Mobile ID Authentication Using Proof Tokens and Encrypted Data
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing mobile ID documents are primarily designed for face-to-face verification and lack effective methods for secure online authentication, especially in scenarios where devices lack cameras or processing power, and there is a need to protect user privacy and control over shared data.
Innovation Solution
A secure online authentication method using mobile ID documents involves creating an access engagement structure with encrypted data fields, utilizing a secret passphrase for decryption, and generating a proof material to authenticate users without direct human verification, ensuring only the legitimate document owner can complete the process.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Measurement precision
If manual face matching by human verifier is used, then authentication accuracy is improved, but automation extent deteriorates
Solution Approach 1:
The patent introduces an intermediary verification system that uses cryptographic proof materials and engagement structures to bridge the gap between automated processing and reliable authentication. The system employs encrypted data fields and verification codes as intermediaries that enable automated verification while maintaining security standards equivalent to manual verification.
Solution Approach 2:
The patent replaces the mechanical system of manual visual face matching with a cryptographic verification system. Instead of human verifiers manually comparing faces, the system uses encrypted proof materials, engagement structures, and automated verification processes that can be processed by electronic devices without cameras or advanced processing power.
2Extent of automation
If face recognition techniques are used, then automation extent is improved, but device complexity deteriorates
Solution Approach 1:
The patent extracts the complex face recognition functionality from the verification device and replaces it with simpler cryptographic verification. The engagement structure and proof materials contain all necessary verification information in encrypted form, allowing simple devices to verify authentication without needing cameras or advanced processing capabilities.
Solution Approach 2:
The patent uses encrypted copies of verification data (proof materials and engagement structures) that can be transmitted and verified without requiring the original complex processing capabilities. The cryptographic proofs serve as verifiable copies that maintain security while enabling verification on simple devices.
3Ease of operation
If online authentication without camera is used, then ease of operation is improved, but measurement precision deteriorates
Solution Approach 1:
The patent performs preliminary cryptographic setup and proof generation before the actual verification process. Engagement structures and proof materials are prepared in advance with encrypted data fields that contain all necessary verification information, allowing simple verification operations later without sacrificing accuracy.
Solution Approach 2:
The patent introduces cryptographic proof materials and engagement structures as intermediaries that carry verification information between parties. These intermediaries enable accurate verification without requiring direct camera-based face matching, maintaining precision while improving ease of operation.
4Reliability
If encrypted data fields are used, then privacy protection is improved, but device complexity deteriorates
Solution Approach 1:
The patent uses encrypted data fields and verification codes as intermediaries that protect privacy while enabling verification. The encryption mechanisms are implemented through standardized cryptographic protocols that can be executed on mobile devices without requiring complex custom security systems.
Data Source
AI summary
Provided is a secure online authentication method of a user by a relying party using a mobile ID document uses a secret to consent to a retrieval of a dedicated data field, wherein an access token is generated, including a proof, which is used by the relying party to transmit an access request to the mobile document issuer, trading the token for an authentication document comprising the personal data related to the dedicated data field by the document issuer to the relying party, wherein the proof verification material is extracted from the authentication document and checked to access said personal data and accepting the online authentication of the user. Other embodiments disclosed.