Avatar Authentication via STIR/SHAKEN Signing Servers
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing communication systems lack an effective mechanism to authenticate avatars in real-time communications, which can lead to unauthorized use of patented or copyrighted avatars and potential security breaches.
Innovation Solution
The proposed solution involves using the STIR (Secure Telephone Identity Revisited) and SHAKEN (Signature-based Handling of Asserted information using toKEtS) framework to authenticate avatars by signing and verifying avatar identities through a signing server and verification server, respectively.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If avatar authentication mechanism is implemented using STIR/SHAKEN framework, then security and authenticity of avatars is improved, but device complexity and processing overhead increase
Solution Approach 1:
The patent introduces signing servers and verification servers as intermediary components that handle the complex cryptographic operations. The originating network entity sends signing requests to a signing server which generates signed tokens, and the terminating network entity sends verification requests to a verification server which validates the tokens. This mediator approach offloads the computational complexity from the end devices while maintaining security.
Solution Approach 2:
The authentication mechanism performs preliminary signing actions before the actual communication session. The signing server generates signed tokens in advance during the session setup phase, and the verification server prepares verification rules beforehand. This preliminary action ensures that when the actual communication occurs, the authentication is already established, reducing real-time processing complexity.
2Reliability
If signed tokens and verification requests are transmitted through network entities, then avatar identity integrity is improved, but communication time and processing delay increase
Solution Approach 1:
The signing process is performed in advance during the session initiation phase before the actual media communication begins. The signed token is generated and attached to the session initiation request, so that when the communication session starts, the authentication is already complete. This preliminary action minimizes the time impact on the actual communication.
Solution Approach 2:
The authentication mechanism operates continuously in the background during session setup without interrupting the main communication flow. The signing and verification processes are integrated into the existing session initiation protocol exchanges, allowing authentication to occur continuously alongside the setup procedures without requiring separate dedicated time slots.
Data Source
AI summary
An apparatus including circuitry configured to: receive, from a first user equipment, a session initiation protocol invite request to a second user equipment, wherein the session initiation protocol invite request includes information related to at least one avatar; transmit at least one signing request to a signing server, the at least one signing request including the information related to the at least one avatar as part of a signing process; receive, from the signing server, a response to the at least one signing request, wherein the response to the at least one signing request includes a signed token or other relevant information created during the signing process in relation with the at least one avatar; and forward, to a network entity, the session initiation protocol invite request with an identity header, wherein the identity header includes the signed token or the other relevant information created during the signing process.