Blockchain Capsule File Notarization for Data Integrity
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Traditional centralized databases and cloud storage systems are vulnerable to tampering, and existing encryption methods fail to provide secure verification of file authenticity and timestamp, especially when encryption keys are compromised, leading to security exploits and inability to verify file alterations.
Innovation Solution
A blockchain-based data certification system that encapsulates, encrypts, notarizes, and verifies user file data using a capsule file generation process, which includes selecting files, authenticating the user, applying a cryptographic digital signature, storing it on a blockchain, and generating a capsule file containing the signature, timestamp, and encrypted content, allowing for secure sharing and verification.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If conventional encryption methods are used to protect files, then file confidentiality is maintained, but file authenticity and timestamp verification cannot be proven
Solution Approach 1:
The patent introduces a trusted third-party notary system as an intermediary between the file owner and recipients. This notary system applies cryptographic digital signatures to files and stores them on a blockchain, providing independent verification of file authenticity and timestamp without requiring the recipient to have access to encryption keys. The notary acts as a mediator that certifies file integrity and creation time.
Solution Approach 2:
The patent creates a cryptographic copy (digital signature) of the file content that is stored on the blockchain. This signature copy serves as immutable proof of the file's authenticity and timestamp, separate from the encrypted file itself. The signature can be verified independently without accessing the original file or encryption keys.
2Reliability
If blockchain technology is used for immutable data storage, then tamper-proof storage is achieved, but latency and throughput performance deteriorate
Solution Approach 1:
The patent extracts only the essential cryptographic signature and timestamp data from the full file content and stores only these extracted elements on the blockchain. The bulk file data remains stored off-chain in traditional storage systems. This extraction approach maintains tamper-proof verification capabilities while avoiding the performance penalties of storing large amounts of data on the blockchain.
Solution Approach 2:
The patent segments the data storage into two parts: cryptographic proof data (signatures and timestamps) stored on the blockchain for immutability, and bulk file content stored in traditional storage systems for efficient access. This segmentation allows each component to be optimized for its specific function, achieving both security and performance.
3Ease of operation
If encryption keys are retained by file owners for decryption, then file access flexibility is maintained, but key compromise allows malicious alteration without detection
Solution Approach 1:
The notary system serves as a trusted intermediary that holds and manages cryptographic signatures independently of the file owner and recipients. When a file needs verification, the recipient contacts the notary to obtain the signature rather than relying on the file owner's keys. This intermediary approach maintains file access flexibility while protecting against key compromise, as the notary can verify and re-issue signatures without the original owner's private keys being exposed.
Data Source
AI summary
A process for centralized user file encapsulation, encryption, notarization and verification using a blockchain and a system that certifies data in a proprietary “capsule” file format, with tamper-proof blockchain are disclosed. By utilizing a hybridization of both cloud and blockchain storage mechanisms, the present invention allows for the performant and cost-effective certification of large amounts of data. Furthermore, the generation of the capsule allows for users to store both the data payload and its digital notarization. The system then allows for users to share the capsule with others (by way of permissions enforced by the notary system) and upload it for verification of authenticity at a later point in time.