Mobile ID Credential Verification for Medical Records
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current identity verification methods, such as in-person ID checks and password-protected accounts, are not foolproof and can lead to breaches in confidentiality and unauthorized access to medical records, as they are susceptible to human error, fraud, or hacking.
Innovation Solution
A system utilizing mobile identification credentials (MICs) for secure identity verification, where a User Mobile-Identification-Credential Device (UMD) interacts with a Relying Party System (RPS) to authenticate user identity before granting access to medical records or services, using mobile driver's licenses or passports, and incorporating liveness checks for remote verification.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If in-person ID verification is used, then identity confirmation is achieved, but human error and fraud susceptibility increase
Solution Approach 1:
The patent replaces manual in-person ID verification with automated mobile identification credential verification. The system uses digital credentials stored on mobile devices and verifies them through automated authentication processes, eliminating human error and fraud susceptibility while maintaining verification reliability.
Solution Approach 2:
The patent introduces mobile identification credentials as an intermediary between the user and the verification system. These credentials contain encrypted identity information that can be verified without exposing sensitive data, providing a secure middle ground that prevents fraud while maintaining verification integrity.
2Ease of operation
If password-protected accounts are used, then remote access is enabled, but hacking and unauthorized access risks increase
Solution Approach 1:
The patent replaces password-based authentication with mobile identification credential verification. The system uses cryptographic signatures and secure enclave technology to authenticate users remotely without relying on vulnerable passwords, enabling convenient access while preventing hacking.
Solution Approach 2:
The patent implements pre-staging of identity verification results before actual access is needed. The system verifies the mobile credential in advance and caches the authentication status, providing a security buffer that prevents unauthorized access even if the credential is later compromised.
3Device complexity
If traditional verification methods are used, then simplicity is maintained, but security breaches and confidentiality risks increase
Solution Approach 1:
The patent segments the verification process into distinct phases: credential presentation, cryptographic verification, and access decision. This modular approach maintains simplicity at each stage while implementing robust security measures, reducing both complexity and security risks.
Data Source
AI summary
In an example, a provider system receives from a client device a request for client access. The provider system sends to the client device a request for identification information of the client. The provider system receives client information associated with a mobile identification credential (MIC) which the client device received from an authorizing party system (APS), the client having consented to release the client information to the provider system, and the client information having been verified by the APS. The provider system uses the verified client information associated with the MIC to verify or not verify the identity of the client. The provider system verifies the identity of the client before granting the client the request for client access.