Electronic Authentication Device Using Blockchain Universal Certificate
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current digital signature processes using public certificates and blockchain technologies face challenges in authenticating users effectively, as they rely on external entities for certificate issuance and key pair management, leading to difficulties in verifying user authenticity and certificate validity.
Innovation Solution
An electronic device generates a key pair, digitally signs authentication information using a private key, and transmits this data to a blockchain network, allowing the private key to serve as a universal certificate, thereby eliminating the need for external entities in user authentication and enabling secure user verification.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If public certificates are issued by external entities, then user authentication can be performed, but costs are incurred and reliance on external entities increases
Solution Approach 1:
The electronic device generates its own key pair locally without requiring external certificate authorities. The private key serves as the device's own authentication credential, enabling self-service authentication where the device proves its identity through cryptographic signatures without needing external verification entities.
Solution Approach 2:
The private key is designed to serve multiple functions: it acts as both the authentication credential and the digital signature generator. This universal key pairs with a public key that can be distributed to multiple parties, eliminating the need for separate certificates for different authentication scenarios.
2Measurement precision
If external entities issue certificates, then user identity can be verified, but certificate validity cannot be proven if the entity fails to perform its function
Solution Approach 1:
The device autonomously generates its own key pair and uses the private key as its own certificate. This self-issued credential is signed by the device itself, creating a self-contained authentication mechanism that does not depend on external entities for validity proof.
Solution Approach 2:
The public key acts as an intermediary that allows verification of the private key's authenticity. Multiple parties can independently verify the device's identity by checking cryptographic signatures against the distributed public key, eliminating the need for a trusted intermediary certificate authority.
3Reliability
If blockchain technology is used for authentication, then security is improved, but difficulty in authenticating user identity remains
Solution Approach 1:
The public key serves as a mediator between the private key holder and the verification system. It enables third parties to verify the authenticity of digital signatures and confirm user identity without having access to the private key or requiring complex blockchain query mechanisms.
Solution Approach 2:
The public key is distributed to authentication servers and other parties in advance, before authentication is needed. This preliminary distribution of verification credentials enables fast, straightforward authentication without requiring real-time blockchain interactions during the authentication process.
Data Source
AI summary
An electronic device is provided. The electronic device includes a communication device for transmitting or receiving a signal, a memory, and a processor connected to the communication device and the memory. The memory may store instructions for controlling the communication device so as to cause the processor to generate a key pair including a public key and a private key, receive authentication information from an authentication server by using the communication device, generate signature data by electronically signing the authentication information on the basis of the private key, generate transaction data including the signature data, transmit the transaction data to a blockchain network, and transmit transaction identification information corresponding to the transaction data to the authentication server.