Self-Sovereign Identity Cloud Storage Using Trusted Execution Environments
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing self-sovereign identity management systems face challenges such as loss or theft of digital wallets, leading to loss of control over identity data and potential misuse, as well as the burden of manual synchronization across devices.
Innovation Solution
A method and system that utilizes a cloud server with a trusted execution environment to securely store and manage self-sovereign identity data, using asymmetric key pairs for authentication and encryption, ensuring data integrity and access control.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If self-sovereign identity data is stored locally on a user's electronic device, then the user has direct control over their digital identity, but the device may be lost, stolen, or broken resulting in loss of access to the digital wallet
Solution Approach 1:
The patent introduces a cloud server as an intermediary between the user and their digital identity data. The user device communicates with the cloud server, which stores and manages the digital wallet data in encrypted form. This intermediary allows the user to maintain control through cryptographic keys while eliminating the risk of total data loss if the device is lost or stolen, as the data can be recovered by accessing the cloud server.
2Ease of operation
If self-sovereign identity data is stored in a centralized system, then recovery is easier when device is lost, but user control and security are reduced
Solution Approach 1:
The patent segments the digital identity system into multiple components: the user device stores cryptographic keys and interface functionality, while the cloud server stores the encrypted digital wallet data. This segmentation allows centralized recovery capabilities through the cloud server while maintaining user control through distributed key management. The user retains sovereignty over their identity by keeping the private keys locally, while benefiting from centralized storage reliability.
3Adaptability or versatility
If digital wallet is stored on user device, then user has full control, but synchronization across multiple devices becomes complex
Solution Approach 1:
The patent makes the cloud server a universal storage endpoint that can be accessed by multiple user devices. Instead of requiring complex export/import procedures between devices, any authorized device can access the cloud server to retrieve or update digital wallet data. This multi-functional approach allows seamless synchronization across devices while maintaining user control through the centralized cloud interface.
Data Source
AI summary
The present disclosure relates to a method for providing a self-sovereign identity cloud service to a user. The method includes signing, on a user device of the user, an instruction to store self-sovereign identity data of the user based on a user private key of a user asymmetric key pair. The method further includes sending the signed instruction and the self-sovereign identity data from the user device to a cloud server. The method further includes verifying, in a trusted execution environment of the cloud server, the signed instruction based on a user public key of the user asymmetric key pair. The method further includes, if the signed instruction is approved, storing the self-sovereign identity data in the trusted execution environment.