Local Identity Server for PII-Free Individual Identification
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
The increasing risk of identity theft and fraud due to the exposure of personally identifiable information (PII) in partner-specific identification vehicles poses a significant security threat, as nefarious actors can exploit this information to impersonate individuals.
Innovation Solution
A system and method that utilize a local identity server to generate an individual global unique identifier based on registration information, without revealing any personally identifiable information, and confirm identity through biometric hashes or detailed information, ensuring secure identification without compromising PII.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If partner-specific identification vehicles store PII or biometric data to uniquely identify individuals, then identification capability is improved, but security risk increases due to potential exposure to nefarious actors
Solution Approach 1:
The patent extracts PII from the identification system entirely. Instead of storing or processing personally identifiable information, the system uses only global unique identifiers that cannot be traced back to individuals. The identification functionality is maintained while the harmful PII data is completely removed from the system.
Solution Approach 2:
The patent introduces global unique identifiers as an intermediary between the identification need and the individual. These identifiers serve as a mediator that enables partner-specific identification without creating a direct link to personal information, thus breaking the connection between identification and PII exposure.
2Adaptability or versatility
If PII is stored in partner-specific identification vehicles, then individual identification is enabled, but vulnerability to identity theft and fraud increases
Solution Approach 1:
The system extracts and eliminates PII from the identification vehicle. The identification functionality is preserved through the use of global unique identifiers that provide the necessary adaptability for partner-specific identification without containing any personally identifiable information that could be exploited for identity theft.
Solution Approach 2:
The patent treats PII as information that should not be retained at all. By using disposable, non-reusable global unique identifiers that cannot be reverse-engineered to reveal personal information, the system ensures that even if compromised, the identifiers cannot be used for identity theft or fraud.
3Measurement precision
If detailed personal information is retained in identification systems, then accurate identification is achieved, but security compromise occurs when data is accessed by unauthorized actors
Solution Approach 1:
The patent removes detailed personal information from the identification system entirely. Identification accuracy is maintained through the use of global unique identifiers that provide sufficient precision for matching and verification purposes without containing any sensitive personal data that could compromise security if accessed by unauthorized actors.
Data Source
AI summary
A privacy-enhancing system, method, and non-transitory computer-readable medium for securely identifying an individual over time without retaining sensitive biometric data. In one embodiment, the system includes a local identity server including an electronic processor, a communication interface, and a memory. The electronic processor is configured to initiate a personalization of a partner-specific identification vehicle that identifies the individual based at least in part on an individual global unique identifier associated with the individual, receive a request for a service from the individual via the communication interface, receive consent and registration information from the individual via the communication interface, generate an identity confirmation that confirms an identity of the individual, and output the identity confirmation via the communication interface. The individual global unique identifier is generated from information derived from the registration information and the individual global unique identifier is not indicative of personally identifiable information (PII) of the individual.