Distributed Ledger Attribute Matching for Digital Certificate Verification
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
In a system without a central administrator, the issuance of digital certificates by devices other than a specific certificate authority can lead to inconsistencies in naming conventions, causing verification failures when the provider and the certificate-issuing device use different attribute definitions, resulting in inefficiencies and increased costs due to unnecessary verification processes.
Innovation Solution
A communication program that acquires digital certificates from devices connected to a distributed ledger, which records the correspondence between attribute definitions, allowing for the matching of attribute definitions between different devices, enabling the transmission of certificates with consistent information and reducing verification failures.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Adaptability or versatility
If any device in the system may issue a digital certificate without a central administrator, then the system's adaptability and decentralization are improved, but the reliability of verification processing deteriorates due to inconsistent attribute definitions
Solution Approach 1:
The distributed ledger serves as a universal platform that all devices in the decentralized system can access and contribute to. It maintains a common set of attribute definitions that any device can use when issuing or verifying digital certificates, enabling the system to function reliably without a central administrator.
Solution Approach 2:
The distributed ledger acts as an intermediary between certificate-issuing devices and verification devices. It mediates the verification process by providing a shared reference for attribute definitions, allowing devices to reconcile differences in their local definitions without needing to trust each other directly.
2Ease of operation
If different devices use different attribute definitions for the same information, then the ease of operation for each device is improved, but the loss of information increases due to verification failures
Solution Approach 1:
The system allows devices to change their local attribute definition parameters while maintaining compatibility through the distributed ledger. Devices can store multiple versions of attribute definitions and select the appropriate version based on the verification context, preventing information loss due to definition mismatches.
3Device complexity
If verification fails due to attribute definition mismatches, then the device complexity for handling different definitions is reduced, but the productivity of the verification process deteriorates due to repeated verification attempts
Solution Approach 1:
The system performs preliminary actions by storing attribute definitions in the distributed ledger before verification occurs. This allows devices to pre-fetch and cache the relevant attribute definitions needed for verification, avoiding the need for complex real-time definition management during the verification process itself.
Data Source
Figure 1
Figure 2
Figure 3
AI summary
A communication program causing a communication device to execute acquiring a digital certificate including information associated with a first attribute from a first device coupled to any of a plurality of devices sharing a distributed ledger having recorded therein a correspondence between an attribute of user information included in the digital certificate and a definition of the attribute, upon receiving a request for information associated with a second attribute from a second device coupled to any of the plurality of devices, acquiring a first definition associated with the first attribute, and a second definition associated with the second attribute from any of the plurality of devices, and when the first definition and the second definition match, transmitting a digital certificate including information associated with the first attribute to the second device together with a message notifying that the first attribute and the second attribute have the same definition.