Digital Object Verification via Composite Identifier Matching
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing methods for verifying digital objects from remote hosts are inadequate as they rely solely on digital certificates, failing to detect changes in other object characteristics, which can lead to security risks, especially when the remote host is untrusted or malicious.
Innovation Solution
A system that verifies digital objects by storing user approval based on multiple characteristics, including cryptographic identity, remote source, protocol, and port, allowing automatic access if matching criteria are met, and presenting a request for user approval if differences are detected, thereby enhancing security by considering a broader range of attributes.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If only digital certificate verification is used, then the verification process is simple and fast, but security is compromised when other object characteristics change
Solution Approach 1:
The patent extends verification from a single dimension (digital certificate) to multiple dimensions by creating a composite identifier that includes certificate hash, object hash, and originating site information. This multi-dimensional approach allows comprehensive security verification without requiring complete re-verification when only minor characteristics change.
Solution Approach 2:
The system changes the verification parameter from solely certificate-based to a composite parameter including certificate hash, object hash, and site identifier. This parameter expansion enables the system to detect changes in object characteristics while maintaining efficient verification through hash-based comparison.
2Reliability
If multiple object characteristics are verified, then security is improved, but user interaction increases and automation decreases
Solution Approach 1:
The system performs preliminary verification by comparing the composite identifier against a stored database of approved identifiers before presenting dialog boxes to users. This preliminary automated check filters out clearly safe objects, reducing unnecessary user interactions while maintaining security.
Solution Approach 2:
The system serves itself by automatically making access decisions for objects with matching composite identifiers in the database, reserving user involvement only for cases requiring human judgment. This self-service automation handles routine verification efficiently.
3Object-affected harmful factors
If comprehensive object verification is implemented, then security against malicious sources is enhanced, but the verification process becomes more complex
Solution Approach 1:
The patent extracts critical security information (certificate hash, object hash, site identifier) from the complete object verification process and uses only these extracted elements for comparison. This extraction approach provides comprehensive security without the complexity of verifying all possible object characteristics.
Solution Approach 2:
The system replaces complex mechanical verification processes with cryptographic hash functions and digital signature validation. These mathematical substitutions provide robust security verification while simplifying the implementation compared to traditional manual or mechanical verification methods.
Data Source
AI summary
Disclosed herein are systems, methods, and non-transitory computer-readable storage media for verifying a digital object obtained from a remote host. A system configured to practice the method downloads a first object from a first remote source and presents the user with a first request to allow access to the first object. Upon user approval, a multitude of characteristics associated with the object are stored to facilitate future uses of the object. When a second object is downloaded from a second remote source, the system checks the database for a stored user approval. Access to the second object is allowed if the multitude of characteristics associated with the first and second objects match. If the system does not find a match, the user is presented with a second request to allow access to the object.