Three-Party Identity Verification with Temporary Credentials
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing three-party identity verification protocols are prone to security risks due to complex network interactions, leading to potential protocol cracking and damage to user rights and interests.
Innovation Solution
A method involving a temporary credential system that reduces interaction frequency and enhances security by using a temporary credential generated by a second network device, allowing interactions between a user device and a first network device to verify user identity through a simplified two-step process.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If traditional three-party identity verification protocols are used, then identity verification can be performed, but the network interaction frequency is high and the protocol complexity increases security risks
Solution Approach 1:
The patent extracts the identity recognition function from the traditional three-party verification protocol, allowing the second application to independently perform identity recognition and issue credentials. This separates the identity recognition process from the verification process, reducing protocol complexity while maintaining security through the extracted credential-based verification mechanism
Solution Approach 2:
The verification process is segmented into distinct phases: identity recognition by the second application, credential issuance, and then verification by the first application. This segmentation reduces interaction frequency between the first application and network devices, as the credential can be verified locally without continuous network communication
2Productivity
If traditional identity verification protocols are used, then verification can be performed, but the interaction frequency is high reducing efficiency
Solution Approach 1:
The second application performs identity recognition and issues credentials in advance before the actual verification is needed. This preliminary action allows the first application to verify identities using pre-issued credentials without requiring real-time network interaction, significantly improving verification efficiency and reducing time loss
Data Source
Figure 1~2
Figure 3
Figure 4
AI summary
Embodiments of this specification disclose methods, apparatuses, storage mediums, and electronic devices for three-party identity verification. First, a user device obtains a first identity verification request initiated by a first application and sends the first identity verification request to an associated second application, and then performs an identity recognition operation on a user based on the first identity verification request by using the second application. Then, a second network device corresponding to the second application obtains an identity recognition result of the user and a corresponding temporary credential in response to the identity recognition operation, and returns the temporary credential to the user device. Then, the user device generates a corresponding identity verification request based on the received temporary credential and sends the identity verification request to a first network device corresponding to the first application. Then, the first network device generates a second identity verification request about the user based on identity information of the user and the temporary credential and sends the second identity verification request to the second network device, to complete three-party identity verification.