Multi-TTP Identity Verification Protocol for Cross-Trust Domains
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing identity validity verification methods fail to effectively verify entity identities when different trusted third parties are involved, as they do not account for scenarios where entities trust different trusted third parties, leading to incomplete identity validation.
Innovation Solution
A method and system involving two trusted third parties (TTPs) where one TTP verifies the identity of entity A and the other TTP verifies the identity of entity B, using a message exchange protocol that includes random numbers and signatures to ensure validity verification between entities trusting different TTPs.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Adaptability or versatility
If a single trusted third party TTP is used to provide verification services, then the verification process is simple and efficient, but it cannot handle scenarios where entities trust different TTPs
Solution Approach 1:
The verification process is segmented into two independent paths: one path handles verification when both entities trust the same TTP, and another path handles verification when entities trust different TTPs. This segmentation allows the system to adapt to different trust scenarios without requiring a completely different protocol, thus improving adaptability while managing complexity through modular design.
Solution Approach 2:
The verification system is designed with multi-functionality to serve both verification scenarios (same TTP trust and different TTP trust) using a unified framework. The protocol can dynamically switch between verification modes based on the trust relationship configuration, making it universally applicable across different trust topologies without requiring separate specialized protocols.
2Reliability
If multiple trusted third parties are involved to verify identities of different entities, then complete identity validation is achieved, but the verification protocol becomes more complex
Solution Approach 1:
When entities trust different TTPs, the system introduces an intermediary TTP that acts as a mediator to establish trust between the two entities. The intermediary TTP receives verification requests from both entities, coordinates the verification process, and facilitates mutual authentication. This intermediary approach ensures complete identity validation across different trust domains while managing protocol complexity through a structured mediation mechanism.
Solution Approach 2:
The verification protocol implements a nested structure where the intermediary TTP's verification process contains sub-processes that include the individual TTP verifications. The outer layer handles the coordination and mutual trust establishment, while inner layers handle the specific identity validations performed by each TTP. This nesting allows complete validation while organizing complexity in a hierarchical manner.
Data Source
Figure 1~2
Figure 3~4
Figure 5
AI summary
The invention relates to a multi-TTP-based method and device for verifying whether the identity of an entity is valid. The method comprises: transmitting, by an entity B, a message 1, to an entity A; after receiving the message 1, transmitting, by the entity A, a message 2 to a trusted third party (TTPA); after receiving the message 2, transmitting, by the TTPA, a message 3 to a TTPB; after receiving the message 3, verifying, by the TTPB, whether the identity of the entity B is valid, and transmitting a message 4 to the TTPA; after receiving the message 4, verifying, by the TTPA, a first signature of the TTPB in the message 4, and transmitting a message 5 to the entity A; and after receiving the message 5, verifying, by the entity A, whether the identity of the entity B is valid. The invention realizes verification of validity of the identity of entities trusting different trusted third parties, respectively.