Identity Verification Declaration Tree Structure
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current identity verification methods are inefficient and insecure, as they require repeated uploads of certifying materials and direct contact with original identity information, leading to low verification efficiency and security risks.
Innovation Solution
An identity verification method that involves a declaration issuing device generating a target declaration and a first tree, where the object terminal transmits the target declaration and bypass nodes to a verification device for verification, reducing the need for repeated uploads and enhancing security by not contacting original identity information.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Productivity
If centralized identity verification is performed by directly contacting original certifying materials, then verification security is maintained, but verification efficiency deteriorates due to repeated uploads
Solution Approach 1:
The patent performs identity verification in advance and generates a verification declaration before the actual verification request occurs. The declaration issuing device authenticates the object's identity attributes beforehand, creates a verification declaration containing the authentication result, and stores it in a declaration database. When a verification request comes later, the system only needs to retrieve and verify the pre-generated declaration using a digital signature, eliminating the need for repeated original material verification while maintaining security through cryptographic validation.
2Reliability
If original certifying materials are repeatedly contacted for verification, then verification accuracy is ensured, but information security deteriorates due to identity information exposure
Solution Approach 1:
The patent extracts the essential verification information from the original certifying materials and stores it in the form of a verification declaration in the declaration database. Instead of repeatedly accessing and exposing the original sensitive identity materials, the system extracts only the necessary authentication results and stores them as structured declarations with digital signatures. This extraction approach maintains verification accuracy while preventing exposure of the original identity information.
Solution Approach 2:
The verification declaration acts as an intermediary between the original certifying materials and the verification request. The declaration issuing device creates this intermediate representation that contains the authentication result without exposing the original sensitive materials. The verification device then validates this intermediary declaration using digital signature verification, ensuring both accuracy and security without direct contact with original identity information.
3Productivity
If pre-generated verification declarations are used, then verification efficiency is improved, but device complexity increases due to tree structure management
Solution Approach 1:
The patent segments the verification declaration into a hierarchical tree structure where the root node contains a digest of all leaf nodes, and intermediate nodes contain digests of their child nodes. This segmentation allows the verification device to efficiently verify declarations by only needing to validate the cryptographic hash chain from leaf to root, rather than managing the entire declaration structure. The segmentation transforms a complex management problem into a simple cryptographic verification process.
Data Source
AI summary
This application provides an identity verification method, a related apparatus, and a medium. The identity verification method includes: receiving a target declaration issuance request from an object terminal; performing authentication on a target attribute, and generating a target declaration after the authentication succeeds; generating a first tree; and transmitting the target declaration to the object terminal, to cause the object terminal to transmit, when receiving a verification request of a verification device for the target attribute, the target declaration and first bypass nodes of a first path in the first tree to the verification device for first verification. In embodiments of this application, identity verification efficiency and security of object identity information can be improved. The embodiments of this application can be applied to various scenarios such as data security, a blockchain, data storage, and information technologies.