Elliptic Curve Cryptographic Signature Engine for Privacy-Preserving DAA

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Many Direct Anonymous Attestation (DAA) signature operations are costly and inflexible, necessitating a more streamlined and flexible system for signing, certifying, and quoting operations while preserving privacy.

Innovation Solution

A computing system comprising a signature engine device and a host platform, utilizing elliptic curve cryptography for privacy-preserving pseudonymous or anonymous digital signatures, with a credential issuer and verifier, enabling efficient and flexible signing and verification processes.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Ease of manufacture

If traditional DAA signature operations are used, then privacy preservation is achieved, but the operations are costly and inflexible

Engineering Contradiction:
Improvecost-effectivenessVSAvoidprivacy preservation
Core Design Contradiction:
Ease of manufactureVSReliability

Solution Approach 1:

The patent changes the cryptographic parameters from traditional group signature schemes to elliptic curve cryptography (NIST P-256 curve), which provides equivalent security with smaller key sizes and faster computation. This parameter change reduces computational costs and improves flexibility while maintaining privacy preservation through the mathematical properties of elliptic curves

Inventive Principle:
Principle #35Parameter changes

Solution Approach 2:

The patent replaces traditional mechanical/cryptographic operations with elliptic curve point operations. The signature generation uses elliptic curve point multiplication and addition, while verification uses the elliptic curve discrete logarithm problem, providing a more efficient cryptographic mechanism that maintains security and privacy

Inventive Principle:
Principle #28Mechanics substitution (Replace mechanical system)

2Adaptability or versatility

If traditional DAA signature operations are used, then privacy preservation is achieved, but the system lacks flexibility

Engineering Contradiction:
ImproveflexibilityVSAvoidprivacy preservation
Core Design Contradiction:
Adaptability or versatilityVSReliability

Solution Approach 1:

The patent creates a universal elliptic curve DAA framework that can serve multiple functions: anonymous signature generation, credential verification, and privacy-preserving authentication. The system can adapt to different应用场景 (application scenarios) while maintaining core privacy guarantees through the mathematical structure of elliptic curves

Inventive Principle:
Principle #6Universality (Multi-functionality)

Solution Approach 2:

The patent introduces dynamic elements to the DAA system, allowing the signature engine to flexibly generate signatures with varying levels of anonymity (fully anonymous or pseudonymous based on basename inclusion). The system can dynamically adjust between different operational modes while preserving privacy through elliptic curve cryptography

Inventive Principle:
Principle #15Dynamics

3Productivity

If elliptic curve cryptography is implemented, then cost-effectiveness and flexibility improve, but computational complexity increases

Engineering Contradiction:
ImproveefficiencyVSAvoidcomputational complexity
Core Design Contradiction:
ProductivityVSDevice complexity

Solution Approach 1:

The patent segments the cryptographic operations into distinct modules: key generation, signature generation, and verification. Each module performs specific elliptic curve operations independently, which organizes the computational complexity into manageable segments and improves overall system efficiency through modular design

Inventive Principle:
Principle #1Segmentation

Data Source

PatentUS8868910B2Elliptic curve cryptographic signature
Publication Date: 2014.10.21 HEWLETT PACKARD ENTERPRISE DEV LP
  • US8868910B2 patent drawing
  • US8868910B2 patent drawing
  • US8868910B2 patent drawing

AI summary

A method includes generating a randomized base point and causing the randomized base point and a private key to be loaded into a signature engine device. The method also includes signing a message using the randomized base point and the private key as a base point as well as the private key in an elliptic curve cryptographic (ECC) signature.