Identity Token Enrichment Using External Trusted Service Data
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing identity tokens do not utilize additional information about devices or users that is known only to external trusted services, limiting the functionality and efficiency of services that rely on these tokens.
Innovation Solution
Modify identity tokens by incorporating a reference to an external trusted service, allowing the relying party to retrieve additional information from this service and integrate it into the token, enhancing its content and functionality.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Adaptability or versatility
If identity tokens include only basic identity information, then the token structure remains simple and processing is efficient, but additional information about devices or users that is known only to external trusted services cannot be utilized
Solution Approach 1:
The patent introduces a trusted service as an intermediary between the identity service and the relying party. The trusted service provides additional information about users or devices without being part of the core identity token structure. This mediator approach allows the system to utilize external information while keeping the identity token itself simple and the processing efficient.
Solution Approach 2:
The patent segments the identity verification process into distinct components: the basic identity token issued by the identity service, and additional information provided separately by the trusted service. This segmentation allows each component to remain simple while the combination provides enhanced functionality. The relying party can selectively use information from both sources without increasing the complexity of the identity token structure.
2Loss of information
If additional information is stored in the identity token, then more comprehensive user or device data is available, but memory and processing requirements increase
Solution Approach 1:
The trusted service acts as an intermediary that provides additional information on-demand rather than embedding it in the identity token. This approach ensures information availability when needed while avoiding the increased memory and processing requirements that would result from storing all additional information within the token itself.
Solution Approach 2:
The patent implements partial action by having the relying party retrieve only specific additional information from the trusted service that is relevant to the current verification context, rather than processing all possible information. This selective approach reduces processing requirements while still providing comprehensive information where needed.
3Reliability
If identity tokens are modified to include references to external services, then real-time additional information can be retrieved, but the complexity of token validation increases
Solution Approach 1:
The trusted service serves as a specialized intermediary that handles the complexity of external information retrieval and validation. By delegating this function to a dedicated service, the relying party's validation process remains relatively simple while still achieving high reliability through access to accurate, real-time information from the trusted source.
Solution Approach 2:
The patent implements preliminary action by having the relying party retrieve additional information from the trusted service before making authorization decisions. This advance retrieval ensures that all necessary information is available for validation while keeping the actual token validation process straightforward, as the additional information is already prepared and accessible.
Data Source
AI summary
An identity token may be received and a service associated with the identity token may be identified. A request may be provided to the service based on the identity token. In response to providing the request, additional information from the service associated with the identity token may be received. The identity token may be modified with the additional information.