Transaction Policy Interface for Secure Anonymous Authentication

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Current web-based transaction methods, such as HTML forms and HTTP-based authentication, are error-prone and lack user-friendly features, particularly in handling certified data and multi-tab navigation, and client-side certificates are not suitable for general attribute solicitation, leading to usability issues and privacy concerns.

Innovation Solution

A method that involves a client sending a transaction request to a server, receiving a transaction policy, and displaying options to the user, allowing selection of mechanisms and evidence to satisfy requirements, with the client sending enablement information to the server for transaction completion, utilizing a private certificate system for secure and anonymous transactions.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Ease of operation

If HTML forms are used for user input, then free-form text entry is enabled, but data submitted is error-prone and cannot be certified

Engineering Contradiction:
Improvefree-form text entryVSAvoiddata certification
Core Design Contradiction:
Ease of operationVSReliability

Solution Approach 1:

The patent introduces a form validation system that acts as an intermediary between the HTML form input and the server processing. This validation system certifies the data by verifying it against predefined schemas and rules, ensuring data reliability while maintaining the ease of free-form text entry. The validation layer transforms untrusted user input into certified, reliable data without changing the user interface.

Inventive Principle:
Principle #24Intermediary (Mediator)

2Reliability

If HTTP-based authentication popup is displayed, then authentication request is processed, but browser control is taken and switching to different tabs is prevented

Engineering Contradiction:
Improveauthentication processingVSAvoidmulti-tab navigation
Core Design Contradiction:
ReliabilityVSEase of operation

Solution Approach 1:

The patent segments the authentication process into multiple independent components: the main browser window continues to function normally, while authentication dialogs are presented as separate, non-blocking modal overlays or inline forms within the current tab. This segmentation allows users to maintain browser control and switch between tabs while authentication is being processed in the background or through integrated form elements.

Inventive Principle:
Principle #1Segmentation

3Reliability

If client-side certificates are used, then authentication is enabled, but general attributes cannot be solicited and user tracking occurs

Engineering Contradiction:
ImproveauthenticationVSAvoidattribute solicitation
Core Design Contradiction:
ReliabilityVSAdaptability or versatility

Solution Approach 1:

The patent extracts the attribute solicitation functionality from the certificate authentication process itself. Instead of relying on certificates to carry all authentication and attribute information, the system separates authentication verification (handled by certificates) from attribute collection (handled by dedicated form fields and validation rules). This allows the system to solicit general attributes through standardized forms while maintaining secure certificate-based authentication.

Inventive Principle:
Principle #2Taking out (Extraction)

4Reliability

If certificates are used for authentication, then security is improved, but user tracking from session to session is enabled

Engineering Contradiction:
ImprovesecurityVSAvoiduser privacy
Core Design Contradiction:
ReliabilityVSLoss of information

Solution Approach 1:

The patent applies local quality by making privacy protection selective and context-dependent. The system uses certificates for authentication where security is required, but implements privacy-preserving techniques such as anonymous validation or selective disclosure only where specifically needed. Different parts of the system have different privacy requirements, and the solution tailors the approach locally rather than applying a uniform privacy model everywhere.

Inventive Principle:
Principle #3Local quality

Data Source

PatentUS11379825B2Enablement of performance of a transaction
Publication Date: 2022.07.05 INTERNATIONAL BUSINESS MACHINE CORPORATION
  • US11379825B2 patent drawing
  • US11379825B2 patent drawing
  • US11379825B2 patent drawing

AI summary

A method and system for enabling performance of a transaction. A first representation of a transaction policy, which depicts transaction policy options for fulfilling the transaction policy is displayed by a client computer. After a user selects a first transaction policy option, the client computer displays a second representation of the transaction policy, depicting at least one mechanism pertaining to the first transaction policy option for satisfying the requirements of the first transaction policy option. After the user selects a first mechanism, the client computer displays evidence options for each requirement of the first transaction policy option. After the user selects an evidence option for each requirement of the first transaction policy option, the client computer sends to a server transaction enablement information that includes evidence dictated by the selected evidence options to enable the server to perform the transaction.