Keyless Secure Email Signing With Blockchain Verification
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing data communication methods require cryptographic keys and encryption infrastructure, which are cumbersome to manage and do not easily integrate with existing email systems, lacking secure storage and end-user intervention.
Innovation Solution
A method using a rendering and signing module to generate a human-perceptible version of data, which is signed with a blockchain infrastructure without cryptographic keys, and verified through a blockchain gateway, allowing secure and verifiable communication.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If public key infrastructure (PKI) and digital certificates are used for secure data transmission, then data security is improved, but device complexity and processing overhead increase
Solution Approach 1:
The patent extracts the essential security verification function from the complex PKI framework. Instead of implementing full digital certificate validation, the system uses a simplified approach where a trusted device extracts and verifies only the critical identity binding information, eliminating the need for complete certificate chains and complex cryptographic verification while maintaining security.
Solution Approach 2:
The patent creates a simplified copy of the identity verification mechanism. Rather than using full digital certificates, the system uses condensed identity representations that contain the essential binding information between device identity and cryptographic keys, reducing complexity while preserving the core security function.
2Reliability
If end-to-end encryption is implemented for secure communication, then data security is improved, but key management complexity and device requirements increase
Solution Approach 1:
The patent introduces a trusted device as an intermediary that handles the complex key management tasks. This intermediary device performs key generation, storage, and verification operations, shielding the end devices from key management complexity while enabling secure end-to-end communication.
Solution Approach 2:
The system implements self-service key management where each device automatically generates and manages its own cryptographic keys without requiring manual intervention. The trusted device automatically verifies identity bindings and manages key distribution, eliminating the need for complex manual key exchange procedures.
3Reliability
If biometric authentication is used for device access, then security is improved, but false acceptance and false rejection rates occur
Solution Approach 1:
The patent implements feedback mechanisms where the authentication system continuously learns from verification outcomes. The trusted device adjusts authentication thresholds and parameters based on observed false acceptance and false rejection rates, optimizing the balance between security and accuracy over time through iterative feedback from actual authentication events.
Data Source
Figure 1(a)~1(b)
Figure 1(c)
Figure 2
AI summary
A method carried out at a sending mail server (36s) for secure communication of data from a sender device (12) to a recipient device (14), the sending mail server (36s) and the sender device (12) including a memory device and a processor, the processor being configured for carrying out the method. The method comprises, at a source data application (MUA) (28s), determining source data to be communicated to the recipient device (14), and conveying the source data to a secure data transfer agent (ks-MTA) (30s, 30s'). The method comprises, at the secure data transfer agent (ks-MTA) (30s, 30s'), receiving the source data and invoking a rendering and signing module (ks-Sign) (32) with the source data as a parameter. The method further comprises, at the rendering and signing module (ks-Sign) (32), (i) parsing the source data to generate a human-perceptible version of the source data (MP), the human-perceptible version being platform- independent, (ii) transmitting a hash of at least the human-perceptible version to a blockchain gateway (47), the blockchain gateway (47) providing the hash(es) to a blockchain infrastructure (46) for generating on the basis thereof a signature S and (iii) receiving the signature S or a reference to it and returning the signature (S) in conjunction with the human-perceptible version (MP) of the source data to the secure data transfer agent (30s, 30s'). The method further comprises, at the secure data transfer agent (ks-MTA) (30s, 30s'), sending the source data and the signed data (Ms) composing of the signature (S) and the human-perceptible version (MP) to the recipient device (14), and optionally making the signature (S) accessible to a secure signature portal (ks-Portal) (42). Preferably, the source data application (MUA) (28s) is a mail application, and the source data is an electronic message. A method for processing at a recipient device (14) signed data (M's) received by the recipient device (12) is also disclosed, including (i) extracting the signature (S') from the signed data (M's) and (ii) sending the extracted signature (S') to the blockchain gateway (47) and/or the secure signature portal (ks-Portal) (42) with a request for verification. A sender device (12), a recipient device (14) and a system incorporating those devices is also disclosed.