CGA Public Key Identification for Multi-Algorithm Support
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current CGA technologies primarily support only RSA public keys, which are insufficient for modern network communication security requirements, necessitating a solution for identifying and determining multiple public keys during the verification and signing process.
Innovation Solution
A method and system for determining CGA public keys that involve receiving and processing messages protected with multiple public keys, identifying the type of public key used, and negotiating the supported key between network nodes to ensure secure communication.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If only RSA public key is supported in CGA verification and signing, then the system is simple to implement, but it cannot meet modern network communication security requirements
Solution Approach 1:
The patent implements multi-functionality by enabling the CGA verification and signing system to support multiple public key types (RSA, ECDSA, EdDSA) through a unified architecture. The system uses public key type identification fields and corresponding algorithm selection mechanisms to handle different key types, allowing the same CGA framework to adapt to various cryptographic algorithms and security requirements without requiring separate verification systems for each key type.
2Adaptability or versatility
If multiple public keys are supported in CGA verification and signing, then modern security requirements are met, but the complexity of identifying and determining the appropriate public key increases
Solution Approach 1:
The patent applies preliminary action by pre-defining public key type identification fields and algorithm mappings in the CGA data structure. The system prepares a registry of supported public key types and their corresponding verification algorithms in advance, so that during message verification, the system can quickly identify and select the appropriate algorithm based on pre-established rules rather than performing complex real-time analysis.
Solution Approach 2:
The patent introduces an intermediary mechanism in the form of public key type identification fields and algorithm selection layers. These intermediaries act as mediators between the received message and the verification process, translating the abstract concept of 'multiple public key types' into concrete, manageable algorithm selections. The identification fields serve as intermediaries that bridge the gap between diverse cryptographic algorithms and the unified CGA verification framework.
3Reliability
If multiple public keys are supported in CGA verification and signing, then security requirements are met, but the verification and signing process becomes more complex
Solution Approach 1:
The patent applies segmentation by dividing the verification and signing process into distinct modular stages: public key type identification, algorithm selection, parameter validation, and cryptographic operation execution. Each stage is handled by separate functional modules that process specific aspects of verification independently. This segmentation allows the system to manage multiple public key types through a structured, step-by-step approach rather than attempting to handle all complexities in a single monolithic process.
Data Source
AI summary
A method and an apparatus for identifying a Cryptographically Generated Address (CGA) public key, and a method, an apparatus, and a system for determining a CGA public key are disclosed. The method for identifying a CGA public key includes: receiving, by a receiving node, a first message protected using a public key from a sending node; obtaining a type of the public key according to the first message. The method for determining a CGA public key includes: receiving, by a receiving node, a first message protected using a public key from a sending node; obtaining, a type of the public key to be determined according to the first message; and judging whether the public key to be determined is supported by the receiving node according to the type of the public key to be determined; and, if the public key to be determined is supported by the receiving node, determining the public key as a public key supported by the receiving node. The embodiments of the present invention implement identification and determining of public keys in the process of CGA that supports multiple public keys.