Verifiable Device Credential Binding for Identity Protection
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing digital identity management systems rely on centralized authorities, which can lead to security vulnerabilities and lack of proof that the presenting entity is associated with the subject entity.
Innovation Solution
The implementation of a computing system that issues a verifiable device credential (VDC) with a unique device identifier, which is then associated with a user's identifier or user VC, enhancing security by linking device identity to user identity.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If a centralized identity management system is used to verify identity, then security is improved through professionally maintained hardware and software, but the system complexity and dependency on centralized authorities increase
Solution Approach 1:
The patent segments the centralized identity verification system into distributed components. Each user device independently generates and stores verifiable credentials with cryptographic proofs, eliminating the need for a single centralized verification server. The identity verification function is distributed across multiple user devices rather than concentrated in one central system.
Solution Approach 2:
The patent introduces cryptographic proofs and verifiable credentials as intermediaries between the user and the verifying party. Instead of direct connection to a centralized authority, users present self-contained credentials with mathematical proofs that verify their identity without requiring real-time connection to the issuing authority.
2Adaptability or versatility
If decentralized identifiers are used without authority, then independence from centralized control is improved, but the ability to verify and authenticate identity deteriorates
Solution Approach 1:
The patent implements self-service identity verification where user devices autonomously generate, store, and present verifiable credentials without requiring active involvement from the issuing authority. The cryptographic proofs are self-contained within the credentials, allowing independent verification by any party without needing to contact the original issuer.
Solution Approach 2:
The patent transforms the verification mechanism by changing from trust-based verification (relying on centralized authority) to math-based verification (relying on cryptographic proofs). The parameters of verification shift from organizational trust to mathematical certainty, enabling decentralized yet reliable identity authentication.
3Reliability
If device identifier is linked to user identifier, then security against impersonation is improved, but the complexity of identity management increases
Solution Approach 1:
The patent merges the device identifier and user identifier into a single verifiable credential structure. The cryptographic proof binds the device identity to the user identity in an inseparable manner, so that verification of one automatically verifies the other. This eliminates the need for separate management systems for device and user identities.
Solution Approach 2:
The patent creates a composite identity structure combining multiple elements (user credentials, device identifiers, cryptographic proofs) into a single verifiable credential. This composite structure provides multiple layers of security and verification simultaneously, making impersonation difficult while simplifying the verification process for receiving parties.
Data Source
Figure 1A~1B
Figure 2
Figure 3
AI summary
A computing system retrieves a value of a device identifier of itself and generates a device claim asserting the value of the device identifier. The device claim is then associated with an identifier of a user of the computing system. The computing system then generates and attach proof code to the device claim to turn the device claim into a verifiable device credential (VDC). The proof code proves that the VDC is issued by the user of the computing system. The VDC is later presented to a relying entity as part of an identity protection system to further protect the user's identity.