Electronic Apparatus Server Verification via Dual Certificate Hash Matching
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing electronic apparatuses face inefficiencies in verifying server reliability for app data, requiring time-consuming firmware updates and multiple certificate verifications, especially when dealing with multiple apps and servers.
Innovation Solution
An electronic apparatus and method that store and verify first and second certificates with corresponding electronic signatures, using public and private keys to decrypt and match hash data, thereby verifying server reliability and transmitting request signals for app data without the need for extensive firmware updates.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If firmware update is performed to install root certificate, then server verification capability is improved, but time consumption and cost increase
Solution Approach 1:
The patent segments the root certificate installation process from the app download process. Instead of requiring a full firmware update to install root certificates, the system allows root certificates to be received and stored independently in the memory device. This segmentation enables server verification capability to be improved without the time and cost overhead of complete firmware updates.
Solution Approach 2:
The patent implements preliminary action by pre-storing multiple root certificates in the memory device before they are needed for verification. The electronic apparatus maintains a repository of root certificates that can be immediately used for verifying server identities when downloading apps, eliminating the need to perform firmware updates at the time of verification.
2Reliability
If firmware update is performed for each app verification, then server reliability is ensured, but productivity decreases
Solution Approach 1:
The patent separates certificate verification from the app download workflow. The root certificates are stored independently in memory, and the verification process uses these pre-stored certificates directly without requiring firmware updates. This segmentation eliminates the bottleneck where server reliability checks would delay app downloads.
Solution Approach 2:
The electronic apparatus performs self-service by maintaining its own repository of root certificates in local memory. The device can independently verify server identities using these stored certificates without needing to externalize the verification process through firmware updates, thereby maintaining high download efficiency while ensuring security.
3Measurement precision
If multiple root certificates are stored for multiple servers, then verification accuracy is improved, but device complexity increases
Solution Approach 1:
The patent uses copying by storing multiple root certificates in the memory device, creating a local copy of trusted certificate authorities. This allows the electronic apparatus to verify identities of multiple different servers using these copied certificates, improving verification accuracy without requiring complex real-time certificate distribution systems.
Data Source
AI summary
An electronic apparatus including a memory, a communication interface, and a processor configured to store, in the memory, a first certificate including first certification information and a first electronic signature corresponding to the first certification information received from a first server based on an application data request, and store a second certificate including second certification information and a second electronic signature corresponding to the second certification information received from a second server. The processor obtains first hash data by decrypting the first electronic signature using a public key of the second server included in the second certification information, and second hash data by converting the first certification information. verifies the first server based on the first hash data and the second hash data, and controls, based on a the first server being verified, the communication interface to transmit a request signal for the application data to the first server.