Mobile Identity Documents with Multiple-Key Verification
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing identification methods, such as traditional passports, are cumbersome and inefficient for user authentication, especially in scenarios like customs checkpoints, where a more convenient and secure method is needed to verify identity using mobile devices.
Innovation Solution
A mobile device equipped with a near-field communication interface and a secure element stores identification information and generates public key pairs, enabling biometric authentication and secure verification through an enrollment process with an issuing authority, allowing secure and efficient identity verification using signed verification information.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Productivity
If traditional passports with electronic chips are used for authentication, then identity verification can be performed, but the process is cumbersome and inefficient
Solution Approach 1:
The patent creates a digital copy of the passport verification process by storing signed verification information and public keys in the mobile device's secure element. This allows the passport data to be replicated and presented electronically without needing the physical document, enabling faster authentication at checkpoints while maintaining security through cryptographic verification.
2Ease of operation
If mobile devices store identification information, then authentication becomes more convenient, but security risks increase
Solution Approach 1:
The patent introduces an intermediary cryptographic layer between the stored identification information and the verification process. Signed verification information and public keys act as intermediaries that enable secure authentication without exposing sensitive passport data. The secure element stores these cryptographic credentials, which mediate between the convenience of mobile storage and the reliability of security verification.
3Adaptability or versatility
If multiple public key pairs are generated for different authentication scenarios, then versatility improves, but device complexity increases
Solution Approach 1:
The patent segments the authentication system by creating multiple public key pairs, each dedicated to specific authentication scenarios or purposes. This segmentation allows the device to handle different authentication requirements independently, improving versatility while managing complexity through organized separation of cryptographic credentials for different use cases.
Data Source
AI summary
Techniques are disclosed relating to authenticating a user with a mobile device. In various embodiments, a mobile device receives a request to provision the mobile device with identification information from an identification document issued by an authority to a user for establishing an identity of the user. In response to the received request, the mobile device issues a request for verification information signed by the authority and usable to verify the identification information. The issued request identifies multiple public keys of the mobile device, each having a respective corresponding private key for generating a signature usable to verify the identification information. The mobile device receives and stores the signed verification information, the signed verification information including the plurality of public keys. In some embodiments, the mobile device receives a request provide, at least, a portion of the identification information and selects one of the private keys to generate a signature.