Client Device Attestation Tokens for Verifiable Request Integrity
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Client devices face issues with data integrity and trustworthiness due to malicious attacks, fraudulent requests, and emulation, leading to insecure communication channels over public networks.
Innovation Solution
The use of attestation tokens generated by client devices, including a public key, token creation time, and a device integrity token, digitally signed with a private key, to verify the integrity and trustworthiness of requests, ensuring secure communication channels by validating the client device's integrity.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Adaptability or versatility
If client devices transmit requests over public networks, then communication accessibility is improved, but communication integrity deteriorates due to interception and alteration by third parties
Solution Approach 1:
The patent introduces an intermediary verification system that uses device attestation tokens and digital signatures to mediate between client devices and service providers. The attestation token acts as a trusted intermediary that verifies device identity and integrity state, preventing third-party interception and alteration while maintaining public network accessibility.
Solution Approach 2:
The system performs preliminary verification by requiring client devices to present attestation tokens that prove device integrity before allowing communication. The integrity state is assessed in advance through device attestation, and only devices meeting integrity thresholds are permitted to transmit requests, preventing compromised devices from participating in communications.
2Reliability
If device integrity verification is implemented, then communication security is improved, but system complexity increases due to additional verification steps
Solution Approach 1:
The patent uses digital signatures as cryptographic copies that verify device identity without requiring the receiving system to replicate the entire device verification process. The attestation token contains a digital signature that serves as a verifiable copy of device integrity proof, simplifying the receiving system's verification tasks while maintaining security.
3Reliability
If attestation tokens with digital signatures are used, then request authenticity is improved, but processing time increases due to verification operations
Solution Approach 1:
The verification system performs partial verification by checking specific critical elements of the attestation token (digital signature validity, integrity state threshold) rather than examining every detail of device state. This selective verification approach provides sufficient authenticity assurance while minimizing processing time overhead.
Data Source
AI summary
Methods, systems, and apparatus, including an apparatus for verifying the integrity of requests and the devices that sent the requests. In some aspects, a method includes receiving, from a client device, a request including an attestation token generated by the client device. The attestation token includes a set of data that includes at least a public key of the client device, a token creation, and a device integrity token that includes a verdict. The attestation token also includes a digital signature of the set of data generated using a private key corresponding to the public key. The integrity of the request is verified using the attestation token by determining that the token creation time being within a threshold duration of the time at which the request was received, the set of data was not modified since the attestation token was created, and the verdict indicates the client device is trustworthy.