Temporary Credential Handoff for Three-Party Identity Verification
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing three-party identity verification protocols are vulnerable to security risks due to complex network interactions, leading to potential protocol cracking and damage to user rights and interests.
Innovation Solution
A method involving a user device interacting with a second application to obtain a temporary credential from a second network device, which is then used to simplify interactions with a first network device for identity verification, reducing overall interaction frequency and providing fault tolerance.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If complex network protocols are used for three-party identity verification, then verification security can be maintained, but interaction frequency increases and interaction efficiency decreases
Solution Approach 1:
The identity verification process is segmented into two distinct phases: (1) identity recognition between the user device and second network device that generates a temporary credential, and (2) identity verification between the first network device and second network device using the temporary credential. This segmentation reduces interaction frequency while maintaining security through the credential-based verification mechanism.
Solution Approach 2:
The second network device performs preliminary identity recognition and generates a temporary credential before the actual verification process. This preliminary action allows the first network device to verify identity without repeated complex interactions, thereby improving interaction efficiency while maintaining verification security.
2Reliability
If direct interactions between merchant and vendor systems are increased, then verification completeness improves, but security vulnerability increases
Solution Approach 1:
A temporary credential acts as an intermediary between the merchant system (first network device) and vendor system (second network device). The credential contains verified identity information that allows the merchant to verify user identity without direct continuous communication with the vendor, reducing security vulnerabilities while maintaining verification completeness.
Solution Approach 2:
The second network device creates a copy of the verified identity information in the form of a temporary credential. This credential copy enables the first network device to perform verification independently without requiring ongoing direct interactions with the second network device, thus reducing security exposure while maintaining verification integrity.
3Productivity
If interaction frequency is reduced, then interaction efficiency improves, but fault tolerance decreases
Solution Approach 1:
The second network device performs preliminary identity recognition and embeds verification results in the temporary credential before transmission. This preliminary action ensures that even with reduced interaction frequency, the verification process maintains fault tolerance because the credential contains all necessary verified information for independent validation by the first network device.
Data Source
AI summary
Three-party identity verification, which is applied to a user device, is described. A first identity verification request is obtained for a user that is initiated by a first application. The first identity verification request is sent to a second application associated with the first application. A temporary credential that corresponds to an identity recognition result of the user is obtained from a second network device corresponding to the second application and based on an identity recognition operation. Based on the temporary credential, a corresponding identity verification request is generated. The corresponding identity verification request is sent to a first network device corresponding to the first application.