Compressed Certificate Verification for Faster Secure Connections

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

The splitting of large digital certificates into smaller packets for transmission in encrypted communication connections increases transmission duration and leads to connection failures, reducing communication efficiency.

Innovation Solution

A method involving compression of digital certificates to reduce data transmission volume, including consistency verification and identity verification using quantum-resistant algorithms, thereby generating an encrypted communication key for secure communication.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If the digital certificate is split into multiple small packets for transmission, then the transmission can be completed, but the transmission duration increases and connection establishment failure rate increases

Engineering Contradiction:
Improveconnection establishment success rateVSAvoidtransmission duration
Core Design Contradiction:
ReliabilityVSLoss of time

Solution Approach 1:

The patent applies segmentation by dividing the digital certificate transmission into two distinct phases: first transmitting the complete digital certificate for reliability, then transmitting a compressed version for efficiency. This resolves the contradiction by allowing the system to benefit from both complete transmission (high success rate) and compressed transmission (shorter duration) without compromising either aspect.

Inventive Principle:
Principle #1Segmentation

2Loss of time

If the digital certificate is transmitted in full without splitting, then the transmission duration is reduced, but the data transmission volume increases and may cause transmission failures

Engineering Contradiction:
Improvetransmission durationVSAvoidtransmission success rate
Core Design Contradiction:
Loss of timeVSReliability

Solution Approach 1:

The patent applies parameter changes by transforming the digital certificate into a compressed format with different size parameters while maintaining its functional integrity. The compression changes the data volume parameter, allowing faster transmission while the verification mechanism ensures the transformed certificate remains reliable for identity verification purposes.

Inventive Principle:
Principle #35Parameter changes

3Productivity

If compression is applied to the digital certificate, then the data transmission volume is reduced and transmission efficiency is improved, but verification complexity increases

Engineering Contradiction:
Improvecommunication efficiencyVSAvoidverification complexity
Core Design Contradiction:
ProductivityVSDevice complexity

Solution Approach 1:

The patent introduces an intermediary verification mechanism that mediates between the compressed certificate and the verification process. The intermediary layer performs consistency verification by comparing the compressed certificate against the original, adding a verification step that manages the complexity while enabling the use of compressed formats for improved communication efficiency.

Inventive Principle:
Principle #24Intermediary (Mediator)

Data Source

PatentUS12537696B2Network communication method and apparatus, computer device, and storage medium for verifying consistency of short digital certificates
Publication Date: 2026.01.27 TENCENT TECHNOLOGY (SHENZHEN) CO LTD
  • US12537696B2 patent drawing
  • US12537696B2 patent drawing
  • US12537696B2 patent drawing

AI summary

This application provides a network communication method performed by a computer device acting as a second communication terminal. After transmitting an encrypted communication connection request for a first digital certificate to a first communication terminal, the second terminal receives a second digital certificate from the first communication terminal. The second terminal then receives a compressed digital certificate returned by the first communication terminal, the compressed digital certificate being obtained by the first communication terminal through compression of the first digital certificate. Next the second terminal performs consistency verification on the second digital certificate and the compressed digital certificate. After determining that the consistency verification succeeds the second terminal then generates an encrypted communication key; and performs encrypted communication with the first communication terminal based on the encrypted communication key.