JSON Message Signing via Digest Segmentation

Resolve Bottlenecks,
Find Innovative SolutionsGenerate Solutions

Solution Overview

Problem

JSON messages lack message integrity over communication links, relying solely on transport security which is vulnerable to malicious or accidental alterations.

Innovation Solution

A digital signature scheme is implemented using a JSON signature syntax with named elements such as reference, signature information, and signature elements, which generates a digest and signature value to provide message integrity and authentication.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If transport security (such as SSL) is used to secure JSON messages, then point-to-point message security is provided, but message integrity cannot be guaranteed against malicious or accidental alterations

Engineering Contradiction:

Improvemessage integrityVSAvoidvulnerability to malicious or accidental alterations

Core Design Contradiction:

ReliabilityVSObject-affected harmful factors

Solution Approach 1:

The message is segmented into original data and a separate digest value. The digest is calculated from the original message using a hash function, creating a separate representation that can be used to verify integrity without altering the original message structure.

Inventive Principle:

Principle #1Segmentation

Solution Approach 2:

A digest value acts as an intermediary between the original message and the verification process. This digest serves as a intermediary representation that can be compared against a received message to detect alterations without exposing the original message content during verification.

Inventive Principle:

Principle #24Intermediary (Mediator)

2Reliability

If digital signature scheme is implemented to provide message integrity and authentication, then security is enhanced, but device complexity increases due to additional processing steps

Engineering Contradiction:

Improvemessage integrity and authenticationVSAvoidprocessing complexity

Core Design Contradiction:

ReliabilityVSDevice complexity

Solution Approach 1:

Instead of requiring full cryptographic signature verification for all messages, the invention applies a lighter digest calculation approach that provides sufficient integrity checking for the specific use case, reducing computational overhead while maintaining security for the most critical function of detecting message alterations.

Inventive Principle:

Principle #16Partial or excessive action

Solution Approach 2:

The digest value is a lightweight, computationally inexpensive object that can be quickly generated and discarded after verification. Unlike heavy cryptographic signatures, the digest provides a disposable verification mechanism that consumes minimal processing resources.

Inventive Principle:

Principle #27Cheap short-living objects (Disposable)

Data Source

PatentUS8291230B2Method and system for signing JavaScript object notation (JSON) messages

Publication Date: 2012.10.16 INTERNATIONAL BUSINESS MACHINE CORPORATION

AI summary

A machine-implemented method for signing a JSON message begins by constructing a reference element for each data object in the JSON message. The data object is identified by a reference identifier that includes a pointer to a digest method, and a digest generated by applying the digest method to the data object. Then, a signature information element is constructed for reference elements corresponding to data objects in the message. The signature information element includes a pointer to a signature method, as well as one or more reference elements, or a canonical form of the one or more reference elements. Then, a signature element is constructed that includes the signature information element, and a signature value generated by applying the signature method to the signature information element. The signature enables a sending entity to generate a digest on a JSON message and to secure the digests using a signing key.