Communication Device Data Transfer Using Triply Signed Receipts
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing data transfer systems in untrusted environments face challenges in ensuring data authenticity and integrity, particularly in offline scenarios and decentralized architectures, leading to vulnerabilities in cyber-attacks and high implementation costs.
Innovation Solution
A system involving a first and second communication device, along with a qualification device, uses authentication units, communication units, and processing units to generate and verify triply signed receipts, ensuring data authenticity through short-range and long-range communication networks, with the qualification device validating and authorizing data transfers.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If a decentralized solution is implemented to ensure data transfer integrity, then reliability is improved, but device complexity increases
Solution Approach 1:
The system segments the verification function into distributed qualification devices that operate independently. Each qualification device maintains a local qualification unit with receipts and updating data, eliminating the need for a centralized verification server. This segmentation improves reliability through decentralization while managing complexity by making each node self-sufficient.
Solution Approach 2:
The system performs preliminary authentication and qualification actions before data transfer. Qualification devices pre-validate communication devices and store qualification data locally. This preliminary action ensures that when data transfer occurs, the integrity verification is already established, improving reliability without adding complex real-time verification mechanisms.
2Measurement precision
If centralized servers are used for data validation, then measurement precision is improved, but loss of information increases due to bandwidth constraints
Solution Approach 1:
The system extracts the validation function from centralized servers and embeds it into distributed qualification devices. Each qualification device stores locally the qualification unit, receipts, and updating data needed for validation. This extraction eliminates continuous communication with centralized servers, reducing bandwidth usage while maintaining validation accuracy through local verification capabilities.
Solution Approach 2:
Qualification devices perform self-service by maintaining their own qualification units and validation data locally. They can independently verify data transfer integrity without requiring continuous connection to external servers. This self-service approach reduces bandwidth consumption while preserving validation precision through local cryptographic verification.
3Ease of operation
If traditional security protocols are used, then ease of operation is improved, but object-affected harmful factors increase due to vulnerability to cyber-attacks
Solution Approach 1:
The system implements preliminary authentication where communication devices are qualified before data transfer. Qualification devices verify device identities and establish cryptographic credentials in advance. This preliminary action creates a secure foundation that protects against cyber-attacks while maintaining ease of operation through automated authentication processes.
Solution Approach 2:
Qualification devices act as intermediaries between communication devices, providing a layer of security without requiring direct complex interactions. The qualification device mediates the authentication and verification processes, simplifying the security model while protecting against attacks through cryptographic qualification mechanisms.
Data Source
Figure 1
Figure 2
Figure 3
AI summary
The present invention relates to the technical field of the transfer of data, such as, for example, between Internet of Things (IoT) devices. Particularly, the invention relates to the technical field of the transfer of data between a first and a second communication devices in an untrusted environment.