NFC Device Authentication Using Digital Signatures and Blockchain
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
The authenticity of electronic devices is difficult to verify, especially in the context of internet-facilitated marketplaces where untrained consumers face challenges in confirming the legitimacy of devices due to the ubiquity of electronic transactions.
Innovation Solution
A system utilizing near-field communication (NFC) to authenticate devices through a digital signature verified by a cloud-based certificate authority, involving device public and private keys, and metadata stored on a distributed ledger system like blockchain, ensuring the authenticity of electronic devices.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If digital signature verification via NFC is implemented, then device authenticity verification is improved, but device complexity increases
Solution Approach 1:
The patent introduces a certificate authority (CA) as an intermediary that issues digital certificates to devices. The CA acts as a trusted third party that verifies device identities and issues cryptographic credentials, eliminating the need for direct peer-to-peer verification between devices. This intermediary approach resolves the technical contradiction by providing reliable authenticity verification through the CA's digital signature on device certificates, while the actual verification process remains relatively simple for end devices.
Solution Approach 2:
The patent creates digital copies of device identities in the form of digital certificates containing public keys and device information. Instead of verifying physical device characteristics directly, the system verifies cryptographic copies (certificates) that represent the device's identity. The NFC tag stores a copy of the device's public key and certificate information, allowing verification without complex physical inspection of the actual device.
2Reliability
If NFC tag stores cryptographic information, then verification security is improved, but information storage requirements increase
Solution Approach 1:
The patent extracts only the essential cryptographic information (public key and certificate data) needed for verification and stores it in the NFC tag, while keeping the private key secure on the server. This extraction approach stores only the minimum necessary information in the limited NFC tag memory, avoiding storage of large amounts of data while maintaining verification security through the presence of the public key and certificate.
Solution Approach 2:
The patent applies different storage strategies to different pieces of information based on their security requirements and access patterns. Sensitive information (private keys) is stored securely on the server, while verification information (public keys, certificates) is stored in the NFC tag for local access. This local quality differentiation optimizes storage distribution across devices with different storage capabilities and security requirements.
Data Source
AI summary
A device-verification system is configured to verify the authenticity of an electronic device using a digital signature of the electronic device verified by a certificate authority. In some examples, the electronic device includes a NFC tag storing device hardware information, device public and private keys, and a device digital signature ciphertext. A user may utilize a personal device to read the information from the NFC tag and the personal device may include a software application configured to communicate the information to a cloud-based certificate authority. The certificate authority may include a distributed system (e.g., a blockchain ledger) utilized to verify, store, and subsequently retrieve data corresponding to the electronic device. The certificate authority is configured to utilize the device digital signature to verify the authenticity of the device. In some examples, the certificate authority is configured to mint or transfer a corresponding NFT for the authenticated device after verification.