Compressed Cryptographic Certificate Validation
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Establishing secure connections over networks is hindered by latency issues due to the large size of certificate chains and the number of transmissions required for authentication, which can lead to amplification attacks and packet loss.
Innovation Solution
The method involves compressing cryptographic certificates into compact representations, such as hashes, which are compared locally to expedite the validation process, reducing the need for multiple transmissions and minimizing data size, thereby establishing secure connections more efficiently.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If certificate chains are transmitted to establish secure connections, then authentication reliability is improved, but transmission data size increases and latency worsens
Solution Approach 1:
The patent segments the certificate validation process into two phases: first transmitting compact hash representations for quick matching, then transmitting full certificates only when necessary. This segmentation reduces initial transmission time while maintaining authentication reliability through a fallback mechanism.
Solution Approach 2:
The patent performs preliminary compression of certificates into hash representations before transmission. This preliminary action allows the receiving entity to quickly validate certificates against its local list without waiting for full certificate transmission, thereby reducing latency while preserving authentication capability.
2Measurement precision
If full certificates are transmitted for validation, then validation accuracy is improved, but transmission data size increases
Solution Approach 1:
The patent extracts the essential validating information from full certificates by computing hash representations. These extracted hashes retain the critical authentication properties needed for validation while occupying minimal space, thus achieving high validation accuracy with reduced data transmission.
Solution Approach 2:
The patent uses hash representations as compact copies of full certificates. These copies contain sufficient information for validation purposes without including all the data of the original certificates, thereby maintaining validation accuracy while dramatically reducing transmission data size.
3Reliability
If multiple transmissions are used for certificate exchange, then authentication completeness is improved, but number of transmissions increases and latency worsens
Solution Approach 1:
The patent performs preliminary transmission of hash representations that enable immediate validation checks. This preliminary action allows the receiving entity to determine certificate validity without waiting for subsequent full certificate transmissions, thereby improving connection establishment speed while maintaining authentication completeness through conditional fallback transmissions.
Data Source
AI summary
A method, system and computer-readable medium for establishing secure connections using compressed cryptographic chaining certificates, the method including receiving a first compact representation corresponding to a certificate for validating a first entity at a second entity, retrieving a local list of one or more compact representations corresponding to one or more certificates locally available to the second entity, comparing the first compact representation to the one or more compact representations within the local list, determining if the first compact representation matches at least one of the one or more compact representations, retrieving the certificate corresponding to the at least one of the one or more compact representations if the first compact representation matches the at least one of the one or more compact representations and validating the first entity using the retrieved certificate corresponding to the at least one of the one or more compact representations.