Electronic Document Signing With Nonce-Bound Attribute Certificates
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing techniques struggle to verify the authenticity of electronic documents by confirming the attribute of the signer and detecting fraudulent certificate information.
Innovation Solution
An information processing method that utilizes a self-sovereign ID distribution platform to generate and verify certificate information using decentralized identifiers (DIDs) and nonces, enabling the detection of fraudulent certificate information by matching the nonce included in the certificate with the nonce corresponding to the signer's identifier.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If certificate information is attached to electronic document to certify signer attribute, then authenticity verification is enabled, but detection of fraudulently obtained proof becomes impossible
Solution Approach 1:
The system performs preliminary actions by binding a unique nonce to the signer's identifier before the signing process. This nonce is registered in advance in the verification system, creating a预先 established reference that enables later fraud detection. The nonce serves as a one-time use token that is generated and recorded before the actual signing occurs, allowing the system to verify that the certificate information was legitimately obtained by checking if the nonce matches the pre-registered value.
2Difficulty of detecting and measuring
If decentralized identifiers and nonces are used to enable fraud detection, then detection capability is improved, but system complexity increases
Solution Approach 1:
The system introduces a verification server as an intermediary component that manages the nonce registration and verification process. This intermediary handles the complex tasks of storing nonce-bindings between identifiers and nonces, and performing the actual verification operations. By offloading these functions to a dedicated verification server, the complexity is centralized and managed separately from the signing and verifying clients, making the overall system more manageable despite the added functionality.
Data Source
Figure 1
Figure 2
Figure 3
AI summary
A program to be executed by a first apparatus in a system of issuing attribute certificate information of each user, the program including instructions which, when the program is executed by a processor of the first apparatus, cause the first apparatus to execute processing including: obtaining, from a second apparatus in the system, a value unique to an identifier that uniquely identifies a user, the second apparatus being a device capable of verifying authenticity of an electronic document to be signed; creating certificate information that includes attribute information identified from the attribute certificate information, certification information that certifies the attribute information, and the obtained value; generating an electronic signature for the electronic document and the certificate information using a private key that corresponds to the identifier; and outputting the electronic document and the certificate information to which the generated electronic signature is attached in association with the identifier.