MaaS Roaming Authentication Using Decentralized Identity Credentials
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing mobility as a service (MaaS) solutions lack flexibility in roaming services, requiring passengers to purchase separate tickets, which can be time-intensive and expensive, and rely heavily on centralized identity systems that compromise privacy and security.
Innovation Solution
Implement a decentralized identifier-based system for authenticating passengers across multiple mobility service providers, using a decentralized ledger to generate and manage credentials, enabling seamless roaming services without relying on a single centralized authority.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If a centralized identity system is used for MaaS roaming services, then service coordination and authentication are simplified, but privacy and security are compromised due to heavy reliance on centralized authorities and excessive personal data transmission
Solution Approach 1:
The patent segments the centralized identity system into decentralized components where each mobility service provider maintains local credential verification capabilities. The identity verification process is divided between the user's device (storing credentials), the home MaaS provider (issuing credentials), and roaming MaaS providers (verifying credentials), eliminating the need for a single centralized authority and reducing personal data transmission risks.
Solution Approach 2:
The patent introduces cryptographic credentials and decentralized identifiers as intermediaries between the user and mobility service providers. These digital credentials act as mediators that enable authentication and service coordination without requiring direct access to personal identity data, thus maintaining privacy while ensuring reliable service delivery across different providers.
2Reliability
If separate tickets are purchased for each mobility service provider in roaming areas, then service authentication is simplified, but time efficiency and cost are reduced due to multiple purchase processes
Solution Approach 1:
The patent implements a universal credential system where a single digital credential issued by the home MaaS provider can be used across multiple roaming service providers. This multi-functional credential eliminates the need to purchase separate tickets for each provider, allowing users to seamlessly access various mobility services (buses, trains, bikes, cars) across different regions using one authenticated identity.
Solution Approach 2:
The patent performs preliminary authentication and credential issuance by the home MaaS provider before the user travels to roaming areas. The credential is pre-configured with necessary authorization information, enabling users to immediately access roaming services without time-consuming on-site registration or ticket purchases at each new location.
3Measurement precision
If personal data is extensively transmitted for authentication across MaaS providers, then service verification is improved, but privacy protection and security risks are worsened
Solution Approach 1:
The patent extracts only the essential verification information needed for authentication from the user's personal data and embeds it in cryptographic credentials. Instead of transmitting comprehensive personal data (names, addresses, identification numbers), the system uses decentralized identifiers and signed credential tokens that prove eligibility without exposing underlying personal information, thus maintaining authentication accuracy while minimizing privacy exposure.
Solution Approach 2:
The patent transforms personal data into cryptographic parameters (public keys, signed tokens, decentralized identifiers) that maintain the functional properties needed for authentication but change the form to eliminate direct personal information exposure. The credential verification process operates on these transformed parameters rather than raw personal data, ensuring precise authentication while protecting privacy.
Data Source
AI summary
The present disclosure generally pertains to a communication network node having circuitry configured to: request a home mobility service provider to allow a roaming mobility service for a passenger which is located in a mobility service area of a roaming mobility service provider.