Identity Proofing Platform Using Modular Verification Policies

Resolve Bottlenecks,
Find Innovative SolutionsGenerate Solutions

Solution Overview

Problem

Current KYC processes lack flexibility and customization to accommodate various identity verification policies across different entities on the same platform, making it difficult to find a cohesive and secure identity proofing solution.

Innovation Solution

An identity proofing platform that uses a RESTful API and secure cryptography mechanisms, such as Elliptic-curve Diffie-Hellman key agreement protocol, to perform customizable and dynamic verification processes, including government ID, credit bureau, and mobile network operator verifications, while ensuring data encryption and forward secrecy.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Adaptability or versatility

If a single identity proofing platform serves multiple entities with different verification policies, then platform versatility is improved, but system complexity increases

Engineering Contradiction:

Improveplatform versatilityVSAvoidsystem complexity

Core Design Contradiction:

Adaptability or versatilityVSDevice complexity

Solution Approach 1:

The platform segments verification policies into discrete, configurable components that can be independently selected and combined. Each entity's verification requirements are broken down into modular policy elements that the system can assemble dynamically, allowing multiple verification policies to coexist without creating monolithic complexity

Inventive Principle:

Principle #1Segmentation

Solution Approach 2:

The platform implements a universal verification framework that can handle multiple entity types and verification policies through a single unified system. The architecture supports diverse verification requirements (government ID, credit bureau, mobile network operator) while maintaining consistent security and operational standards across all entities

Inventive Principle:

Principle #6Universality (Multi-functionality)

2Reliability

If multiple verification types are performed simultaneously, then verification completeness is improved, but processing time increases

Engineering Contradiction:

Improveverification completenessVSAvoidprocessing time

Core Design Contradiction:

ReliabilityVSLoss of time

Solution Approach 1:

The system performs preliminary assessments to determine which verifications are actually needed for each user case. By pre-evaluating risk factors and verification requirements, the platform can skip unnecessary verification steps or perform them asynchronously, reducing overall processing time while maintaining verification completeness for high-risk cases

Inventive Principle:

Principle #10Preliminary action

Solution Approach 2:

The platform implements periodic or staged verification where different verification types are performed at different stages of the onboarding process. High-priority verifications are completed first, with lower-priority checks performed subsequently or in parallel, allowing the system to provide partial verification results while complete verification is still in progress

Inventive Principle:

Principle #19Periodic action

3Loss of information

If sensitive verification data is stored for multiple entities, then data utility is improved, but security risk increases

Engineering Contradiction:

Improvedata utilityVSAvoidsecurity risk

Core Design Contradiction:

Loss of informationVSObject-affected harmful factors

Solution Approach 1:

The platform introduces cryptographic intermediaries (such as secure enclaves, homomorphic encryption, or trusted execution environments) that allow verification data to be processed and validated without being stored in plain text. Entities receive verification results through secure channels without the platform needing to maintain long-term storage of sensitive personal information, thus reducing security risks while preserving data utility

Inventive Principle:

Principle #24Intermediary (Mediator)

Solution Approach 2:

The system implements temporary data retention with automatic discarding of sensitive verification data after use. Verification data is kept only long enough to complete the verification process and generate results, then securely deleted. This approach maintains data utility during the verification window while minimizing security exposure by rapidly discarding sensitive information afterward

Inventive Principle:

Principle #34Discarding and recovering

Data Source

PatentUS20240370923A1Identity proofing offering for customers and non-customers

Publication Date: 2024.11.07 CAPITAL ONE SERVICES LLC

AI summary

Various embodiments are generally directed to an identity proofing platform. The platform may receive, from a user, personally identifiable information (PII) related to a consumer and determine one or more verifications requested by the user. The verifications may be one or more of a government identification (ID) verification, a credit bureau verification, or a mobile network operator verification. The platform may send a SMS message to the consumer for consent approval and receive consent from the consumer. The platform may perform the one or more verifications, generate an identity proofing result based on the performed one or more verifications, encrypt the identity proofing result, and send the identity proofing result to the user.