Zero-Knowledge Proof for Selective Medical Data Disclosure
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing systems for selectively disclosing medical data face challenges in ensuring authenticity and preventing duplication, particularly when the data issuer is decommissioned or unavailable, and verifying the legitimacy of de-identified records is difficult due to the lack of direct contact and robust authentication measures.
Innovation Solution
A system comprising an issuer device generating digital signatures with a secret record identifier, a selector device performing zero-knowledge proofs to verify the authenticity of attributes, and a receiver device obtaining selectively disclosed attributes with public record identifiers to prevent duplication, allowing for secure and trustworthy selective disclosure of medical data.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If de-identification is performed to protect privacy, then data security is improved, but authenticity verification becomes difficult
Solution Approach 1:
The patent segments the record into disclosed attributes and undisclosed attributes, applying different handling methods to each. Disclosed attributes are made available for verification while undisclosed attributes remain protected, allowing authenticity verification without compromising privacy.
Solution Approach 2:
The patent introduces an intermediary authentication tag that bridges the gap between de-identified data and authenticity verification. This tag contains cryptographic proof of the record's origin and integrity, allowing receivers to verify authenticity without accessing the actual personal information.
2Reliability
If authentication measures are applied to verify record legitimacy, then authenticity is improved, but device complexity increases
Solution Approach 1:
The patent performs preliminary authentication by generating the authentication tag during the record creation phase. This tag is embedded in the record structure, so that verification becomes a simple validation process rather than a complex authentication sequence, reducing system complexity.
Solution Approach 2:
The patent creates a cryptographic copy of the record's essential verification information in the authentication tag. This copy contains sufficient proof of authenticity without requiring the original complex authentication infrastructure, simplifying the verification process for receivers.
3Reliability
If direct contact between issuer and receiver is eliminated through de-identification, then privacy is improved, but fraud detection capability deteriorates
Solution Approach 1:
The authentication tag serves as an intermediary that carries cryptographic proof of the record's legitimate origin from the issuer to the receiver. This allows fraud detection without requiring direct contact or revealing identifying information, maintaining privacy while enabling verification.
Solution Approach 2:
The patent implements feedback through the authentication tag, which provides verifiable proof of the record's authenticity. Receivers can verify this feedback to detect fraudulent records, and the system can use verification results to improve future record handling, all without compromising privacy.
Data Source
Figure 1a
Figure 1b
Figure 2
AI summary
Some embodiments are directed to a system (100) for selectively disclosing attributes of a record. An issuer device (110) generates a digital signature on a message comprising the attributes and a secret record identifier. The record, secret record identifier, and signatures are provided to a selector device. The selector device (111) selectively discloses attributes of the record to a receiver device (112), proving authenticity by means of a zero-knowledge proof of knowledge of the signature on the attributes. The receiver device (112) verifies the proof with respect to the public key of the issuer and the received attributes.