Implicit Certificate Public-Key Reconstruction Data Merging

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Existing cryptographic protocols, such as DSA and RSA, require larger cryptographic values to achieve the same level of security as Elliptic Curve Cryptography (ECC), leading to increased resource consumption in terms of bandwidth, computing power, and storage, particularly in resource-limited environments.

Innovation Solution

The proposed framework incorporates additional information, such as validity period or date, into the public-key reconstruction data of implicit certificates in ECC-based systems, reducing the overall size of the implicit certificate and minimizing separate additional information, thereby reducing bandwidth, computing power, and storage requirements.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If additional information (such as validity period or date) is stored separately in implicit certificates, then the certificate contains complete authentication data, but the certificate size increases and storage requirements increase

Engineering Contradiction:
Improvecertificate completenessVSAvoidcertificate size
Core Design Contradiction:
ReliabilityVSQuantity of substance

Solution Approach 1:

The patent combines additional information (validity period, date, etc.) directly into the public-key reconstruction data field of the implicit certificate. This merging eliminates the need for separate storage of additional information, reducing overall certificate size while maintaining data completeness. The reconstruction data is designed to embed multiple pieces of information in a compact format that can be processed during key reconstruction.

Inventive Principle:
Principle #5Merging (Combining)

Solution Approach 2:

The public-key reconstruction data is given a multi-functional role: it serves both as the basis for reconstructing the public key and as a container for additional certificate information. This universal usage of the reconstruction data field eliminates the need for separate dedicated fields for additional information, thereby reducing certificate overhead while ensuring all necessary data is preserved.

Inventive Principle:
Principle #6Universality (Multi-functionality)

2Loss of information

If conventional explicit certificates are used with separate additional information fields, then all certificate data is explicitly stored, but bandwidth and storage requirements increase

Engineering Contradiction:
Improveinformation completenessVSAvoidbandwidth consumption
Core Design Contradiction:
Loss of informationVSLoss of energy

Solution Approach 1:

The patent merges additional information into the public-key reconstruction data, eliminating separate fields and reducing the total data volume that must be transmitted. This combination maintains all necessary information while minimizing bandwidth consumption during certificate distribution and renewal operations.

Inventive Principle:
Principle #5Merging (Combining)

Solution Approach 2:

The patent extracts the concept of separate additional information fields from the traditional certificate structure and integrates them into the existing reconstruction data field. This extraction and integration approach eliminates redundant data structures while preserving all necessary information, thereby reducing transmission requirements.

Inventive Principle:
Principle #2Taking out (Extraction)

3Quantity of substance

If implicit certificates incorporate additional information into public-key reconstruction data, then certificate size is reduced, but the complexity of data processing during reconstruction increases

Engineering Contradiction:
Improvecertificate sizeVSAvoidprocessing complexity
Core Design Contradiction:
Quantity of substanceVSDevice complexity

Solution Approach 1:

The patent performs preliminary organization of additional information within the public-key reconstruction data during certificate generation. By pre-structuring the data in a standardized format with clear delimiters or encoding schemes, the system simplifies subsequent processing during key reconstruction, despite the embedded complexity of multiple information elements.

Inventive Principle:
Principle #10Preliminary action

Solution Approach 2:

The patent introduces standardized processing routines or intermediary algorithms that facilitate the extraction and interpretation of additional information from the consolidated reconstruction data. These intermediary processing steps provide a systematic approach to handling the embedded information, reducing the perceived complexity for end-users while maintaining compact certificate structures.

Inventive Principle:
Principle #24Intermediary (Mediator)

Data Source

PatentEP2503728B1Incorporating data into public-key reconstruction data of an ECQV implicit certificate
Publication Date: 2019.06.12 BLACKBERRY LTD
  • EP2503728B1 patent drawingFigure 1
  • EP2503728B1 patent drawingFigure 2
  • EP2503728B1 patent drawingFigure 3

AI summary

During generation of an implicit certificate (102, 638) for a requestor (100, 600), a certificate authority (104, 620) incorporates information in the public-key reconstruction data (110), where the public-key reconstruction data is to be used to compute the public key (648) of the requestor. The information may be related to one or more of the requestor, the certificate authority, and the implicit certificate. The certificate authority reversibly encodes the public-key reconstruction data in the implicit certificate and sends it to the requestor. After receiving the implicit certificate from the certificate authority, the requestor can extract the incorporated information from the public-key reconstruction data. The implicit certificate can be made available to a recipient (114, 654), and the recipient can also extract the incorporated information.