DAA Credential Verification Using Primary Signer Signature Routine
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
In direct anonymous attestation (DAA) schemes, the primary signer faces increased computational cost and complexity due to the need to execute specialized commands for verifying the validity of DAA credentials and generating randomizable DAA public keys, which burdens resource-constrained devices.
Innovation Solution
Techniques are employed to verify the validity of DAA credentials and generate randomizable DAA public keys without the need for specialized commands, thereby reducing the computational burden on primary signers.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If specialized commands are executed to verify DAA credential validity and generate randomizable public keys, then verification accuracy and key generation capability are improved, but computational cost and complexity increase
Solution Approach 1:
The patent applies universality by making the primary signer execute the same signature routine used in the DAA sign process, rather than requiring specialized verification commands. The primary signer uses its existing signature routine with the base name point as input, allowing it to verify credential validity and generate randomizable public keys using a universal, general-purpose cryptographic operation already optimized for its resource constraints.
2Reliability
If specialized commands are executed to verify DAA credential validity and generate randomizable public keys, then verification accuracy and key generation capability are improved, but computational cost increases
Solution Approach 1:
The patent applies self-service by enabling the primary signer to perform verification and key generation using its own signature routine, which it already possesses and is optimized for. The primary signer serves itself by reusing its cryptographic capabilities rather than requiring separate verification infrastructure, thereby minimizing additional computational cost and energy consumption.
3Productivity
If the primary signer uses a signature routine with base name point as input, then verification efficiency is improved, but the requirement for secure element becomes more critical
Solution Approach 1:
The patent applies segmentation by separating the cryptographic operations into two distinct roles: the primary signer (secured element) that holds the secret signing key and performs signature generation, and the secondary signer that handles message anonymization. This segmentation allows the primary signer to efficiently verify credentials using its signature routine while the secure element architecture ensures that the secret key never leaves the secured environment, maintaining security assurance.
Data Source
Figure 1
Figure 2
Figure 3A~3D
AI summary
A message to be signed and a base name point derived from a direct anonymous attestation (DAA) credential may be provided to a device. A signed version of the message and a public key value associated with the base name point may be received in response. Thereafter, the DAA credential may be determined to be valid based on the signed version of the message.