Edge Computing Application Authentication Using Hash and Signature Data
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Electronic devices face challenges in verifying the validity of applications requesting edge computing services, leading to potential security vulnerabilities when invalid applications are mistakenly allowed to access these services due to unreliable identification methods.
Innovation Solution
The electronic device employs a verification method using hash data and signature data to authenticate the validity of applications, ensuring secure edge computing services by validating the authenticity of applications before granting access.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If application identification is performed using application names, then the ease of operation is improved, but the reliability deteriorates because invalid applications with the same name can be mistakenly allowed to access edge computing services
Solution Approach 1:
The application identification process is segmented into two independent parts: application name matching (for ease of operation) and hash data verification (for reliability). The hash data acts as a separate validation layer that does not interfere with the simplicity of name-based identification, yet provides cryptographic proof of application authenticity.
Solution Approach 2:
Hash data serves as an intermediary verification mechanism between the application name and the edge computing service access decision. Instead of relying solely on application names, the system introduces hash data as a mediator that provides cryptographic validation, ensuring that only legitimate applications can access edge computing services while maintaining the user-friendly name-based interface.
2Device complexity
If application names are used for identification, then the device complexity is reduced, but the security deteriorates due to inability to prevent unauthorized applications from accessing services
Solution Approach 1:
The system performs preliminary hash data verification before granting access to edge computing services. By calculating and verifying hash data in advance, the system prevents unauthorized applications from accessing services while maintaining a relatively simple identification structure. This preliminary security check adds protection without significantly increasing the overall system complexity.
3Ease of operation
If simple application name matching is implemented, then the ease of operation is improved, but the measurement precision deteriorates because the system cannot accurately distinguish valid from invalid applications
Solution Approach 1:
The system creates a cryptographic copy of the application's unique characteristics through hash data. This hash copy serves as a fingerprint that accurately represents the original application's identity. By comparing this cryptographic copy against stored hash values, the system achieves high-precision authentication while maintaining the simplicity of name-based user interaction.
Data Source
Figure 1
Figure 2
Figure 3
AI summary
In an electronic device and an operating method of an electronic device according to various embodiments, the electronic device may: receive, from a first server, access information about a second server for accessing the second server; receive access information about a third server from the second server accessed on the basis of the access information about the second server; in response to a service connection request using the third server of an application, check the validity of the application on the basis of data for verifying the validity of the application included in the access information about the third server; and perform the service by accessing the third server on the basis of the result of identifying the validity of the application.