Mobile Digital Signature System with Server-Side Digest Encryption
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current systems are unable to digitally sign electronic documents using mobile devices, which limits the capability to securely authenticate and verify identities on portable electronic devices.
Innovation Solution
A system comprising a mobile device, an application server, and a database, where the mobile device stores a digital certificate with a private key, and the application server includes modules for obtaining, digesting, and encrypting electronic documents using hash and public key cryptography algorithms, merging them according to PKCS#7 standards to generate a digitally-signed document.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If digital signature systems use traditional desktop computers or notebooks, then security and identity verification are ensured, but mobility and accessibility are limited
Solution Approach 1:
The patent introduces a mobile device as an intermediary between the user and the digital signature verification system. The mobile device stores digital certificates and private keys, and communicates with an application server to perform signing operations. This intermediary approach enables mobile access while maintaining security through the use of established cryptographic protocols and server-side verification.
Solution Approach 2:
The digital signature system is segmented into multiple components: the mobile device stores digital certificates and performs local encryption, the application server handles document retrieval and signature verification, and the database stores electronic documents. This segmentation allows the security-critical functions to be distributed across trusted components while enabling mobile accessibility.
2Ease of operation
If digital signatures are implemented on mobile devices, then mobility and accessibility are improved, but system complexity increases due to integration of multiple modules
Solution Approach 1:
The mobile device is designed to perform multiple functions: storing digital certificates, generating cryptographic digests, encrypting data with private keys, and communicating with the application server. The application server also performs multiple functions including retrieving documents, verifying signatures, and managing the signing process. This multi-functionality reduces the need for separate dedicated components.
Solution Approach 2:
The patent merges the digital certificate storage, cryptographic operations, and document signing capabilities into a single mobile device interface. The application server merges document management, signature verification, and communication functions. This merging simplifies the user experience while the modular architecture manages the underlying complexity.
3Productivity
If hash algorithms transform electronic documents into fixed-length character strings, then signature length is shortened and efficiency is improved, but information loss occurs in the transformation process
Solution Approach 1:
Instead of signing the entire electronic document, the system creates a cryptographic hash (digest) which is a fixed-length representation of the document's content. This hash acts as a unique copy or fingerprint of the original document. The digital signature is then applied to this compact hash rather than the full document, dramatically improving efficiency while the hash function's properties ensure that any change in the original document would result in a completely different hash value, thus preserving information integrity.
Data Source
AI summary
A system for digitally signing electronic documents is disclosed. The system includes a mobile device, an application server and a database, the mobile device includes a requesting module and a digest encrypting module, the application server includes an obtaining module, a digest generating module and a merging module. The requesting module is configured for sending a request for a digital signature of an electronic document to the application server; the obtaining module is configured for obtaining the electronic document from the database; the digest generating module is configured for generating a digest of the electronic document, and sending the digest to the mobile device; the digest encrypting module is configured for encrypting the digest, generating an encrypted value, and sending the encrypted value to the application server; the merging module is configured for merging the encrypted value and the electronic document. A related computer-based method is also disclosed.