Offline Decentralized Identity Communication with Mutual Signatures
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing decentralized identity-based communication systems fail to function securely when there is no internet connection, as distributed ledger technology cannot update transactions and communications between software applications.
Innovation Solution
Implementing secure offline decentralized identity-based communication by storing a record of transactions locally between software applications using decentralized identifiers, digitally signed by each entity, and updating the distributed ledger when internet connectivity is restored.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If decentralized identifier-based communication is implemented over the internet, then secure communication between software applications is achieved, but the system cannot function when internet connection is unavailable
Solution Approach 1:
The system performs preliminary actions by establishing secure communication channels and exchanging cryptographic keys between software applications while an internet connection is available. These preliminary actions include generating decentralized identifiers, creating cryptographic key pairs, and storing public keys locally. When the internet connection becomes unavailable, these pre-established credentials enable the applications to continue communicating securely offline without requiring real-time internet access.
2Reliability
If distributed ledger technology is used to record transactions, then transaction integrity and trust are ensured, but updates to the distributed ledger cannot occur without internet connectivity
Solution Approach 1:
The system performs preliminary actions by locally recording transactions in a temporary ledger or database when internet connectivity is unavailable. These offline transactions are stored with their cryptographic signatures and metadata, maintaining integrity through local validation rules. When internet connectivity is restored, the system batches these offline transactions and synchronizes them with the distributed ledger, eliminating the need for real-time updates and reducing the time loss associated with waiting for network availability.
3Reliability
If mutual authentication with cryptographic keys is implemented, then trust between offline applications is established, but the complexity of key management increases
Solution Approach 1:
The system introduces an intermediary approach by using decentralized identifiers (DIDs) as simplified representations of complex cryptographic key pairs. Instead of requiring applications to directly manage and exchange raw cryptographic keys, the system uses DIDs that reference public keys stored in decentralized ledgers or local databases. This intermediary layer simplifies key management by providing user-friendly identifiers while maintaining the security benefits of cryptographic authentication, reducing the complexity burden on application developers.
Data Source
AI summary
Disclosed are various embodiments for offline decentralized identity-based communications between software applications. In one non-limiting example, a system can include a computing device that is configured to detect a network connection loss to a network and receive, via a local area network, a request for an action to be performed by a client device. The request includes a first digital signature of the client device and is associated with a decentralized identifier. The computing device is configured to generate a mutually signed request that includes a second digital signature executed by the computing device and the first digital signature. The mutually signed request is transmitted to the client device. A network connection to the network is detected. The decentralized identifier is validated using the network. The requested action is performed by the computing device based at least in part on the validation of the decentralized identifier.