DAA Credential Verification Using Primary Signer Signature Routine

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

In direct anonymous attestation (DAA) schemes, the primary signer faces increased computational cost and complexity due to the need to execute specialized commands for verifying the validity of DAA credentials and generating randomizable DAA public keys, which burdens resource-constrained devices.

Innovation Solution

Techniques are employed to verify the validity of DAA credentials and generate randomizable DAA public keys without the need for specialized commands, thereby reducing the computational burden on primary signers.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If specialized commands are executed to verify DAA credential validity and generate randomizable public keys, then verification accuracy and key generation capability are improved, but computational cost and complexity increase

Engineering Contradiction:
ImproveDAA credential verification validityVSAvoidcomputational complexity
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

The patent applies universality by making the primary signer execute the same signature routine used in the DAA sign process, rather than requiring specialized verification commands. The primary signer uses its existing signature routine with the base name point as input, allowing it to verify credential validity and generate randomizable public keys using a universal, general-purpose cryptographic operation already optimized for its resource constraints.

Inventive Principle:
Principle #6Universality (Multi-functionality)

2Reliability

If specialized commands are executed to verify DAA credential validity and generate randomizable public keys, then verification accuracy and key generation capability are improved, but computational cost increases

Engineering Contradiction:
ImproveDAA credential verification validityVSAvoidcomputational cost
Core Design Contradiction:
ReliabilityVSUse of energy by moving object

Solution Approach 1:

The patent applies self-service by enabling the primary signer to perform verification and key generation using its own signature routine, which it already possesses and is optimized for. The primary signer serves itself by reusing its cryptographic capabilities rather than requiring separate verification infrastructure, thereby minimizing additional computational cost and energy consumption.

Inventive Principle:
Principle #25Self-service

3Productivity

If the primary signer uses a signature routine with base name point as input, then verification efficiency is improved, but the requirement for secure element becomes more critical

Engineering Contradiction:
Improveverification efficiencyVSAvoidsecurity assurance
Core Design Contradiction:
ProductivityVSReliability

Solution Approach 1:

The patent applies segmentation by separating the cryptographic operations into two distinct roles: the primary signer (secured element) that holds the secret signing key and performs signature generation, and the secondary signer that handles message anonymization. This segmentation allows the primary signer to efficiently verify credentials using its signature routine while the secure element architecture ensures that the secret key never leaves the secured environment, maintaining security assurance.

Inventive Principle:
Principle #1Segmentation

Data Source

PatentEP2737656B1Credential validation
Publication Date: 2018.09.05 HEWLETT PACKARD ENTERPRISE DEV LP
  • EP2737656B1 patent drawingFigure 1
  • EP2737656B1 patent drawingFigure 2
  • EP2737656B1 patent drawingFigure 3A~3D

AI summary

A message to be signed and a base name point derived from a direct anonymous attestation (DAA) credential may be provided to a device. A signed version of the message and a public key value associated with the base name point may be received in response. Thereafter, the DAA credential may be determined to be valid based on the signed version of the message.