Digital Credential Revocation via Synchronization Counter
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
The challenge lies in effectively revoking digital keys stored on electronic devices, as they can be easily copied and shared, making it difficult to ensure that a secure device does not accept a revoked digital key as valid.
Innovation Solution
A digital credential revocation system is implemented, which includes mechanisms for revoking digital keys and synchronizing revoked and valid digital credentials across devices and servers. This system uses a synchronization counter value to ensure that only recently synchronized digital credentials are accepted by secure devices.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If digital keys are stored on electronic devices for easy access and sharing, then ease of operation is improved, but security is worsened because revoked keys can be easily copied and accepted by secure devices
Solution Approach 1:
The system performs preliminary actions by establishing a trust relationship and storing digital credentials on electronic devices before any access operations occur. This allows users to conveniently access and share digital keys across multiple devices while the system proactively prepares the security infrastructure needed to later revoke and invalidate these keys if compromised
Solution Approach 2:
The system implements a feedback mechanism where secure devices continuously verify digital credentials against the latest valid credential lists obtained from owner devices. When a credential is presented, the secure device checks it against the current validity status, creating a feedback loop that ensures only currently valid credentials are accepted, thereby maintaining security even as credentials are revoked
2Adaptability or versatility
If digital credentials are synchronized across multiple devices for trust establishment, then adaptability is improved, but device complexity is worsened due to the need for synchronization mechanisms
Solution Approach 1:
The system segments the credential management functionality across different device types with specialized roles: owner devices that issue and manage credentials, accessor devices that receive and use credentials, and secure devices that verify credentials. This segmentation allows each device type to implement simplified synchronization logic appropriate to its role, reducing overall system complexity while maintaining cross-device adaptability
Solution Approach 2:
The system introduces an intermediary mechanism in the form of valid digital credential lists that are transferred from owner devices to accessor devices and verified by secure devices. This intermediary data structure serves as a common language and trust anchor across all device types, enabling seamless credential synchronization without requiring complex direct peer-to-peer communication between all device pairs
3Ease of operation
If digital keys are made easily copyable for sharing purposes, then ease of operation is improved, but reliability is worsened as copied keys can be used by unauthorized devices
Solution Approach 1:
The system deliberately implements copying capability for digital credentials, allowing owner devices to issue and share credentials with multiple accessor devices. This enables convenient key sharing across multiple electronic devices while the system maintains authorization verification through the credential validation mechanism that checks each copied credential against the current valid credential list before allowing access
Data Source
AI summary
A device implementing a digital credential revocation system includes at least one processor configured to maintain a valid digital credential list, a revocation list, and a synchronization counter value. The at least one processor is configured to transmit a request to synchronize the valid digital credential list with an electronic device, the request including the valid digital credential list and the revocation list. The at least one processor is further configured to, in response to receipt of an updated valid digital credential list from the electronic device: clear the revocation list, replace the valid digital credential list with the updated valid digital credential list, and increment the synchronization counter value, and fulfill a received credential maintenance request when the received credential maintenance request comprises an other synchronization counter value that is greater than or equal to the incremented synchronization counter value, otherwise deny the received credential maintenance request.