Digital Identity Wallet for Selective Credential Disclosure
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Traditional identification methods reveal unnecessary personal information, compromising privacy and security, as conventional documents like driver's licenses disclose a large set of personal data not requested by recipients.
Innovation Solution
A mobile device-based identity wallet system that allows users to selectively present digital credentials validated by various trusted entities, enabling proof of specific identity attributes without disclosing extraneous information.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If conventional identification documents (driver's license, passport) are used to prove identity attributes, then the identity attribute can be verified, but unnecessary personal information is disclosed compromising privacy and security
Solution Approach 1:
The identification document is segmented into multiple independent digital credentials, each representing a specific identity attribute (e.g., name, address, date of birth, driver's license number). This allows the user to present only the specific credential required for verification rather than the entire identification document, thereby verifying identity attributes while preserving privacy by not disclosing unnecessary personal information.
Solution Approach 2:
The necessary identity attributes are extracted from the conventional identification document and stored as separate digital credentials in the identity wallet. When verification is needed, only the extracted specific attribute (e.g., just the date of birth) is presented to the verifying entity, rather than revealing all personal information contained in the original document.
2Reliability
If conventional identification documents are used, then identity verification is possible, but a large set of confidential personal information is revealed
Solution Approach 1:
Personal information is segmented into discrete digital credentials stored in the identity wallet. Each credential contains a specific identity attribute validated by a trusted entity. This segmentation ensures that only the minimum necessary information is disclosed during verification, reducing the attack surface and potential impact of data breaches.
Solution Approach 2:
The user maintains control over their own identity information through the identity wallet application. The user can selectively choose which credentials to present and to whom, enabling self-service identity verification without relying on centralized databases that are vulnerable to breaches.
3Loss of information
If digital credentials are selectively presented, then privacy is enhanced and information control is improved, but the system complexity increases
Solution Approach 1:
Physical identification documents are copied into digital format within the identity wallet application. These digital copies maintain the essential verification information while allowing for selective presentation. The copying process enables the system to work with standardized data formats that can be easily managed and presented digitally.
Solution Approach 2:
The identity wallet application serves multiple functions: storing multiple types of digital credentials, managing different trusted entities, handling various verification scenarios, and interfacing with different verifying systems. This multi-functionality consolidates what would otherwise require multiple separate systems into a single universal platform.
Data Source
AI summary
Disclosed are example methods, systems, and devices that allow for the generation and provisioning of digital credentials, which may demonstrate that a trusted entity has validated individual identity attributes, or sets of attributes, of a user. Digital credentials may also demonstrate one or more extrapolations resulting from deductions or inductions from validated identity attributes. A receiver device may indicate which identity attributes or extrapolations are sought by displaying a QR or other code and/or via a transmission using NFC or other wireless communication, and a user device may access corresponding digital attributes in an ID wallet to be provisioned via code or transmission. Digital credentials may restrict uses and usability of identity attributes. Cryptographic keys and/or distributed ledger records may allow recipients to verify authenticity of digital credentials. The same identity attribute may be proven by showing validation by multiple selectable trusted entities.