ID Document Personalization With Off-Chip Signature Retrieval
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing ID documents face limitations in storage capacity for digital signatures, which restricts the amount of personalized data that can be securely stored and verified, and there is a need for enhanced security measures to ensure data integrity.
Innovation Solution
The method involves storing at least part of the digital signature outside the electronic chip in a computer network, using network retrieval information to access it, allowing for additional personalized data storage and enhanced security through multiple cryptographic algorithms and hash tree data structures.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If digital signatures are stored inside the electronic chip, then security and data integrity are ensured, but storage capacity is limited
Solution Approach 1:
The digital signature is divided into two parts: a first part stored in the electronic chip and a second part stored in external memory. This segmentation allows the chip to store only essential verification data while the bulk of the signature resides externally, resolving the contradiction between maintaining security (through chip-stored verification capability) and increasing storage capacity (through external memory).
Solution Approach 2:
The storage architecture transitions from a single-dimension (chip-only) approach to a two-dimension approach by introducing external memory as a separate storage layer. The retrieval data structure bridges these dimensions, enabling the system to access signatures across both chip and external memory, thereby expanding effective storage capacity without compromising security.
2Loss of information
If more personalized data is stored in the electronic chip, then information completeness is improved, but storage capacity is exceeded
Solution Approach 1:
The system extracts the large digital signature data from the chip's internal storage and places it in external memory, leaving only retrieval metadata in the chip. This extraction enables the chip to accommodate additional personalized information while the complete signature remains accessible externally, thus preventing information loss without exceeding chip storage capacity.
Solution Approach 2:
Retrieval data acts as an intermediary between the chip and external memory, containing references that enable efficient access to the full digital signature. This intermediary structure allows the system to maintain information completeness by providing a pathway to retrieve the full signature while keeping the chip's storage available for personalized data.
3Quantity of substance
If digital signatures are stored outside the electronic chip, then storage capacity is optimized, but retrieval complexity increases
Solution Approach 1:
The system performs preliminary action by pre-structuring the retrieval data with organized references to external signature locations. This pre-organization of retrieval metadata simplifies the subsequent access process, allowing the system to benefit from external storage capacity while minimizing retrieval complexity through预先 established data structures.
Solution Approach 2:
The patent replaces complex mechanical/random access patterns with a structured data-driven retrieval mechanism. By substituting organized digital reference structures (retrieval data) for ad-hoc access methods, the system achieves efficient signature retrieval from external memory without proportionally increasing system complexity.
Data Source
Figure 1
Figure 2
Figure 3
AI summary
The invention relates to a method for personalizing an ID document (1), wherein an ID document (1) is provided with an electronic chip (3) embedded in a document body (2), and wherein, before and/or after embedding the electronic chip (3) in the document body (2), the following is provided during personalization: storing personalized data in the electronic chip (3); calculating a first digital signature for the personalized data using a first signature method; storing the first digital signature for the personalized data at least partially outside the electronic chip (3) in a computer network (9), such that the first digital signature is at least partially retrievable in the computer network (9) using first network retrieval information;and storing initial retrieval data, indicating the initial network retrieval information, on the document body (2) and/or on the electronic chip (3). Furthermore, a personalized ID document and a method for authenticating a personalized ID document are provided.