Cryptographic Signature Verification for Remote Device Authorization
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Networked computing environments, especially those with IoT devices, face challenges in securely authorizing operations due to limited resources and vulnerability to malicious interference, as conventional security authorization methods require additional infrastructure that may not be feasible in devices with reduced size, capacity, and complexity.
Innovation Solution
A machine-implemented method using cryptographic signature verification for authorizing operations on remote electronic devices, where an arbitrator receives an authorization request, constructs a request message with an identifier and plaintext data, sends it to an authorizer, and responds with a verifiable cryptographic signature, enabling the remote device to verify and perform the operation securely.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If conventional security authorization checking is used in networked computing environments, then security and privacy protection is improved, but device complexity and infrastructure requirements increase
Solution Approach 1:
The patent extracts the core authorization verification function from complex infrastructure and implements it using only the device's built-in cryptographic signature verification component. By taking out the essential security function and removing dependency on additional infrastructure, the system achieves secure authorization without increasing device complexity.
Solution Approach 2:
The system uses the device's own built-in cryptographic signature verification component to perform authorization checks. Instead of relying on external infrastructure, the device serves itself by verifying cryptographic signatures locally, thereby improving security while avoiding increased device complexity.
2Reliability
If cryptographic signature verification is implemented on IoT devices, then security against malicious interference is improved, but power and processing capacity requirements increase
Solution Approach 1:
The system implements only the essential cryptographic signature verification function rather than full-blown security infrastructure. By performing partial action (just verification, not generation or management of cryptographic keys), the system achieves adequate security protection while keeping power consumption within acceptable limits for IoT devices.
Solution Approach 2:
The patent leverages the device's own built-in cryptographic signature verification component, eliminating the need for additional power-intensive security infrastructure. The device uses its existing capabilities to provide security protection without increasing power consumption.
3Reliability
If additional security infrastructure is installed on devices, then authorization reliability is improved, but device size and memory capacity requirements increase
Solution Approach 1:
The patent extracts the authorization reliability function from additional infrastructure and implements it using the device's existing memory resources. By taking out the essential function and removing the need for additional memory allocation, the system achieves reliable authorization without increasing device size or memory capacity requirements.
Solution Approach 2:
The built-in cryptographic signature verification component serves multiple functions: it verifies authorization signatures, ensures security against malicious interference, and operates within existing device resources. This multi-functionality approach improves authorization reliability without requiring additional memory capacity.
4Device complexity
If built-in security facilities are leveraged without additional infrastructure, then device complexity is reduced, but authorization security may be compromised
Solution Approach 1:
The system achieves both reduced device complexity and maintained authorization security by having the device use its own built-in cryptographic signature verification component. The device serves itself, performing verification locally without additional infrastructure, thereby simultaneously reducing complexity while maintaining security through cryptographic verification.
Solution Approach 2:
The patent extracts the essential security verification function from complex infrastructure and implements it using the device's built-in capabilities. By taking out just the essential verification function and removing dependency on additional infrastructure, the system reduces device complexity while maintaining authorization security through cryptographic signature verification.
Data Source
AI summary
A method of authorizing an operation on a remote device with a cryptographic signature verification component, the remote device being operable in a communications network having human-readable messages with message signatures, comprising receiving at an arbitrator an authorization request to perform an operation requiring authorization on the remote device; retrieving from the request an operation identifier and plaintext data; sending a human-readable request with the identifier and the plaintext data to an authorizer; receiving a reply from an authorizer, the reply message comprising at least the plaintext data and a verifiable cryptographic signature identifying the authorizer derived from the request; and on receiving the reply, sending a request to perform the operation to the remote device with an authorization derived from at least the cryptographic signature, the cryptographic signature being suitable for verification by the cryptographic signature verification component on the remote device.