Certificate-Based Client Request Verification Without Information Leakage
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing request verification systems risk leaking private information of client apparatuses, compromising their security due to the sharing of specific information during verification processes.
Innovation Solution
A request verification system and method that utilize an authorization data generation apparatus to generate authorization data using a public key certificate, which is shared with a verification apparatus for secure verification without sharing private information, and a verification apparatus that verifies this data using the shared certificate, ensuring secure communication through PKI infrastructure.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If specific information based on private information of the client apparatus is shared between the client apparatus and the electronic ticket generation device, then the verification of user requests can be performed, but the private information may be leaked and security of the client apparatus may be decreased
Solution Approach 1:
The patent extracts only the necessary verification information (electronic ticket containing user identification and access authority) from the client apparatus's private information, while leaving the sensitive private information (specific information) retained securely in the client apparatus. This allows verification to proceed without exposing the full private information to external systems.
Solution Approach 2:
The patent introduces an electronic ticket as an intermediary that carries verification data between the client apparatus and the verification system. This intermediary contains only the minimal necessary information (user ID, access authority) without exposing the underlying private information, thus mediating the verification process while protecting security.
2Ease of operation
If private information of the client apparatus is transmitted to the electronic ticket generation device, then authorization can be verified, but the security of the client apparatus is compromised
Solution Approach 1:
The system extracts only the essential authorization elements (electronic ticket with user identification and access authority) from the client apparatus's private information repository, allowing verification operations to proceed without transmitting or exposing the sensitive private information itself.
Solution Approach 2:
The patent creates a copy of the necessary verification data in the form of an electronic ticket, which is a simplified representation containing only user identification and access authority. This copy enables verification operations without requiring access to or transmission of the original private information.
Data Source
AI summary
A request verification system includes an authorization data generation apparatus, a verification apparatus, and a client apparatus. The authorization data generation apparatus stores a certificate including a public key and is configured to generate and output authorization data for authorizing a providing of a service. The verification apparatus is configured to share the certificate with the authorization data generation apparatus. The client apparatus is configured to use the provided service. In response to receiving a verification request of the authorization data from the client apparatus, the verification apparatus verifies the authorization data using the certificate.