Localized Encryption Key Generation for Secure Document Authentication
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing security systems for electronic document verification and authentication are vulnerable to internal attacks, as they require users to store encryption keys on their computers, which can be compromised by viruses, and do not allow for the digital signing of various document types without prior key acquisition.
Innovation Solution
A security system that generates a pair of localized encryption keys on a main computer, where one key encrypts and the other decrypts data, allowing users to access and sign documents remotely without storing keys on their computers, using a cryptography server to authenticate document integrity through hash values and digital certificates.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If users store encryption keys on their computers for document authentication, then digital signing capability is enabled, but security vulnerability increases due to potential computer compromise
Solution Approach 1:
The patent extracts the secret key from the user's computer environment entirely. Instead of storing the secret key locally, the system generates key pairs on a secure server, transmits only the public key to the user's computer, and keeps the secret key exclusively on the secure server. This extraction eliminates the security vulnerability of local key storage while maintaining digital signing functionality.
Solution Approach 2:
The patent introduces a secure server as an intermediary between the user and the document authentication process. The server generates key pairs, stores secret keys securely, and mediates the signing process by receiving public keys and document hashes from users, then producing digital signatures. This intermediary architecture protects users from direct key management risks while enabling authentication.
2Ease of operation
If users obtain and store encryption keys locally, then document signing is possible, but system complexity increases due to key management requirements
Solution Approach 1:
The secure server performs self-service by automatically generating key pairs and managing secret keys without user intervention. The server maintains its own secret keys, automatically responds to signing requests, and manages the cryptographic infrastructure. This eliminates the need for users to manually manage complex key storage and security protocols.
Solution Approach 2:
The patent extracts key management complexity from the user's computer and concentrates it on the secure server. Users only need to store and transmit public keys, which are not sensitive. All complex operations including secret key generation, secure storage, and signature production are extracted and performed server-side, dramatically simplifying the user's system requirements.
3Reliability
If asymmetric encryption codes are used for document verification, then message authenticity is ensured, but key security risk increases as computers become weak links
Solution Approach 1:
The patent extracts the secret code from vulnerable computer environments and relocates it to a secure server environment. The secret key never resides on or leaves the secure server in an exposed state. Only the public key, which cannot be used to derive the secret key, is transmitted to users. This extraction eliminates the risk of secret code exposure through computer compromise while maintaining asymmetric encryption's authenticity guarantees.
Solution Approach 2:
The secure server acts as an intermediary that protects the secret code during the authentication process. Instead of the user's computer handling the secret key, the server receives the public key and document hash, performs the signing operation using its protected secret key, and returns the signature. This intermediary approach ensures message authenticity while preventing secret code exposure.
Data Source
AI summary
A security system includes an interface, a main computer, and an application server. The interface enables a user to access a remote document related to a product. The main computer stores documents related to the product and generates a pair of localized encryption keys. The encryption keys include a first key that encrypts data and second key that decrypts the data. An application server that is remote from the interface transmits and receives the document from the interface. The main computer authenticates the integrity of the document in a local operation by signing the document with the first key before it is transmitted to the interface and by signing the document with the second key after it is received from the interface. A method of authenticating the integrity of information related to a selected product stored on a main computer includes generating the localized pair of encryption keys; signing the document with the first key at the main computer; transmitting the signed document to an interface or a Web browser; and signing the document with the second key at the main computer when the document is received from the interface or the Web browser.