User Data Sharing with Verifiable Credentials and Decentralized Verification

Resolve Bottlenecks,
Find Innovative SolutionsGenerate Solutions

Solution Overview

Problem

Existing systems require users to share personally-identifiable information at multiple points, leading to inefficiencies and security risks due to the need for physical document verification and centralized data management.

Innovation Solution

A decentralized system for managing user data using verifiable credentials, where user data is validated by a trusted entity, stored on a user device, and shared securely among trusted entities without the need for repeated physical document presentation.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If users present physical documents at multiple verification points, then identity verification can be performed, but security risks increase and time is lost

Engineering Contradiction:

Improveidentity verificationVSAvoidsecurity risks

Core Design Contradiction:

ReliabilityVSObject-affected harmful factors

Solution Approach 1:

The patent replaces physical documents with digital copies stored on the user's device. These digital copies contain the same verification information but can be securely managed, encrypted, and selectively shared without the security risks of physical document handling and duplication.

Inventive Principle:

Principle #26Copying

Solution Approach 2:

The patent introduces a decentralized verification system that acts as an intermediary between users and verification points. This system uses cryptographic protocols to enable verification without requiring users to physically present documents, thereby reducing security risks while maintaining verification reliability.

Inventive Principle:

Principle #24Intermediary (Mediator)

2Reliability

If physical documents are presented at each verification point, then identity can be verified, but time is lost due to repeated verification

Engineering Contradiction:

Improveidentity verificationVSAvoidverification time

Core Design Contradiction:

ReliabilityVSLoss of time

Solution Approach 1:

The patent performs verification actions in advance by storing verified identity information in a digital format on the user's device. This preliminary verification eliminates the need for repeated physical document checks at each subsequent verification point, significantly reducing verification time while maintaining reliability through cryptographic proof.

Inventive Principle:

Principle #10Preliminary action

3Ease of operation

If centralized data management is used, then data sharing is simplified, but security against unauthorized access is reduced

Engineering Contradiction:

Improvedata sharingVSAvoidunauthorized access

Core Design Contradiction:

Ease of operationVSObject-affected harmful factors

Solution Approach 1:

The patent segments the centralized data management system into distributed components stored on individual user devices. Each user maintains control of their own data segments, which can be selectively shared with verification points. This segmentation eliminates the single point of failure and unauthorized access risks associated with centralized databases while maintaining ease of operation through standardized digital interfaces.

Inventive Principle:

Principle #1Segmentation

4Productivity

If digital verification systems are implemented, then efficiency improves, but security against unauthorized access is compromised

Engineering Contradiction:

Improveverification efficiencyVSAvoidunauthorized access

Core Design Contradiction:

ProductivityVSObject-affected harmful factors

Solution Approach 1:

The patent changes the security parameters from physical document security to cryptographic security. Digital verification systems use encryption, digital signatures, and cryptographic protocols to protect data, providing both high verification efficiency and strong security against unauthorized access. The cryptographic parameters ensure that only authorized parties can access or verify user data.

Inventive Principle:

Principle #35Parameter changes

Data Source

PatentUS20250240174A1Method and system for managing user data

Publication Date: 2025.07.24 AMADEUS SAS

AI summary

A method is described for managing data of a user, the method comprising performing an issuing process and performing a verification process. The issuing process includes sending an image of a document issued by a first entity to a second entity that is included in a group of trusted entities, the document comprising data of a user, and validating, by the second entity, the user data using the image. A verifiable credential is generated based on the user data and receiving at a user device. A signed verifiable credential is created at the user device using the received verifiable credential. A public key corresponding to the verifiable credential is pushed to a data store that is accessible by the group of trusted entities, and the signed verifiable credential is encrypted and stored at the user device. The verification process includes receiving a request to access the user data from a third entity that is included in the group of trusted entities. The encrypted and signed verifiable credential stored at the user device is decrypted and sent to the third entity. The public key is accessed from the data store and used to verify that the signed verifiable credential was created at the user device.