Linked Mobile Credentials for Composite Trust Vetting
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing vetting processes lack a robust and secure method to verify the identity of individuals using mobile identification credentials, particularly for accessing sensitive information or employment, and do not effectively handle multiple levels of confidence in identity verification.
Innovation Solution
A vetting system that utilizes a mobile identification credential (MIC) linked to multiple levels of credentials, where a vetting service verifies identity by collecting and weighting information from these credentials based on confidence coefficients, determining a composite trust score, and comparing it to a preset threshold to grant access or employment.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If traditional vetting processes are used to verify identity, then the process is simple to implement, but the security and reliability of identity verification is insufficient
Solution Approach 1:
The vetting system segments identity verification into multiple confidence levels (first, second, third levels) with different verification methods and thresholds. Each level corresponds to different sensitivity categories of protected information, allowing the system to match verification complexity to the actual security risk rather than applying a uniform high-complexity process to all cases.
Solution Approach 2:
The system dynamically changes verification parameters (confidence thresholds, required credential types, number of verifying entities) based on the sensitivity category of the protected information being accessed. This allows the same basic vetting infrastructure to adapt its complexity level to match the security requirements of different data categories.
2Reliability
If multiple levels of confidence verification are implemented, then the security and trustworthiness of vetting results is improved, but the complexity of the verification process increases
Solution Approach 1:
The vetting system dynamically adjusts the number and type of verifying entities required based on the confidence level needed. For lower sensitivity categories, fewer entities may be required, while higher sensitivity categories trigger involvement of additional verifying entities. This dynamic adaptation allows the system to maintain high reliability when needed while avoiding unnecessary complexity for lower-risk cases.
Solution Approach 2:
The verification process uses a nested structure where first-level verification is performed by initial entities, second-level verification by additional entities building upon the first level, and third-level verification by yet more entities. Each level nests within and builds upon the previous levels, creating a hierarchical verification structure that scales complexity only as needed.
3Reliability
If extensive vetting is performed for sensitive information access, then the security is improved, but the time required for the vetting process increases
Solution Approach 1:
The system performs preliminary vetting actions at lower confidence levels before progressing to higher levels. Identity verification credentials are obtained and verified in advance through a chain of trusting entities, so that when high-sensitivity access is requested, much of the verification work has already been completed, reducing the marginal time cost of extensive vetting.
Solution Approach 2:
The system performs verification actions proportionate to the sensitivity category rather than always performing complete exhaustive vetting. For lower sensitivity categories, partial verification at lower confidence levels suffices, avoiding the time cost of excessive verification. For higher sensitivity categories, the system escalates to more comprehensive verification only when necessary.
Data Source
AI summary
In an example, a subject using a user mobile-identification-credential device (UMD) requests vetting by a vetting system, which receives verified subject information associated with a level-n mobile identification credential (MIC-n) that UMD received from a level-n authorizing party system (APS-n). MIC-n is linked to lower level MIC-0 to MIC-(n−1). The vetting system, as level-n relying party system (RPS-n), uses the verified subject information associated with the linked MIC-0 to MIC-n to verify or not verify the identity of the subject, develops an identity profile of the subject, and determines a vetting result of the subject by calculating a composite trust score based on MIC trust values for the multiple levels of MIC. MIC-i (i=1 to n) is linked to MIC-(i−1) which UMD received from APS-(i−1), and APS-i is RPS-(i−1) which verified the identity of the subject using verified subject information associated with MIC-(i−1), such that MIC-0 to MIC-n are linked.