Asynchronous Electronic Signature Validation via Local Credential Storage
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Commercial transportation industries face challenges in validating electronic signatures over asynchronous communication links due to sporadic connectivity and regulatory requirements, which are not conducive to using personal digital certificates, leading to delays and inefficiencies.
Innovation Solution
A method and system for non-real-time validation of electronically signed messages using a secure data application module hosted by a mobile system, which transmits messages to a central computer system via an asynchronous link, utilizing a user database for validation, allowing for delayed validation of user accounts and PINs, thus decoupling validation from real-time communication.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If personal digital certificates are used to validate electronic signatures, then security and trustworthiness are improved, but real-time constant communication is required which is not available in asynchronous environments
Solution Approach 1:
The system performs preliminary actions by storing signature validation data (digital certificates, public keys, user credentials) locally on the mobile platform before asynchronous transmission. This allows the mobile platform to validate signatures independently without requiring real-time connection to the central system, resolving the contradiction between needing reliable validation and operating in asynchronous mode.
2Reliability
If digital certificate validation is implemented, then security is improved, but device complexity and operational burden increase due to constant updating and storing of credentials
Solution Approach 1:
The system extracts the signature validation functionality from the central system and implements it locally on the mobile platform. By taking out the validation process and necessary credentials from the central system, the mobile platform becomes self-sufficient for validation, reducing the complexity of centralized certificate management while maintaining security.
Solution Approach 2:
The mobile platform performs self-validation of electronic signatures using locally stored validation data. This self-service approach eliminates the need for the mobile platform to constantly contact the central system for validation, reducing operational burden and complexity while maintaining security and reliability.
3Reliability
If real-time signature validation is required, then trustworthiness is ensured, but communication delays of 24 hours or more occur in asynchronous environments
Solution Approach 1:
The system prepares validation data and credentials in advance on the mobile platform, enabling immediate local validation of signatures without waiting for asynchronous communication cycles. This preliminary preparation eliminates communication delays while ensuring message trustworthiness through reliable validation.
Solution Approach 2:
The mobile platform validates signatures independently using locally stored data, performing self-service validation that does not depend on external communication. This eliminates the 24-hour or more delays inherent in asynchronous communication while maintaining trustworthiness through reliable cryptographic validation.
Data Source
AI summary
A system and method for non-real-time validation of an electronically signed message transmitted via an asynchronous communications link is provided. The method includes creating an electronic message comprising an electronically signed data entry created by executing a secure data application first portion (SDA1) module hosted by a mobile system. The method additionally includes passing the message to a communications management function first portion (CMF1) module via a synchronous interface. The CMF1 module is hosted by the mobile system. The method further includes transmitting the message from the CMF1 module to a communications management function second portion (CMF2) module in a temporally delayed manner using an asynchronous communications link. The CMF2 module is hosted by a central computer system (CCS) located remotely from the mobile system. The method further yet includes validating the electronically signed entry in a temporally delayed manner utilizing a user database. The user database is hosted by the CCS and has stored thereon user account information for all users authorized to electronically sign entries transmitted from the mobile system to the CCS. The user account information includes user information and/or user personal identification numbers (PINs) for each authorized user.