Identity Token Attestation Using Zero-Knowledge Attribute Verification

Resolve Bottlenecks,
Find Innovative SolutionsGenerate Solutions

Solution Overview

Problem

Interactions between a relying party and a user require the user to provide identity data in plaintext, making it susceptible to skimming or hacking, and the query process may reveal unnecessary information about the user.

Innovation Solution

A method involving a user device encrypting a query set and computing a zero-knowledge proof using encrypted identity attributes, transmitting the obscured query set and proof to an identity network computer for verification, which then evaluates and transmits the result to the relying party, ensuring privacy and security.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Measurement precision

If plaintext identity data is transmitted for verification, then verification accuracy is improved, but security and privacy protection deteriorate

Engineering Contradiction:

Improveverification accuracyVSAvoidsecurity vulnerability

Core Design Contradiction:

Measurement precisionVSObject-affected harmful factors

Solution Approach 1:

The patent introduces an identity network computer as an intermediary between the user device and relying party. This intermediary receives encrypted identity data from the user device, performs verification operations on the encrypted data without decryption, and returns verification results. This mediator enables accurate verification while maintaining security by never exposing plaintext identity data.

Inventive Principle:

Principle #24Intermediary (Mediator)

Solution Approach 2:

The patent transforms identity data from plaintext form to encrypted form before transmission. By changing the parameter state of the data (from readable to encrypted), the system enables verification operations to be performed on the transformed data without compromising security. The encrypted form maintains the necessary properties for verification while protecting the underlying identity information.

Inventive Principle:

Principle #35Parameter changes

2Object-affected harmful factors

If encrypted identity data is used for verification, then security is improved, but verification capability deteriorates

Engineering Contradiction:

Improvesecurity protectionVSAvoidverification capability

Core Design Contradiction:

Object-affected harmful factorsVSEase of operation

Solution Approach 1:

The identity network computer serves as a specialized intermediary that possesses the capability to perform verification operations on encrypted data. This mediator bridges the gap between security requirements (encrypted data) and verification needs (data analysis), enabling both goals to be achieved simultaneously through its specialized functions.

Inventive Principle:

Principle #24Intermediary (Mediator)

Solution Approach 2:

The system performs encryption of identity data before transmission to the identity network computer. This preliminary action of encrypting the data in advance allows subsequent verification operations to be performed on the already-encrypted data, eliminating the need to decrypt and re-encrypt, and maintaining security throughout the verification process.

Inventive Principle:

Principle #10Preliminary action

3Productivity

If identity data is stored and processed centrally, then verification efficiency is improved, but information leakage risk increases

Engineering Contradiction:

Improveverification efficiencyVSAvoidinformation leakage

Core Design Contradiction:

ProductivityVSLoss of information

Solution Approach 1:

The patent changes the parameter state of identity data to encrypted form before central storage and processing. This parameter transformation allows the data to be stored and processed in a centralized location with high efficiency while the encrypted state prevents information leakage. The data maintains its utility for verification operations while being protected from unauthorized access.

Inventive Principle:

Principle #35Parameter changes

Solution Approach 2:

The identity network computer acts as a secure intermediary that handles the centralized storage and processing of encrypted identity data. This mediator ensures that even though data is centralized for efficiency, the encryption and controlled access mechanisms prevent information leakage, allowing both goals to coexist.

Inventive Principle:

Principle #24Intermediary (Mediator)

Data Source

PatentUS12634153B2Integrating identity tokens and privacy-preserving identity attribute attest

Publication Date: 2026.05.19 VISA INTERNATIONAL SERVICE ASSOCIATION

AI summary

A method is disclosed. The method comprises receiving, by a user device from an identity network computer, a query set comprising a plurality of test identity attributes; encrypting, by the user device, the query set to form an obscured query set; computing, by the user device, a zero-knowledge proof using the obscured query set and an encrypted identity attribute associated with a user operating the user device; and transmitting, by the user device to the identity network computer, the obscured query set and the zero-knowledge proof, wherein the identity network computer verifies the zero-knowledge proof, retrieves an encrypted identity attribute associated with the user, evaluates the obscured query set with respect to the encrypted identity attribute, and transmits a result of the evaluation to a relying party computer.