Trusted Entity Identity Authentication via Unique Code
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Identity theft occurs due to the widespread use and permanence of Social Security Numbers (SSN) and birthdays, which are easily obtainable and used for impersonation, leading to financial and service theft, as traditional verification methods are insufficient and costly for businesses, and individuals face laborious processes to prove identity theft.
Innovation Solution
A system and method using a trusted entity with a secure repository to store and protect identity information, where individuals access a unique code using a username and password, which is then verified by the trusted entity and delivered to transactional entities for authentication, reducing the need for individuals to share personal details and enhancing verification confidence.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If a person's name, SSN, and birthday are used to verify identity, then identity verification is simple and direct, but identity theft becomes easy and widespread
Solution Approach 1:
The patent introduces a trusted entity as an intermediary between the individual and transactional entities. This trusted entity holds the individual's biometric data and issues unique codes after verification. The unique code serves as a mediator that proves identity without exposing sensitive personal information, thus maintaining verification simplicity while enhancing authentication reliability.
Solution Approach 2:
The patent extracts the core verification function from the individual's personal information (name, SSN, birthday) and separates it into a unique code issued by the trusted entity. This extraction removes the vulnerable personal data from the verification process while retaining the ability to authenticate identity, solving the contradiction between ease of verification and reliability.
2Productivity
If personal identity information is stored electronically in databases, then access and verification are efficient, but security breaches and hacking become major risks
Solution Approach 1:
The patent extracts the most sensitive personal information (biometric data) from general electronic databases and places it in a highly secure, restricted environment at the trusted entity. Only the derived unique code circulates in broader electronic systems, reducing the attack surface for security breaches while maintaining verification efficiency.
Solution Approach 2:
The patent applies different security qualities to different parts of the system: the trusted entity's database contains the highest security level for biometric data, while transactional entities receive only the lower-sensitivity unique codes. This local differentiation of security quality protects critical data while enabling efficient widespread verification.
3Speed
If SSN and birthday are transmitted electronically via the Internet, then transaction speed increases, but information can be viewed by others on the unsecured network
Solution Approach 1:
The patent creates a copy of the identity verification function in the form of a unique code that can be transmitted electronically without containing sensitive personal information. This copy performs the same verification purpose as the original biometric data but can be safely transmitted over networks without risk of unauthorized viewing or identity theft.
4Ease of operation
If traditional identity verification methods are used, then individuals must provide extensive personal information, but this creates laborious processes when identity theft is discovered
Solution Approach 1:
The trusted entity acts as a permanent intermediary that maintains the individual's verified identity information. When identity theft is discovered, the individual can quickly obtain new unique codes from the trusted entity without having to go through the entire verification process again or prove they didn't apply for fraudulent accounts, dramatically reducing recovery time.
Data Source
AI summary
A system and method are provided for authenticating a person's identity to a business using a trusted entity with a secure repository to store and protect the person's identity information. The person accesses their account on the trusted entity's server using a user name and a password. Then, the trusted entity grants the person a unique code so the person can authenticate their identity to the business. The person delivers the unique code to the transactional entity. The business makes a request to verify the unique code with the trusted entity. The trusted entity verifies the unique code, which authenticates the person's identity to the business.