Verifiable Claim Generator with Distinct Commitments
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
The existing systems for verifiable claims face challenges in preventing 'name-based aggregation' when multiple relying parties share the same digital identifier, leading to unauthorized access to personal information, and require managing multiple claims for different organizations, increasing the burden on user devices.
Innovation Solution
A user device generates and manages distinct generators and commitments for each claim, allowing it to acquire and present claims independently across various relying parties without being tied to a specific digital identifier, using a prime number and random values to ensure secure and flexible claim submission.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If the same DID is used for all RPs, then the user device can use a single identifier across multiple relying parties, but RPs can cooperate to identify and aggregate personal information about the user
Solution Approach 1:
The patent segments the single DID into multiple distinct DIDs (first DID and second DID) that can be used with different RPs. This segmentation prevents RPs from aggregating information about the user by using different identifiers for different interactions, while still allowing the user device to manage multiple claims efficiently.
Solution Approach 2:
The patent applies local quality by assigning different DIDs to different RPs based on their specific characteristics (e.g., RP-specific identifiers). Each RP receives claims with DIDs tailored to that particular RP, ensuring that information cannot be aggregated across RPs while maintaining ease of operation for each individual interaction.
2Object-affected harmful factors
If different DIDs are used for each RP, then name-based aggregation is prevented, but the user device must manage multiple DIDs and corresponding claims
Solution Approach 1:
The patent creates a universal first DID that can be used across multiple RPs for claims of the same type (e.g., educational background). This multi-functional approach allows the user device to manage fewer DIDs while still preventing aggregation, as the same DID can serve multiple RPs without enabling information aggregation through RP-specific identifiers.
Solution Approach 2:
The patent merges the management of multiple DIDs into a unified system where the user device generates and manages both first and second DIDs through a single process. The claiming system consolidates the handling of multiple claims with different DIDs, reducing the operational burden on the user device while maintaining security against aggregation.
3Adaptability or versatility
If all claim types are acquired in advance for all RPs, then claims can be presented to any RP, but the user device must store and manage a large number of unnecessary claims
Solution Approach 1:
The patent performs preliminary actions by generating the claiming system and establishing the framework for acquiring claims with appropriate DIDs before actual claim presentation. The user device prepares by setting up the capability to use different DIDs for different RPs, but does not pre-acquire all possible claims, allowing flexible claim acquisition only when needed for specific RPs.
Solution Approach 2:
The patent introduces dynamics by making the claim acquisition process adaptive rather than static. The user device dynamically determines which claims to acquire based on the specific RP and claim type needed, rather than storing all possible claims in advance. This dynamic approach reduces the quantity of stored claims while maintaining the ability to submit appropriate claims to any RP.
Data Source
AI summary
A user device includes: a holding unit that holds confidential information; a generation unit that generates a generator; an arithmetic unit that calculates a commitment corresponding to the generator, on the basis of the generator and the confidential information; and an acquisition unit that transmits, to a first external device, an acquisition request including the generator and the commitment corresponding to the generator, to acquire a verifiable claim (VC) including the generator and the commitment corresponding to the generator. In the user device, the value of the generator the acquisition unit uses to newly acquire the VC is different from the value of the generator the acquisition unit has used to acquire the VC in the past.