IoT Data Transfer Validation Using Triply Signed Receipts
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing data transfer systems in untrusted environments lack decentralized solutions that ensure data authenticity and integrity, are costly, and struggle with offline communication and bandwidth overload, making it difficult for devices to verify the authenticity of data sources.
Innovation Solution
A system involving a first and second communication device, along with a qualification device, uses authentication units, communication units, and processing units to generate and verify triply signed receipts, ensuring data authenticity through short-range and long-range communication networks, even in offline conditions.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If a centralized oracle system is used to verify data authenticity, then data integrity can be ensured, but the system becomes costly and does not scale well
Solution Approach 1:
The patent divides the centralized verification system into multiple distributed qualification devices that each independently verify data transfers. Instead of one central oracle, multiple qualification devices are deployed across the network, each capable of authenticating devices and validating data transfers locally, thereby distributing the verification function and reducing centralization complexity
Solution Approach 2:
The patent introduces qualification devices as intermediary components between communicating devices. These qualification devices act as mediators that provide cryptographic proof of data transfer authenticity without requiring direct communication with a central server, enabling decentralized verification while maintaining reliability
2Reliability
If traditional security protocols are used to defend against external attackers, then basic security can be provided, but they are insufficient against internal threats and sophisticated attacks
Solution Approach 1:
The patent applies preliminary anti-action by implementing cryptographic validation mechanisms before data transfers occur. Qualification devices pre-authenticate communicating devices and establish cryptographic proofs in advance, creating a preemptive security layer that prevents both external and internal attacks by verifying authenticity before transactions take place
Solution Approach 2:
The system performs preliminary authentication and qualification of devices before they can engage in data transfers. The qualification devices verify device identities and establish cryptographic credentials in advance, ensuring that only authenticated devices can participate in transfers, thereby preventing unauthorized access from both external and internal sources
3Reliability
If an online environment with continuous server communication is used, then data validation can be performed, but bandwidth is overloaded and latency increases
Solution Approach 1:
The patent implements preliminary action by having qualification devices cache authentication credentials and validation rules locally. Instead of continuously communicating with central servers, devices perform validations using pre-loaded cryptographic data, enabling offline operation and eliminating latency associated with real-time server communication
Solution Approach 2:
The qualification devices serve as intermediary components that store cryptographic proofs and validation data locally. These intermediaries enable devices to validate data transfers without continuous online connectivity to central servers, reducing bandwidth consumption and eliminating network latency while maintaining validation reliability
4Reliability
If multiple databases on servers are used to verify device authenticity, then authentication can be performed, but the system requires constant online connectivity and creates bandwidth bottlenecks
Solution Approach 1:
The patent extracts authentication credentials and validation data from centralized server databases and embeds them directly into the communication devices and qualification devices. This extraction enables devices to perform authentication and validation operations locally without requiring constant connectivity to external databases, providing offline operation capability while maintaining authentication reliability
Solution Approach 2:
The system enables devices to authenticate and validate each other using locally stored cryptographic credentials. Instead of relying on external servers for every authentication check, devices use their own embedded qualification data to perform self-validation, eliminating the need for continuous online connectivity and reducing bandwidth dependency
Data Source
AI summary
The present invention relates to the technical field of the transfer of data, such as, for example, between Internet of Things (IoT) devices. Particularly, the invention relates to the technical field of the transfer of data between a first and a second communication devices in an untrusted environment.