Non-Repudiation Parcel for PKI Authentication
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current Public Key Infrastructure (PKI) systems lack robust mechanisms for non-repudiation, allowing for potential spoofing of authentication and lack of assurance for senders regarding the integrity and delivery of information, as well as complexity in installation and maintenance.
Innovation Solution
A system and method for non-repudiation communications that includes creating a 'parcel' containing encrypted data, a one-way hash, and session keys, allowing senders and receivers to verify the identity and integrity of data transmission without relying on each other's private keys, with a service provider acting as a broker to ensure secure and verifiable transactions.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If current PKI systems are used for digital signatures and encryption, then data security and privacy are provided, but non-repudiation mechanisms are weak allowing potential spoofing of authentication
Solution Approach 1:
The patent segments the authentication process into distinct components: the sender signs a hash of the message with their private key, the receiver verifies this signature using the sender's public key, and optionally a trusted third party verifies the receiver's signature. This segmentation allows each party to independently prove their actions without requiring complex mutual authentication infrastructure.
Solution Approach 2:
The patent introduces an optional trusted third party intermediary that can verify both the sender's signature on the message hash and the receiver's signature on the receipt message. This intermediary provides independent verification without requiring the sender and receiver to directly trust each other's private keys, simplifying the overall system while strengthening non-repudiation.
2Reliability
If current PKI systems are used for secure communication, then encryption and authentication are provided, but senders have no assurance that the receiver received the information intact
Solution Approach 1:
The sender performs a preliminary action by signing the hash of the message with their private key before transmitting the encrypted message. This preliminary signature provides immediate integrity verification capability. Additionally, the receiver is prompted to sign a receipt message confirming successful reception, creating a preliminary record of delivery before any potential disputes arise.
Solution Approach 2:
The system implements feedback mechanisms where the receiver is prompted to sign a message confirming receipt of the encrypted data file. This signed receipt is transmitted back to the sender (and optionally to a trusted third party), providing feedback that confirms successful delivery. This feedback loop ensures both parties have verification of the communication's successful completion.
3Reliability
If current PKI systems are used for authentication, then digital certificates are issued, but the system is complicated to install and difficult to support
Solution Approach 1:
The patent extracts the essential non-repudiation functionality from the complex PKI infrastructure by focusing only on the core cryptographic operations: hashing the message, signing the hash with a private key, and verifying the signature with a public key. This extraction allows the system to achieve strong authentication and non-repudiation without requiring the full complexity of certificate authorities, certificate management, and digital certificate issuance infrastructures.
Solution Approach 2:
The system enables self-service authentication where each party generates and manages their own key pairs independently. The sender signs messages with their own private key, and the receiver verifies using the sender's public key (which may be shared directly or through a simple directory). This self-service approach eliminates the need for complex centralized certificate management while maintaining security.
Data Source
AI summary
Embodiments of the disclosure provide systems, methods, and computer readable instructions for non-repudiation communications, including provisions for non-repudiation of the identities of the sender and receiver, non-repudiation of the information sent and the information received, the time that various portions of the transaction or communication occurred, and other parameters associated therewith. Embodiments of the disclosure can be readily implemented in conjunction with public key systems to advantageously provide complete non-repudiation of origin and delivery of digital data.