Verifiable Credential Verification via Intermediary Codes
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
In offline environments, service providers face challenges in verifying the identity information of service users without additional devices, and users are hesitant to share their digital identity credentials with untrusted providers.
Innovation Solution
An identity information verification apparatus that allows service users to verify their identity information indirectly through their terminals, using first identity information received from an external issuing organization and second identity information registered in advance, without exposing the information to the service provider.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If service users directly provide digital identity credentials to service providers in offline environment, then identity verification can be performed, but users' identity information is exposed to untrusted service providers
Solution Approach 1:
The patent introduces a verification code as an intermediary element between the user's digital identity credential and the service provider. The verification code contains encoded identity information that allows the service provider to verify user identity without directly accessing or exposing the original digital identity credential. This mediator approach resolves the contradiction by enabling reliable verification while protecting user identity information from exposure.
Solution Approach 2:
The patent creates a copy of the essential verification information from the digital identity credential in the form of a verification code (QR code or text). This copy contains sufficient information for identity verification but does not reveal the complete original credential. The service provider verifies the copy rather than the original, thus enabling verification while protecting the user's actual identity information from exposure.
2Reliability
If medium- and small-sized service providers use additional devices to verify identity information, then verification capability is improved, but device complexity and cost increase
Solution Approach 1:
The patent enables service providers to perform identity verification using their existing mobile terminals without requiring additional specialized verification devices. The verification process is self-contained within the service provider's existing smartphone or tablet, utilizing standard camera and processing capabilities. This self-service approach resolves the contradiction by maintaining verification capability while eliminating the need for additional complex equipment.
Solution Approach 2:
The patent makes the service provider's existing mobile terminal perform multiple functions: it serves as both the service delivery platform and the identity verification device. The terminal uses its camera to capture verification codes, processes the verification logic, and communicates results - all without requiring separate dedicated verification hardware. This multi-functionality approach enables verification capability while avoiding additional device complexity.
3Ease of operation
If digital identity credentials are managed using smartphones, then convenience is improved, but offline service provision becomes difficult without smartphones
Solution Approach 1:
The patent extracts the essential verification information from the smartphone-based digital identity credential and encodes it into a verification code that can be displayed and verified offline. This extracted verification code serves as a portable, offline-capable representation of the digital credential. Users can present this extracted verification information without needing their smartphone during the verification process, thus resolving the contradiction between smartphone-based convenience and offline adaptability.
Data Source
AI summary
A verifiable credential verifying apparatus and method are disclosed. The verifiable credential verifying method of the verifiable credential verifying apparatus, according to an embodiment of the present disclosure, comprises the steps of receiving, by the verifiable credential verifying apparatus, a verifiable credential verification request for receiving approval of using a service provided by a service provider from a first terminal of a service user, verifying verifiable credential of the first terminal by using first verifiable credential of the first terminal, which has been received according to the verifiable credential verification request, and second verifiable credential pre-registered by the first terminal in the verifiable credential verifying apparatus; and transmitting a result of verifying the verifiable credential of the first terminal to the first terminal and a second terminal of the service provider.