Digital Certificate Digest Caching for Verification Optimization
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing digital certificate verification processes result in network traffic waste and unnecessary certificate submission and verification operations, as users with low security requirements undergo the same certificate verification steps as those with high security requirements, and large digital certificates are transmitted in a format that is inefficient.
Innovation Solution
A method and apparatus that generate a digital certificate digest through digest computation, cache it, and transmit only the digest with user service requests, allowing the service server to verify the digest when necessary, reducing redundant certificate submissions and operations.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If the digital certificate is collected and submitted to the server for verification before each high security operation, then the security verification is ensured, but the network traffic is wasted and the operation complexity increases
Solution Approach 1:
The patent extracts only the essential verification element (certificate information) from the complete certificate data, allowing the server to verify the certificate without receiving the entire large-size certificate file, thus reducing network traffic while maintaining verification security
Solution Approach 2:
The patent performs certificate verification during the login process in advance, so that when high security operations are needed later, the verification has already been completed and the result can be reused, avoiding repeated verification and reducing network traffic
2Reliability
If the digital certificate is collected and submitted to the server for verification before each high security operation, then the certificate verification is completed, but the operation time is increased
Solution Approach 1:
The patent performs certificate verification during the login process in advance, so that when high security operations are needed later, the verification has already been completed and the result can be reused, avoiding repeated verification and reducing operation time
Solution Approach 2:
The patent combines the certificate verification process with the login process, so that the verification is performed once during login rather than separately before each high security operation, reducing the total time required
3Loss of information
If the large volume digital certificate is transmitted in POST format, then the certificate information is complete, but the network traffic is increased
Solution Approach 1:
The patent extracts only the essential verification element (certificate information) from the complete certificate data, allowing the server to verify the certificate without receiving the entire large-size certificate file, thus reducing network traffic while maintaining verification security
Data Source
Figure 1
Figure 2
Figure 3
AI summary
A digital certificate of a user is collected. A digest computation of a collecting result of the digital certificate is performed to generate a digital certificate digest of the user. The digital certificate digest is cached. In response to an operation of the user, a service request containing the cached digital certificate digest is transmitted to a service server such that when a service corresponding to the service request is a service for which the digital certificate needs to be verified, the service server executes the service when the verification passes through verification of the digital certificate digest. The techniques of the present disclosure execute the verification operation of the digital certificate along with specific service operations, which reduce the number of certificate verifications and the number of requests for executing the specific service.