Peer Identity Verification via Trusted Peer Clusters
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current identity verification systems are vulnerable to data breaches, leading to identity theft and financial risks, as they require vendors to maintain sensitive customer data and decryption keys, which can be compromised by hackers.
Innovation Solution
A peer identity verification system using cryptographic keys, where a main user creates a cluster of trusted peers, with the main user's private key stored only on their device and encrypted with a trusted peer's public key, allowing trusted peers to verify identity without the need for vendors to store sensitive data or decryption keys.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If vendors maintain a database of sensitive customer data and decryption keys for identity verification, then identity verification capability is improved, but vulnerability to data breaches and identity theft increases
Solution Approach 1:
The patent extracts the decryption keys and sensitive customer data from the vendor's database and stores them exclusively in the customer's device memory. This removal of sensitive elements from the vendor system eliminates the vulnerability to data breaches while preserving identity verification capability through cryptographic protocols.
Solution Approach 2:
The patent introduces cryptographic protocols and trusted peer intermediaries as mediators between the vendor and customer. Instead of the vendor directly accessing sensitive data, verification is performed through cryptographic proofs and trusted peer validation, eliminating the need for the vendor to store or access decryption keys.
2Productivity
If vendors store unencrypted customer-related data for verification purposes, then verification efficiency is improved, but security against fraudulent access deteriorates
Solution Approach 1:
The patent replaces the mechanical system of storing and accessing unencrypted data with a cryptographic system. Identity verification is achieved through cryptographic proofs, digital signatures, and encrypted communications rather than direct data access, maintaining verification efficiency while ensuring data security through mathematical security guarantees.
3Adaptability or versatility
If vendors maintain access to user decryption keys for identity verification, then verification flexibility is improved, but risk of key compromise and identity theft increases
Solution Approach 1:
The patent segments the verification process into multiple independent components: cryptographic key generation on the customer device, encrypted storage of keys locally, trusted peer validation, and cryptographic proof generation. This segmentation allows verification flexibility through multiple validation paths while eliminating key compromise risk by ensuring the vendor never possesses the decryption keys.
Data Source
AI summary
A system of peer identity verification that reduces the risk of identity theft in case of a data breach. The system does not require a vendor to maintain a database of sensitive customer-related data. Cryptographic keys are used. The system creates a one-time encryption keypair. The public and private keys of each user are saved securely on each user's device. While the public key for each user is stored remote from each user's device (such as in a cloud), the private key for a given user is not stored anywhere other than securely on that user's device. Thereafter, a user (i.e., the main user) requests another user to act as their “trusted peer” to be added to their “trust cluster.” If that other user accepts the request, the main user's private key is encrypted with that other user's public key and this encrypted data gets stored remotely, such as in a cloud. Thereafter, a trusted peer is authorized and able to verify the identity of a main user by being able to decrypt and read a message encrypted with the main user's public key. The system effectively puts the recovery and protection of a main user's private key in the hands of the main user's “trusted peers” in their own designed “trust cluster.”