Digital Provisioning Token for Secure Document Issuance
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Providing digital documents to mobile devices in a cryptographically secure manner poses a technical challenge, especially in ensuring authorization and secure issuance of document copies.
Innovation Solution
A method involving a digital provisioning token with hash values and salt values is used to issue cryptographically secure digital document copies, linking them to a terminal device through cryptographic binding, ensuring authorization and preventing reuse.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If digital documents are provided to mobile devices, then accessibility and convenience are improved, but cryptographic security and authorization control deteriorate
Solution Approach 1:
The document data is segmented into multiple components: the original document remains with the issuer, while verified copies are distributed to multiple terminal devices. Each copy is independently validated through hash comparison, allowing widespread accessibility without compromising central security control.
Solution Approach 2:
A cryptographic verification mechanism acts as an intermediary between the document issuer and terminal devices. The server computes hash values of original documents and transmits them to authorized terminals, enabling secure verification without direct access to original documents, thus maintaining security while improving accessibility.
2Ease of operation
If digital document copies are distributed widely, then accessibility is improved, but control over authorization and reuse prevention deteriorates
Solution Approach 1:
Authorization control is performed in advance through preliminary actions: the server computes and transmits hash values to authorized terminals before document copies are distributed. Terminal devices store these hash values and use them for future verification, establishing authorization control beforehand rather than requiring complex real-time checks during distribution.
Solution Approach 2:
Instead of distributing complex authorization control mechanisms, the system distributes simple verified copies containing document data and associated hash values. Each terminal independently verifies copies using stored hash values, replacing complex centralized control with simple local verification while maintaining authorization integrity.
3Reliability
If cryptographic binding is implemented between documents and terminal devices, then security is improved, but device compatibility and ease of issuance deteriorate
Solution Approach 1:
Complex cryptographic binding mechanisms are replaced with a simplified verification system. Instead of implementing intricate cryptographic bindings between documents and specific terminal devices, the system uses universal hash-based verification that any terminal can perform. The server computes hash values and transmits them to authorized terminals, replacing complex mechanical cryptographic binding with simpler computational verification that maintains security while improving ease of issuance.
Data Source
Figure 1
Figure 2
Figure 3
AI summary
The invention relates to a method for issuing a first combination of a plurality of digital copies (176) of a plurality of issued digital documents (172) using a digital provisioning token (174). The provisioning token (174) entitles the holder to receive the plurality of digital copies (176) of the plurality of issued digital documents (172) on an end device and to cryptographically link the digital copies (176) to the end device during the issuance process.The procedure comprises receiving an issue request to issue the plurality of copies (174) of the plurality of documents to be issued from an end device (151) of a requester, receiving the provisioning token (174) from the end device (151), validating the provisioning token (174), issuing the copies (174) of the documents to be issued (172), and sending the first combination of the plurality of copies (174) of the documents to be issued (172) to the end device (151).