Dual-Phase Verification for Encrypted Service Communication

Resolve Bottlenecks,
Find Innovative SolutionsGenerate Solutions

Solution Overview

Problem

Existing service communication methods are insecure due to the ease with which malicious processes can use designated service access keys, compromising the security of encrypted communication.

Innovation Solution

Implement a dual verification process involving synchronous and asynchronous verification to determine service key information, ensuring secure encrypted communication by controlling communication connections based on verification results.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If a fixed key is designated by the service access process for encrypted communication, then service communication can be established, but security is compromised as malicious processes can easily use the designated key

Engineering Contradiction:

Improveservice communication securityVSAvoidverification process complexity

Core Design Contradiction:

ReliabilityVSDevice complexity

Solution Approach 1:

The verification process is segmented into two distinct phases: synchronous verification (performed immediately during authentication request handling) and asynchronous verification (performed in the background after authentication). This segmentation allows security checks to be distributed across different time points, improving security without blocking the authentication flow while managing complexity through structured process division.

Inventive Principle:

Principle #1Segmentation

Solution Approach 2:

Synchronous verification is performed as a preliminary action during the authentication request handling before the actual service communication begins. This preliminary security check ensures that only verified processes can obtain service key information, preventing malicious processes from easily utilizing designated keys while maintaining efficient authentication flow.

Inventive Principle:

Principle #10Preliminary action

2Reliability

If synchronous verification is performed during authentication request handling, then security is improved, but authentication time increases

Engineering Contradiction:

Improveservice access securityVSAvoidauthentication time

Core Design Contradiction:

ReliabilityVSLoss of time

Solution Approach 1:

Synchronous verification is performed as a preliminary action during authentication request handling to ensure security before service communication begins. This preliminary check validates the service access process immediately, preventing unauthorized access while maintaining efficient authentication flow by not delaying the overall process.

Inventive Principle:

Principle #10Preliminary action

Solution Approach 2:

Asynchronous verification continues the security validation process in the background after authentication is granted, allowing the useful action of service communication to proceed without interruption. This continuous verification approach maintains security while eliminating time delays from the authentication flow.

Inventive Principle:

Principle #20Continuity of useful action

3Reliability

If asynchronous verification is performed after authentication, then security is enhanced, but system resource consumption increases

Engineering Contradiction:

Improveservice communication securityVSAvoidsystem resource consumption

Core Design Contradiction:

ReliabilityVSUse of energy by moving object

Solution Approach 1:

Asynchronous verification continues the security validation process in the background after authentication is granted, allowing service communication to proceed without interruption. This approach enhances security by performing additional verification checks while minimizing impact on system resources by not blocking the main authentication and communication flow.

Inventive Principle:

Principle #20Continuity of useful action

Solution Approach 2:

The patent introduces a security client as an intermediary component that handles the asynchronous verification process. This intermediary manages the background verification tasks, isolating resource consumption from the main service access process and allowing enhanced security checks to be performed without directly impacting system resource usage during critical communication operations.

Inventive Principle:

Principle #24Intermediary (Mediator)

Data Source

PatentUS12445299B2Service communication method, system, apparatus, electronic device, and storage medium

Publication Date: 2025.10.14 TENCENT TECHNOLOGY (SHENZHEN) CO LTD

AI summary

A service communication method, system, apparatus, electronic device, computer-readable storage medium, and computer program product; the method includes: receiving an authentication request sent by a service access process, performing synchronous verification processing on the service access process, and performing asynchronous verification processing on the service access process; determining service key information allocated for the service access process according to a synchronous verification processing result of the service access process, sending the service key information to the service access process to perform encrypted service communication with the service access process based on the service key information, and controlling a communication connection used for bearing the encrypted service communication with the service access process according to an asynchronous verification processing result of the service access process.