Digital Certificate Verification Using Blockchain State Tracking

Resolve Bottlenecks,
Find Innovative SolutionsGenerate Solutions

Solution Overview

Problem

Existing public key infrastructure (PKI) systems face delays and inefficiencies in revoking compromised digital certificates due to the reliance on certificate revocation lists, which can take hours to update, compromising the authenticity of key verification.

Innovation Solution

Utilizing a blockchain network to record and manage digital certificates, enabling instantaneous revocation and verification by ensuring that the certificate authority's transaction output remains unspent, and allowing for quick updates or replacements of public keys.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If certificate revocation lists are used to manage revoked digital certificates, then certificate revocation can be tracked, but there are delays in updating and publishing the lists which compromise verification authenticity

Engineering Contradiction:

Improvecertificate verification authenticityVSAvoidrevocation list update delay

Core Design Contradiction:

ReliabilityVSLoss of time

Solution Approach 1:

The patent replaces the traditional mechanical certificate revocation list system with a blockchain-based distributed ledger system. The blockchain immutably records certificate issuance and revocation transactions, allowing verifying entities to check certificate status by examining the blockchain state directly, eliminating the delay inherent in centralized revocation list updates and publications.

Inventive Principle:

Principle #28Mechanics substitution (Replace mechanical system)

Solution Approach 2:

The patent introduces a blockchain network as an intermediary between the certificate authority and verifying entities. The blockchain acts as a trusted mediator that maintains and broadcasts the current state of certificate validity, allowing real-time verification without relying on periodic revocation list publications.

Inventive Principle:

Principle #24Intermediary (Mediator)

2Ease of operation

If digital certificates remain valid until expiry date, then certificate management is simplified, but compromised keys cannot be revoked timely

Engineering Contradiction:

Improvecertificate management simplicityVSAvoidcertificate security

Core Design Contradiction:

Ease of operationVSReliability

Solution Approach 1:

The patent establishes a blockchain-based system in advance that enables immediate revocation action. When a key compromise is detected, the certificate authority can immediately broadcast a revocation transaction to the blockchain network, which then updates the certificate status across all nodes, eliminating the waiting period inherent in traditional systems.

Inventive Principle:

Principle #10Preliminary action

Solution Approach 2:

The patent replaces the traditional certificate lifecycle management system with a blockchain-based system where certificate validity is determined by the current state of the blockchain ledger. This substitution enables dynamic, real-time revocation while maintaining automated management through smart contracts or predefined revocation protocols.

Inventive Principle:

Principle #28Mechanics substitution (Replace mechanical system)

3Extent of automation

If centralized certificate authority systems are used, then certificate issuance is controlled, but revocation information is not immediately available to all entities

Engineering Contradiction:

Improvecertificate authority controlVSAvoidrevocation information availability

Core Design Contradiction:

Extent of automationVSLoss of information

Solution Approach 1:

The patent makes the blockchain network serve multiple functions simultaneously: it acts as a public bulletin board for certificate information, a distributed database for storing certificate states, and an automated notification system that propagates revocation information to all network participants in real-time, eliminating the information availability delay.

Inventive Principle:

Principle #6Universality (Multi-functionality)

Solution Approach 2:

The blockchain network serves as a neutral intermediary that receives revocation transactions from the certificate authority and automatically distributes the revocation information to all verifying entities in the network, ensuring simultaneous and equitable access to updated certificate status information.

Inventive Principle:

Principle #24Intermediary (Mediator)

Data Source

PatentEP4032228B1Methods and devices for automated digital certificate verification

Publication Date: 2026.04.01 NCHAIN LICENSING AG

Figure 1
Figure 2
Figure 3

AI summary

A public key may be recorded on the blockchain by a certificate authority in such a manner that any third party may quickly and easily verify that the public key is certified by the certificate authority and that the certification has not been revoked. The certificate authority may be able to revoke the certification nearly instantaneously, and/or may be able to simultaneously certify a new key for the same entity while revoking the old key. The verification may be incorporated into a new transaction so that there is no gap between reliance on the certificate and the verification of its validity. In some cases, each transaction in which the certificate is used may also serve as linked certificate transaction that renews the certificate to enable a subsequent use.