Asynchronous Authentication Logic for Secure Computing Systems
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Secured computing systems face challenges in validating the integrity and authenticity of data received from external devices, particularly when the communication link is not secured, which can lead to unauthorized access and exposure of sensitive information.
Innovation Solution
A computing device with an input bridge, output bridge, and authentication logic that receives and authenticates data items in parallel with program execution, inhibiting output until authentication is complete, using digital signatures to verify the authenticity of data items and prevent unintended exposure of secret information.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If authentication is performed before program execution, then data security is improved, but execution time increases due to sequential processing
Solution Approach 1:
The system performs preliminary authentication of data items before program execution by calculating expected signature values and storing them in advance. When data is received from external devices, the authentication logic compares received signature values against pre-calculated expected values, enabling fast verification without delaying execution.
Solution Approach 2:
The patent implements parallel authentication and execution by having the authentication logic operate concurrently with the processing core. While the processing core executes program instructions, the authentication logic simultaneously validates data items using pre-calculated signature values, ensuring continuous productive action without interruption.
2Reliability
If authentication logic validates all data items, then data integrity is improved, but processing speed decreases due to validation overhead
Solution Approach 1:
The system extracts only the essential authentication information (signature values) from the data items and separates the authentication logic from the main execution path. The authentication logic independently validates signature values without interfering with the processing core's execution of program instructions, maintaining both integrity and speed.
Solution Approach 2:
The patent introduces signature values as intermediary elements that mediate between data items and authentication validation. Instead of directly validating entire data items which would slow processing, the system uses pre-calculated signature values as intermediaries for rapid verification, reducing validation overhead while maintaining integrity.
3Reliability
If the system waits for authentication completion before output, then security against unauthorized access is improved, but system responsiveness deteriorates
Solution Approach 1:
The system performs preliminary authentication by calculating expected signature values in advance and storing them for comparison. This pre-computation enables the output bridge to quickly verify incoming data against pre-prepared authentication criteria, maintaining security while improving responsiveness.
Solution Approach 2:
The patent enables continuous system operation by having the output bridge inhibit output only for specific data items that require authentication, while allowing other processed results to pass through. This selective inhibition maintains security for sensitive operations without completely blocking system responsiveness.
Data Source
Figure 1
Figure 2
Figure 3
AI summary
A computing device includes an input bridge, an output bridge, a processing core, and authentication logic. The input bridge is coupled to receive a sequence of data items for use by the device in execution of a program. The processing core is coupled to receive the data items from the input bridge and execute the program so as to cause the output bridge to output a signal in response to a given data item in the sequence, and the authentication logic is coupled to receive and authenticate the data items while the processing core executes the program, and to inhibit output of the signal by the output bridge until the given data item has been authenticated.