Distributed Transaction Verification Network for 5G Data Protection

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Current wireless communication systems face challenges in ensuring end-to-end data protection and secure transaction handling, particularly in vertical industries like finance, healthcare, and automotive, where data integrity and identity management are critical, especially with the integration of Distributed Ledger Technology (DLT) in 5G networks.

Innovation Solution

The implementation of a DLT-enabled verification mechanism using a trusted application entity (middleware) that manages end-to-end data protection by verifying digital identifiers through a Distributed Transaction Verification Network (DTVN), ensuring secure service provisioning and user plane data integrity over 5G networks, and enabling secure firmware updates for IoT devices.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If traditional centralized authentication systems are used in wireless communication networks, then service provisioning is simplified, but data integrity and identity management security are insufficient for vertical industries

Engineering Contradiction:
Improvedata integrityVSAvoidsystem complexity
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

The patent introduces a Distributed Transaction Verification Network (DTVN) as an intermediary layer between the application server and mobile communication network. This DTVN acts as a mediator that verifies digital identifiers using distributed ledger technology, providing enhanced data integrity and security without requiring complete system redesign. The DTVN receives verification requests, checks digital identifiers against the distributed ledger, and returns verification results, thus solving the security deficiency while maintaining manageable system complexity through modular integration.

Inventive Principle:
Principle #24Intermediary (Mediator)

Solution Approach 2:

The patent replaces traditional centralized authentication mechanisms with a distributed verification system based on blockchain/digital ledger technology. Instead of relying on centralized authentication servers that are vulnerable to single points of failure, the system uses cryptographic verification of digital identifiers against a distributed ledger. This substitution provides immutable verification, enhanced security, and trustlessness, addressing the reliability concern while the modular architecture keeps complexity manageable.

Inventive Principle:
Principle #28Mechanics substitution (Replace mechanical system)

2Reliability

If digital identifiers are verified through a distributed transaction verification network, then identity management security is enhanced, but verification time and processing delay increase

Engineering Contradiction:
Improveidentity management securityVSAvoidverification time
Core Design Contradiction:
ReliabilityVSLoss of time

Solution Approach 1:

The system performs preliminary actions by pre-registering digital identifiers in the distributed ledger before actual service provisioning. When a device needs verification, the digital identifier is already present in the distributed ledger with its cryptographic proof, enabling rapid verification without time-consuming registration processes. The application server can quickly query the DTVN to check if a digital identifier exists and is valid, significantly reducing verification time while maintaining high security.

Inventive Principle:
Principle #10Preliminary action

Solution Approach 2:

The patent extracts the verification function from the main service provisioning flow, making it a separate, optimized process. The DTVN handles verification requests independently, using efficient cryptographic checks against the distributed ledger rather than full authentication protocols. This extraction allows the main service flow to continue with minimal delay, as the verification is performed in parallel or as a quick check rather than a sequential bottleneck.

Inventive Principle:
Principle #2Taking out (Extraction)

3Reliability

If end-to-end data protection is implemented using DLT-enabled verification, then security for vertical applications is improved, but implementation complexity and infrastructure requirements increase

Engineering Contradiction:
ImprovesecurityVSAvoidimplementation complexity
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

The patent segments the end-to-end data protection system into distinct functional modules: the application server that generates service requests, the DTVN that handles verification, and the mobile communication network that provides service provisioning. Each segment has a specific responsibility and can be implemented independently. The DTVN is further segmented into nodes that collectively maintain the distributed ledger, allowing incremental deployment and reducing overall implementation complexity.

Inventive Principle:
Principle #1Segmentation

Solution Approach 2:

The DTVN is designed as a universal verification platform that can serve multiple vertical industries (finance, healthcare, automotive, etc.) through a common interface and distributed ledger infrastructure. Rather than implementing separate verification systems for each industry, the same DTVN can verify digital identifiers across different applications and sectors, reducing implementation complexity through reuse and standardization while maintaining high security.

Inventive Principle:
Principle #6Universality (Multi-functionality)

Data Source

PatentUS20240098500A1Managing end-to-end data protection
Publication Date: 2024.03.21 LENOVO (SINGAPORE) PTE LTD
  • US20240098500A1 patent drawing
  • US20240098500A1 patent drawing
  • US20240098500A1 patent drawing

AI summary

Apparatuses, methods, and systems are disclosed for managing the end-to-end (“e2e”) data protection. One apparatus includes a transceiver that receives, from an application server, a management requirement for managing e2e data protection for at least one service. The apparatus includes a processor that obtains at least one digital identifier (“DIG-ID”) of at least one client device for the at least one service in response to receiving the management requirement and verifies the at least one DIG-ID with a distributed transaction verification network. The transceiver further sends a request to a mobile communication network, the request providing the at least one verified DIG-ID, and sends a trigger event to the at least one client device for connecting to the mobile communication network using the at least one verified DIG-ID.