSAvoiduniqueness verification

Core Design Contradiction:

Ease of operationVSReliability

Solution Approach 1:

The patent introduces a trusted third party (certificate authority) as an intermediary that issues certificates binding a user's public key to their identity. This mediator resolves the contradiction by providing a reliable mechanism for uniqueness verification while preserving user autonomy in key management.

Inventive Principle:

Principle #24Intermediary (Mediator)

Solution Approach 2:

The patent creates a certificate copy that attests to the binding between a public key and user identity. This certificate can be replicated and presented across multiple systems without revealing the underlying private key, enabling uniqueness proof while maintaining security.

Inventive Principle:

Principle #26Copying

2Reliability

If public keys are revealed for verification, then uniqueness can be proven, but users risk de-anonymization and tracking across information systems

Engineering Contradiction:

Improveuniqueness verificationVSAvoidde-anonymization risk

Core Design Contradiction:

ReliabilityVSObject-affected harmful factors

Solution Approach 1:

The patent extracts the essential verification information (certificate binding public key to identity) from the full public key itself. Users present only the certificate rather than the complete public key, removing the tracking risk while retaining the ability to prove uniqueness.

Inventive Principle:

Principle #2Taking out (Extraction)

Solution Approach 2:

The patent transforms the verification mechanism by changing from direct public key presentation to certificate-based verification. This parameter change allows uniqueness proof while controlling the information revealed, preventing de-anonymization.

Inventive Principle:

Principle #35Parameter changes

3Measurement precision

If credential verification is performed by each information system independently, then verification accuracy can be maintained, but users must go through verification process with each system and cannot reuse credentials

Engineering Contradiction:

Improveverification accuracyVSAvoidverification process time

Core Design Contradiction:

Measurement precisionVSLoss of time

Solution Approach 1:

The patent performs verification in advance by having a trusted authority issue certificates that pre-attest to user credentials. This preliminary verification action allows users to present pre-verified credentials across multiple systems without repeating the verification process, saving time while maintaining accuracy.

Inventive Principle:

Principle #10Preliminary action

Solution Approach 2:

The patent creates universally accepted certificates that can be verified by any information system trusting the issuing authority. This multi-functional credential can serve across different contexts and systems, eliminating the need for repeated verification while maintaining verification standards.

Inventive Principle:

Principle #6Universality (Multi-functionality)

4Reliability

If a central authority verifies all user identities, then uniqueness can be guaranteed globally, but system complexity and trust requirements increase

Engineering Contradiction:

Improveglobal uniqueness guaranteeVSAvoidcentral authority infrastructure

Core Design Contradiction:

ReliabilityVSDevice complexity

Solution Approach 1:

The patent segments the central authority function into distributed certificate-issuing entities. Multiple trusted authorities can issue certificates without requiring a single complex centralized infrastructure, reducing system complexity while maintaining global uniqueness guarantees through cryptographic verification.

Inventive Principle:

Principle #1Segmentation

Data Source

PatentUS20240022433A1Methods and systems for digital identification and certification

Publication Date: 2024.01.18 IDNI AG

AI summary

A computer-implemented method for issuing reusable certificates of user uniqueness or for a user's arbitrary claim comprises receiving a request from a first user for a certification together with supporting evidence; verifying validity, relevance and completeness of the supporting evidence regarding the request; and issuing a reusable certificate in conjunction with a public cryptographic key of the first user.