Data Source Authenticity Verification Using Signature Certificates
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
The increasing sophistication of media editing tools and AI technologies makes it difficult to distinguish between authentic and malicious data sources, necessitating a method to verify the authenticity of data streams.
Innovation Solution
A signature certificate is created using a digital certificate and a key, stored in a secure element of a recording device, and used to sign data streams, leveraging an eIDAS token for cryptographic verification.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Productivity
If media editing tools and AI technologies are used to create content, then content creation efficiency and realism are improved, but the ability to verify authenticity deteriorates
Solution Approach 1:
The patent applies preliminary action by embedding authentication metadata and digital signatures into the media file during the initial creation or ingestion phase. This allows the content to carry inherent authenticity markers from the start, enabling verification without adding complexity to the creation process itself. The authentication data is prepared and attached in advance, so when the content is later distributed or viewed, its authenticity can be immediately verified.
2Reliability
If cryptographic signing methods are implemented to verify data streams, then data authenticity is improved, but device complexity increases
Solution Approach 1:
The patent uses an intermediary approach by introducing a separate authentication metadata structure that carries cryptographic signatures independently from the main media content. This intermediary layer handles the cryptographic verification burden, allowing the core media processing systems to remain relatively simple while still enabling robust authenticity verification through the dedicated authentication layer.
Solution Approach 2:
The patent extracts the authentication and verification functionality into a separate, dedicated component rather than embedding it throughout the entire media processing system. By separating the cryptographic verification functions from the main media handling code, the system achieves strong security without unnecessarily complicating the primary media processing workflows.
Data Source
AI summary
A method is described for verification of authenticity of a data source. The method includes generating a key and receiving a digital certificate. The key may be a private key of a key pair, and the digital certificate may be a qualified e-signature (QES) certificate that is tied to the data source and generated by an electronic identification, authentication and trust services (eIDAS). Using the digital certificate and the key, creating a signature certificate. The signature certificate may be stored in a secure element of a recording device. The recording device receives a data stream that may comprise one or more of audio, video, photo, or other sensor data. The data stream is signed with the signature certificate. A public key of the key pair may then be used to verify that the data stream originated at the data source.