Encapsulated Security Tokens Using Nested Digital Signatures

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Existing digital transaction systems face challenges in securely controlling and managing the propagation of functional data elements, such as identity and financial information, which can lead to unauthorized access and fraud, especially in the digital environment.

Innovation Solution

The implementation of Encapsulated Security Tokens (ESTs) that use nested digital signatures to secure and propagate functional data elements, ensuring that only authorized entities can access and use them by proving possession through a chain of digital signatures, thereby enhancing security and tracking propagation.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Ease of operation

If functional data elements are shared for electronic transactions, then ease of operation and transaction capability are improved, but security and control over propagation are worsened

Engineering Contradiction:
Improveease of sharing functional dataVSAvoidsecurity control over propagation
Core Design Contradiction:
Ease of operationVSReliability

Solution Approach 1:

The patent implements nested digital signatures where multiple signature layers are embedded within each other. Each layer represents a different level of authorization or validation, with inner signatures contained within outer signatures. This nested structure allows the system to maintain security control while enabling functional data to be shared across multiple transactions and parties, as each nested layer can be independently verified without exposing the underlying data.

Inventive Principle:
Principle #7Nested doll (Nesting)

2Reliability

If functional data is protected with multiple digital signatures, then security is improved, but device complexity and processing overhead are worsened

Engineering Contradiction:
Improvesecurity of functional dataVSAvoidcomplexity of signature verification
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

The patent applies digital signatures to functional data elements in advance, before the data is shared or used in transactions. By pre-signing the data with multiple nested signatures during data creation or authorization phases, the system eliminates the need for complex real-time verification during transaction execution. The verification process simply checks previously applied signatures against the data, significantly reducing processing complexity while maintaining high security.

Inventive Principle:
Principle #10Preliminary action

Data Source

PatentUS10410213B2Encapsulated security tokens for electronic transactions
Publication Date: 2019.09.10 TRADEWEB MARKETS LLC
  • US10410213B2 patent drawing
  • US10410213B2 patent drawing

AI summary

Functional data for use in one or more digital transactions is secured by using an encapsulated security token (EST). In certain embodiments, the EST is created by encapsulating digital data including the functional data using at least two digital signature systems of two parties. The encapsulation and subsequent de-encapsulation can utilize digital signature systems of the parties that involve a private key for encapsulation and a public key for de-encapsulation. If constructed carefully over a series of rigorous events, the resulting EST can be practically impossible to counterfeit. In addition, a propagation of rights can be tracked for auditing and rights can be easily terminated or modified.