Mixed Protocol Digital Certificates for Anonymous Authentication
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing digital certificate protocols face challenges in adopting new variations due to the need for universal adoption, leading to stagnation and security issues such as long-lived compromised certificates and lack of anonymous authentication, which hinder the integration of advanced security features like anonymous credentials.
Innovation Solution
Implementing mixed protocol certificates that combine digital signatures from different protocols, allowing for the generation and verification of certificates using both conventional and novel protocols, ensuring enhanced security and privacy without modifying existing infrastructure or secure communication libraries.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If a single digital signature protocol is universally adopted for digital certificates, then compatibility and ease of operation are improved, but adaptability and ability to incorporate new security improvements are worsened
Solution Approach 1:
The certificate structure is segmented to include multiple digital signature protocols independently. Each protocol (e.g., RSA, ECDSA, Ed25519) operates as a separate signature pair within the same certificate, allowing verifiers to choose which protocol to use without requiring universal adoption of a single protocol across all certificates.
Solution Approach 2:
The digital certificate is designed with multi-functionality to support multiple digital signature protocols simultaneously. This universal structure allows the same certificate to be verified using different protocols, making the system adaptable to new protocols while maintaining compatibility with existing ones.
2Productivity
If digital certificates have long validity periods, then productivity and ease of operation are improved, but reliability and security are worsened due to compromised certificates
Solution Approach 1:
The certificate system incorporates dynamic key rotation capability where the subject can generate new key pairs for different protocols over time. This allows certificates to be updated with new cryptographic protocols without requiring long validity periods, as the subject can issue new certificates with updated keys and protocols as security requirements evolve.
3Ease of operation
If traditional digital certificate protocols are used, then ease of operation is improved, but adaptability to new security features like anonymous credentials is worsened
Solution Approach 1:
The certificate structure segments different protocol requirements into independent signature pairs. This allows traditional certificate formats to coexist with new protocol requirements, enabling anonymous credentials and other advanced features to be integrated as additional signature protocols without disrupting the simplicity of existing certificate verification processes.
Data Source
AI summary
A system for implementing mixed protocol certificates, the system includes a subject device designed and configured to receive, from an issuing device, a first digital certificate, wherein the first digital certificate further comprises a first digital signature public and private key pair according to a first digital signature protocol and a second digital signature public key according to a second digital signature protocol, wherein the second digital signature protocol is distinct from the first digital signature protocol, to generate a second digital certificate, wherein generating the second digital certificate comprises generating a subject digital signature signing the certificate, the subject digital signature generated as a function of the second digital signature protocol and to provide the first digital certificate and the second digital certificate to a verifying device.