Double Authentication System for Electronic Documents
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Smart cards are vulnerable to security attacks such as malware, power analysis, and physical disassembly, which can compromise the integrity of electronically signed documents, allowing unauthorized hackers to sign data without the user's knowledge.
Innovation Solution
A double authentication system (DAS) that includes a client module, high assurance signing service (HASS) module, and hardware security module (HSM), which employs multiple layers of digital signatures to ensure that the user is aware of and approves the electronic signing of documents, using a smart card and HSM to generate encrypted hash values and produce a high assurance signed package.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If smart card is used for electronic signing, then authentication capability is provided, but security against malware and unauthorized access is insufficient
Solution Approach 1:
The system divides the authentication process into two separate stages: first, the smart card provides initial authentication by signing a hash of the document; second, the HSM provides enhanced security by signing a hash of the smart card's signature. This segmentation ensures that even if one component is compromised, the other remains secure and can prevent unauthorized access.
Solution Approach 2:
The HSM acts as an intermediary between the smart card and the final document verification. It receives the smart card's signature, verifies it against the document, and provides an additional layer of cryptographic verification. This intermediary role ensures that the smart card's private key never directly signs the final document, reducing the attack surface for malware.
2Ease of operation
If smart card is left in reader for extended periods, then convenience of operation is improved, but security risk increases
Solution Approach 1:
The system performs preliminary authentication actions through the HSM before the smart card is removed from the reader. The HSM signs the document hash using the smart card's signature as input, creating a secondary verification layer that is already in place before the smart card is physically removed. This preliminary action ensures continued security even when the smart card is left in the reader.
3Ease of operation
If direct communication between client and smart card is allowed, then ease of operation is improved, but access control and information security are compromised
Solution Approach 1:
The HSM serves as an intermediary that mediates all communication between the client and the smart card's cryptographic functions. The client never directly accesses the smart card's private key; instead, it communicates with the HSM, which handles the cryptographic operations using the smart card's signature. This intermediary architecture maintains ease of operation while preventing unauthorized access to sensitive information.
4Productivity
If smart card private key is used directly for document signing, then signing speed is improved, but security against power analysis and physical attacks is reduced
Solution Approach 1:
The signing process is segmented into two cryptographic operations: first, the smart card signs a hash of the document (maintaining speed); second, the HSM signs a hash of that signature (providing security). This segmentation allows the system to maintain the speed advantage of smart card signing while adding the security layer of HSM verification, protecting against power analysis and physical attacks on the private key.
Data Source
AI summary
Disclosed is a double authentication system (“DAS”) for electronically signing a first data from a user having a smart card, where the smart card has a personal identification number (“PIN”). As an example, the DAS may include a client module, high assurance signing service (“HASS”) module, and hardware security module (“HSM”).