Hash-Based Signature Method for Resource-Constrained Devices
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Hash-based signature methods are computationally intensive and difficult to implement in resource-constrained devices, and outsourcing calculations to more powerful external devices risks compromising the security of the signature process.
Innovation Solution
A method that outsources non-secret data processing steps to a more powerful external device while keeping secret data processing steps within the resource-constrained device, reducing computational effort without compromising security.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If hash-based signature methods are used in resource-constrained devices, then quantum computer resistance is achieved, but computational effort and time increase significantly
Solution Approach 1:
The patent segments the signature creation process into two distinct parts: hash calculations that process secret data (performed locally on the resource-constrained device) and hash calculations that do not process secret data (outsourced to a terminal device). This segmentation allows the device to maintain security by keeping secret data processing local while improving performance by outsourcing computationally intensive but non-sensitive calculations.
Solution Approach 2:
The patent introduces a terminal device as an intermediary between the resource-constrained device and the verification system. This intermediary performs certain hash calculations on behalf of the resource-constrained device, reducing its computational burden while maintaining the security properties of the hash-based signature scheme.
2Productivity
If calculations are outsourced to an external device, then computational effort is reduced, but security may be compromised
Solution Approach 1:
The patent carefully segments which calculations can be outsourced and which must remain local. Specifically, hash calculations that process secret data are kept on the resource-constrained device, while hash calculations that do not involve secret data are outsourced to the terminal device. This segmentation ensures that security is maintained for critical operations while allowing performance optimization for non-critical operations.
Solution Approach 2:
The patent applies different quality requirements to different parts of the calculation process. Critical operations involving secret data are performed locally with high security requirements, while non-critical operations are performed remotely with lower security requirements. This local quality approach allows the system to optimize overall performance while maintaining appropriate security levels for each operation type.
Data Source
Figure 1~3
AI summary
The invention provides a method V for calculating and outputting a hash-based signature by a resource-limited computing device, comprising hash calculation steps in which secret data is processed and hash calculation steps in which no secret data is processed, characterized in that: - at least some of the hash calculation steps in which no secret data is processed are performed by a terminal device in communication with the resource-limited computing device, which has higher resources than the resource-limited computing device, and are provided to the resource-limited computing device; - hash calculation steps and signature calculation steps in which secret data is processed are performed by the resource-limited computing device.