Blockchain Fail-Safe Synchronization for Digital Record Authentication

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Existing digital record validation systems face challenges with single-point-of-failure vulnerabilities, reliance on trust in service providers, and scalability issues, particularly in verifying the authenticity of electronic documents using asymmetric cryptography and key-based systems.

Innovation Solution

A distributed hash tree-based infrastructure that uses a blockchain for storing values, allowing for independent verification without relying on keys or trust in a central authority, and implements redundancy and synchronization mechanisms to address single-point-of-failure concerns.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If asymmetric cryptography is used to create digital signatures, then digital record authentication is enabled, but cryptographic signature keys may become compromised over time

Engineering Contradiction:
Improveauthentication reliabilityVSAvoidcertificate validity period
Core Design Contradiction:
ReliabilityVSDuration of action of stationary object

Solution Approach 1:

The patent segments the authentication process by separating the long-lived Merkle root hash (which provides enduring verification capability) from short-lived digital signatures. This allows the system to maintain authentication reliability without requiring long-term validity of individual cryptographic keys, as the Merkle tree structure enables verification of signature validity against the current state without exposing the underlying key material.

Inventive Principle:
Principle #1Segmentation

Solution Approach 2:

The patent introduces a Merkle tree structure as an intermediary between the digital signatures and the verification process. The Merkle root hash acts as a mediator that provides a trusted reference point for verifying signatures without requiring direct trust in key management. This intermediary layer allows verification of authentication validity while protecting against key compromise, as the Merkle structure enables detection of unauthorized changes without exposing key material.

Inventive Principle:
Principle #24Intermediary (Mediator)

2Reliability

If key-based systems are used for digital record authentication, then verification capability is provided, but it becomes necessary to keep track of very large sets of keys and their validity

Engineering Contradiction:
Improveverification capabilityVSAvoidkey management complexity
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

The patent merges multiple individual key verification operations into a single Merkle root hash verification. Instead of tracking and verifying each individual digital signature key separately, the system combines all key information into the Merkle tree structure, where a single root hash represents the entire set of valid keys. This dramatically reduces key management complexity while maintaining verification capability.

Inventive Principle:
Principle #5Merging (Combining)

Solution Approach 2:

The patent uses the Merkle tree structure to create a compact copy or representation of the entire key set in the form of the Merkle root hash. This single hash value serves as a verified copy of the entire key management state, eliminating the need to distribute and track individual keys across the system. Verification parties can independently compute and compare Merkle roots without accessing the actual key material.

Inventive Principle:
Principle #26Copying

3Ease of manufacture

If digital records are treated as free-standing entities with individual keys, then key generation is simplified, but entire systems can be compromised without individual users being aware

Engineering Contradiction:
Improvekey generation simplicityVSAvoidsystem-wide security
Core Design Contradiction:
Ease of manufactureVSReliability

Solution Approach 1:

The patent implements feedback mechanisms where each digital record includes or can verify against the Merkle root hash, providing continuous feedback about the overall system state. This allows individual records to maintain their simplicity while being connected to the collective security state of the system. When the Merkle root changes (indicating key compromise or system state change), all records can be re-verified against the new root, providing system-wide security awareness without complicating individual record generation.

Inventive Principle:
Principle #23Feedback

Data Source

PatentUS10103893B2Blockchain-supported, fail-safe synchronization in a data authentication infrastructure
Publication Date: 2018.10.16 GUARDTIME SA
  • US10103893B2 patent drawing
  • US10103893B2 patent drawing
  • US10103893B2 patent drawing

AI summary

A distributed hash tree-based authentication system for digital input records has more than one upper-level core node, each of which receives at least one uppermost value from aggregators. Communicating with each other about which aggregator values they have received, the nodes try to reach agreement as to which of these values should be included in duplicated current intra-node hash tree evaluations so as to form a consistent top-level value used as the basis for digital signatures associated with the digital input records. The top-level value is then entered either directly, or after combination with other top-level values over a period, into a block of a blockchain.