Digital Certificate Public Key Retrieval via Resource Reference
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
The exchange of digital certificates with long public keys is slow due to the large amount of data required, hindering rapid establishment of secure communication in public key infrastructures.
Innovation Solution
Incorporating resource identification information and a certificate key hash value into the digital certificate, allowing the public key to be retrieved from a specified resource, reducing the data size of the certificate and enabling quick transmission and verification.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If the public key is included directly in the digital certificate to ensure secure transmission, then the security and authenticity of the public key is improved, but the data size of the certificate becomes large and the exchange speed decreases
Solution Approach 1:
The patent extracts the public key from the digital certificate by introducing a separate resource identification information that points to where the public key can be retrieved. The certificate contains only a reference (resource identifier) rather than the actual public key data, significantly reducing the certificate size while maintaining security through the hash value verification mechanism.
Solution Approach 2:
The patent introduces a resource identification information as an intermediary element between the digital certificate and the public key. This intermediary acts as a pointer or reference that allows the recipient to retrieve the public key from an external resource without including it directly in the certificate, thus resolving the contradiction between security and data size.
2Productivity
If the digital certificate contains only essential information to reduce data size, then the transmission speed is improved, but the verification complexity increases
Solution Approach 1:
The patent performs preliminary action by pre-calculating and including the hash value of the public key in the digital certificate before transmission. This preliminary computation allows the recipient to quickly verify the public key's authenticity by simply comparing hashes without needing to process the entire large public key data, thus reducing verification complexity despite the reduced certificate size.
3Adaptability or versatility
If multiple digital certificates are exchanged to provide different public keys for various encryption methods, then the adaptability and versatility are improved, but the time required for establishing secure communication increases
Solution Approach 1:
The patent applies universality by enabling a single digital certificate to reference multiple public keys through multiple resource identification informations. The certificate structure can accommodate references to different encryption methods' public keys, allowing the recipient to retrieve and use the appropriate key without exchanging multiple separate certificates, thus reducing time loss while maintaining versatility.
Data Source
AI summary
Securely transmitting a public key “PK” of a certificate holder within a public key infrastructure includes transferring a digital certificate signed with a digital certificate signature and having certificate holder and certificate key information from a sender “A” to a recipient “B”. The recipient “B” establishes a data-transferring connection to a digitally contactable resource “R” on the basis of resource identification information contained in the digital certificate and retrieves the public key “PK” of the certificate holder via the resource “R”. The recipient “B” compares a key hash value determined from the public key “PK” using a specified hash function with a certificate key hash value contained in the digital certificate and signed with a digital certificate signature. The public key “PK” assigned to the certificate holder is accepted and used by the recipient “B” if the determined key hash value matches the signed certificate key hash value.