Multi-Layered Encryption for Document Authentication

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Current document authentication methods, relying on manual inspection and digital encryption, are prone to errors and fraud due to the risk of stolen encryption keys being used to corrupt documents.

Innovation Solution

A multi-layered encryption system where data is encrypted by multiple users using private keys and further encrypted by an organization, with decryption using public keys to verify authenticity, ensuring only authorized users can access and verify the data.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Ease of operation

If manual inspection of physical markers is used for document authentication, then ease of operation is improved, but reliability deteriorates due to high variability and error proneness

Engineering Contradiction:
Improveease of operationVSAvoidreliability
Core Design Contradiction:
Ease of operationVSReliability

Solution Approach 1:

The patent replaces manual mechanical inspection of physical markers with an automated electronic authentication system that uses optical scanning and digital verification. The system captures images of authentication markers, processes them through software algorithms, and automatically verifies document authenticity, eliminating human variability while maintaining operational simplicity.

Inventive Principle:
Principle #28Mechanics substitution (Replace mechanical system)

2Reliability

If digital encryption with single layer is used to mark documents, then reliability is improved, but security deteriorates due to risk of stolen encryption keys being used to corrupt documents

Engineering Contradiction:
ImprovereliabilityVSAvoidsecurity
Core Design Contradiction:
ReliabilityVSObject-affected harmful factors

Solution Approach 1:

The patent implements multi-layered encryption where authentication data is embedded within multiple nested encryption layers. Each layer contains authentication information encrypted with different keys, creating a nested structure similar to matryoshka dolls. This ensures that even if one layer is compromised, the nested inner layers remain secure and can still verify document authenticity.

Inventive Principle:
Principle #7Nested doll (Nesting)

Solution Approach 2:

The patent uses composite authentication mechanisms combining multiple types of encryption markers and verification methods within a single authentication system. The authentication structure integrates different encryption algorithms, multiple key types, and various verification protocols to create a composite security framework that resists single-point failures.

Inventive Principle:
Principle #40Composite materials

3Object-affected harmful factors

If multi-layered encryption is implemented to enhance security, then security is improved, but device complexity increases

Engineering Contradiction:
ImprovesecurityVSAvoiddevice complexity
Core Design Contradiction:
Object-affected harmful factorsVSDevice complexity

Solution Approach 1:

The patent extracts the cryptographic complexity from the authentication markers themselves and separates it from the verification process. The markers contain pre-computed authentication data that appears simple visually, but the cryptographic verification logic is handled by the electronic system. This extraction reduces the apparent complexity of the markers while maintaining strong security through sophisticated backend verification algorithms.

Inventive Principle:
Principle #2Taking out (Extraction)

Data Source

PatentUS8799675B2System and method for electronic certification and authentication of data
Publication Date: 2014.08.05 INDORSE SERVICES
  • US8799675B2 patent drawing
  • US8799675B2 patent drawing
  • US8799675B2 patent drawing

AI summary

A system and method for authenticating data. Data may be received that is individually encrypted in a first encryption layer by each of a plurality of users using user-specific private keys. The received data may be encrypted together in a second encryption layer to create multi-layered encrypted data. The multi-layered encrypted data may be transferred to a beneficiary device to determine if the encrypted data is authentic. At the beneficiary device, the second encryption layer may be decrypted to expose the first encryption layer. Then, the first encryption layer may be decrypted using public keys that only decrypt data encrypted by private keys assigned to a plurality of authorizers pre-designated to authenticate the data. If the first encryption layer is properly decrypted using the authorizers' decryption keys, it may be determined that the users are the pre-designated authorizers.