Document Identifier Generation Using Cluster Hashing
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing systems for generating and verifying security documents are vulnerable to forgery and collisions, particularly when multiple computers generate document identifiers in parallel, leading to complexity, performance issues, and increased fraud risks.
Innovation Solution
A system using a computing cluster with node and process identifiers, generating a document identifier by concatenating a subject identifier with random values and applying a cryptographic hash function, followed by truncation and delimiters, to create a unique and secure identifier for documents, which reduces the likelihood of collisions and enhances security.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Productivity
If multiple computers work in parallel to generate documents, then productivity is improved, but the risk of document identifier collisions increases
Solution Approach 1:
The document identifier is segmented into multiple components: a cluster identifier (unique to each computer node), a document sequence number (local counter), and a checksum. This segmentation allows each component to serve a specific function - the cluster identifier prevents collisions across different nodes, while the sequence number enables parallel processing within each node.
Solution Approach 2:
A central index server acts as an intermediary between the parallel computing nodes and the document database. The index server maintains a global mapping between document identifiers and storage locations, coordinating document generation across multiple nodes to prevent collisions while enabling parallel processing.
2Ease of operation
If a central index of document identifiers is created to manage parallel processing, then document retrieval is improved, but system complexity increases
Solution Approach 1:
The central index server performs multiple functions: it acts as a coordination mechanism for document generation, maintains a global mapping between document identifiers and storage locations, and provides a single point of contact for document retrieval. This multi-functionality reduces overall system complexity by consolidating multiple responsibilities into one component.
3Reliability
If document identifiers are made more secure and unique, then fraud prevention is improved, but the likelihood of collisions increases
Solution Approach 1:
The system performs preliminary actions by incorporating a checksum calculation into the document identifier generation process. The checksum is computed over the cluster identifier and sequence number before final assembly, ensuring uniqueness and preventing collisions before they can occur, thereby enhancing security without requiring complex post-verification procedures.
Data Source
AI summary
A system for generating a security document includes a plurality of computing nodes forming a computing cluster, each computing node having a node identifier for uniquely identifying the node within the cluster, each node being capable of running multiple concurrent processes, and each process having a process identifier for uniquely identifying the process within the node,at least some of the processes on at least some of the nodes being adapted to perform the steps of:a. collecting information for inclusion in the document, the information including at least a subject identifier for uniquely identifying a subject of the document;b. generating a first random value and a second random value;c. concatenating the subject identifier and the second random value;d. applying a cryptographic hash function to the concatenation of the subject identifier and the second random value, resulting in a message digest value;e. truncating the message digest value;f. generating a document identifier comprising a concatenation of the node identifier, a first delimiter, the process identifier, the first delimiter, the first random value, a second delimiter, and the truncated message digest value;g. generating the security document, and applying the document identifier visibly to the document; andh. storing the document and the document identifier in a database, the document being retrievable from the database by means of the document identifier.