Distributed Cryptographic Schema for Transaction Authentication
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
In distributed computing environments, ensuring security and performance can be at odds, with centralized security degrading performance due to latency and distributing sensitive cryptographic information exposing it to attacks.
Innovation Solution
A cryptographic schema is distributed to remote computer systems, allowing them to authenticate client devices without communicating with a centralized security system, reducing latency and bandwidth requirements, and minimizing the number of security systems that need to be protected.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If centralized security systems are used to authenticate client devices, then security is improved, but latency increases and performance degrades
Solution Approach 1:
The patent segments the centralized security system into distributed security functionality by embedding security logic and cryptographic verification capabilities directly into remote computer systems. Each remote system becomes an independent authentication node, eliminating the single centralized authentication bottleneck and reducing latency through localized security decisions.
2Loss of time
If cryptographic information is distributed to remote systems, then authentication speed improves, but security exposure increases
Solution Approach 1:
The patent creates verified copies of cryptographic schemas and distributes them to remote computer systems. These copies are obtained through secure channels and are used locally for authentication decisions. The copying approach enables fast local authentication while maintaining security through controlled distribution and verification of cryptographic materials.
Solution Approach 2:
The cryptographic schemas are pre-distributed to remote systems before authentication is needed. This preliminary action allows remote systems to perform authentication independently without real-time communication with the security system, reducing latency while the pre-distribution is performed through secure offline or encrypted channels.
3Reliability
If centralized security systems process all authentication requests, then security control is improved, but bandwidth requirements increase
Solution Approach 1:
The patent extracts authentication functionality from the centralized security system and relocates it to remote computer systems. By taking out the cryptographic verification capability and placing it at the edge, the system eliminates the need for continuous high-bandwidth communication between remote systems and the central security system, reducing bandwidth consumption while maintaining security control through distributed decision-making.
Data Source
AI summary
A cryptographic scheme associated with a transaction service is received at a first computer system. Subsequent to receiving the cryptographic schema, the first computer system performs a configuration process for a transaction to be performed with the transaction service. The configuration process includes receiving a request for transaction configuration information from a client device. The request includes a cryptographic token generated by a second computer system the transaction service. The first computer system determines whether to grant the request based on analyzing the cryptographic token according to the cryptographic schema. Based on the determining, the first computer system sends transaction configuration information. The configuration process is performed by first computer system independent of communication between the second computer system and the first computer system.