Blockchain DoS Prevention via CA Verification and Pre-payment
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Blockchain systems are vulnerable to denial-of-service (DoS) attacks, where malicious entities overload trusted third-parties with excessive requests, disrupting secure interactions and compromising network resources.
Innovation Solution
Implementing a backward-compatible solution using X.509v3 certificates and the PKCS #12 protocol, where entities undergo local verification by a Certification Authority (CA), generating mathematically tied random numbers for unique key pairs, and requiring nominal pre-payments in cryptocurrencies to deter malicious requests, ensuring only legitimate entities complete secure interactions.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If a trusted third-party facilitates secure interactions using traditional protocols, then secure communication is enabled, but the system becomes vulnerable to denial of service attacks due to excessive requests overwhelming the trusted third-party
Solution Approach 1:
The patent implements preliminary verification by the Certification Authority before facilitating secure interactions. Entities must undergo local verification and complete authentication procedures in advance, establishing trusted identities through certificates before participating in blockchain operations. This preliminary action filters out malicious entities before they can launch DoS attacks, protecting the trusted third-party from being overwhelmed by excessive requests
2Ease of operation
If the trusted third-party processes all requests without verification, then service accessibility is maintained, but DoS attacks can successfully overload the system
Solution Approach 1:
The patent introduces an intermediary verification layer through the Certification Authority that mediates between entities and the trusted third-party. The CA performs local verification and authentication, acting as a filter that prevents unverified malicious requests from reaching the trusted third-party. This intermediary mechanism maintains service accessibility for legitimate entities while blocking DoS attack traffic, preventing system overload
3Adaptability or versatility
If traditional PKI certificates are integrated into blockchain technology, then backward compatibility is achieved, but the system may not provide sufficient protection against DoS attacks without additional verification mechanisms
Solution Approach 1:
The patent enhances traditional PKI certificates by adding specific parameters and verification steps tailored for blockchain operations. The Certification Authority implements local verification procedures and authentication mechanisms that go beyond traditional PKI, adding parameters such as entity verification status and authentication credentials. These parameter changes maintain backward compatibility with existing PKI infrastructure while providing enhanced protection against DoS attacks through stricter verification requirements
Data Source
AI summary
At least one example embodiment is directed to a method of preventing a denial of service attack on a network that includes receiving a request from a first entity to initiate a blockchain operation on behalf of the first entity and a second entity; and generating, in response to receiving the request, a prompt including at least one condition that is associated with the blockchain operation. The method includes sending a first message that includes the prompt to the first entity; and receiving a second message that includes an indication of whether the at least one condition has been satisfied or is authorized to be satisfied. The method includes determining whether the request from the first entity is attempting the denial of service attack or is issuing a legitimate request, and facilitating the blockchain operation upon satisfaction of the at least one condition.