Digital Data Integrity Verification via Distributed Signature Segmentation
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing methods for verifying the integrity of digital data in large volumes, especially in real-time and across distributed systems, face challenges such as centralized signature storage, cumbersome management, and compliance with regulations, which can compromise security and integrity verification.
Innovation Solution
A method and system for calculating and verifying the integrity of digital data using a signature composed of metadata and data hash values, allowing for distributed storage and verification, which includes obtaining metadata and data hash values, concatenating them, applying a hash function, and recording the signature in a master database, enabling secure and decentralized integrity checks.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If centralized signature storage is used, then integrity verification can be performed by a centralized system, but the management becomes cumbersome and security is compromised
Solution Approach 1:
The patent segments the signature verification process by distributing signature components to multiple third parties instead of centralizing them. Each third party holds a portion of the signature data, and verification requires combining these distributed components, thereby eliminating single-point management complexity while maintaining security through distributed architecture
Solution Approach 2:
The patent introduces trusted third parties as intermediaries that hold and manage signature components. These intermediaries act as mediators between the data storage system and verification processes, distributing the trust model across multiple independent entities rather than requiring a single centralized authority, thus reducing management burden while enhancing security
2Reliability
If hash chains of digital data are implemented on the same server, then hacking is made difficult through nested signatures, but fully centralized storage is required which is not suited to certain application domains
Solution Approach 1:
The patent segments the signature chain across multiple independent third parties rather than implementing it on a single server. This allows the hash chain integrity mechanism to be distributed across different locations and organizational boundaries, making the system adaptable to various application domains including cross-organizational data sharing and distributed cloud storage scenarios
Solution Approach 2:
The patent transitions from a single-server vertical architecture to a multi-party distributed horizontal architecture. By distributing signature components across multiple third parties in different locations, the system gains versatility to serve diverse application domains while maintaining the cryptographic integrity guarantees of hash chains
3Productivity
If large volumes of digital data are stored on servers with high-frequency access, then real-time processing is enabled, but the risk of hacking and data alteration increases
Solution Approach 1:
The patent segments signature verification across multiple third parties, creating a distributed security model that protects against hacking. Even if one party is compromised, the distributed nature of signature components prevents complete system breach, while maintaining real-time verification capability through parallel processing across multiple nodes
Solution Approach 2:
The patent implements continuous integrity feedback through cryptographic hash chains that link successive data versions. This feedback mechanism allows real-time detection of any data alteration, providing immediate security alerts while enabling high-frequency access and processing without increasing vulnerability to hacking
Data Source
Figure 1
Figure 2
Figure 3
AI summary
The invention relates to signature calculation and integrity verification of digital data. The signature calculation system for at least one block of digital data forming a digital document, enabling verification of its integrity, the digital document being part of a series of digital documents processed successively, comprises at least one computer system (2) including a processing unit (4), and includes or is connected to an electronic memory (8) adapted to store a master database (10). For a digital document (12), the processing unit (4) is configured to: -obtain one or more metadata elements (M1,...,Mk) associated with the digital document, and calculate at least one associated hash value; -calculate a hash value of at least part of the digital data to be protected; -calculate a signature (Sign(n)) of the digital document as a function of the hash value(s) associated with the metadata and the hash value of the digital data to be protected, and - record the signature (Sign(n)) of the digital document, with an associated registration number, in the master database (10).