Distributed Vote Authentication With Phased Signatures and Hashes
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Distributed systems face performance and scalability issues due to the overhead of digital signature processes in authenticating votes, particularly in Byzantine fault-tolerant systems like blockchain and distributed ledger systems, which require extensive processing and verification for each vote.
Innovation Solution
A method that minimizes the use of digital signatures by employing a set of unique phrases and hash values, allowing nodes to use a single signature per view for multiple votes, reducing the need for repeated signing and verification through the use of hash functions and pre-commit quorum certificates.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If digital signatures are used to authenticate every vote in distributed systems, then vote authenticity and system reliability are improved, but processing time and energy consumption increase significantly
Solution Approach 1:
The voting process is segmented into multiple phases (prepare phase with digital signatures, voting phase with hash values, commit phase with quorum certificates). This allows nodes to use computationally expensive digital signatures only when necessary (in the prepare phase) and use faster hash functions for subsequent voting phases, thereby reducing overall energy consumption while maintaining authenticity.
Solution Approach 2:
Nodes perform preliminary actions by generating and validating digital signatures in the prepare phase before the actual voting occurs. This preliminary authentication establishes trust and enables subsequent voting phases to proceed with lighter computational operations, reducing the energy burden during the main voting process.
2Reliability
If digital signatures are appended to every vote, then vote authenticity is guaranteed, but system throughput and scalability are reduced
Solution Approach 1:
The voting protocol is divided into phases where digital signatures are used only in the prepare phase for initial authentication. Subsequent voting phases use hash functions and quorum certificates, which are computationally cheaper and faster to process, thereby increasing system throughput while maintaining authenticity through the phased approach.
Solution Approach 2:
The system changes the computational parameter requirements across different voting phases. Instead of using constant high-cost digital signatures for all phases, the system transitions to lower-cost hash functions and quorum certificate validations in later phases, optimizing the balance between authenticity and throughput.
3Reliability
If multiple digital signatures are required for each vote, then authentication robustness is improved, but device complexity and processing requirements increase
Solution Approach 1:
The authentication process is segmented so that complex digital signature operations are performed only in the prepare phase, while simpler hash function operations are used in subsequent voting phases. This reduces the processing complexity required for each individual vote while maintaining overall authentication robustness through the multi-phase structure.
Solution Approach 2:
Complex digital signature operations are performed as a preliminary action in the prepare phase to establish authenticated communication. Once this preliminary authentication is complete, the system can proceed with simpler, less complex operations for the actual voting, reducing the processing burden on nodes.
Data Source
AI summary
Described herein is a system and a method for authenticating distributed votes for a distributed system. The distributed system includes a plurality of nodes and at least one leader node. The method includes: sending out, by the leader node, a prepare message including a proposal; generating, by each of at least some of the plurality of nodes, a set of hash values; generating, by each of the at least some of the plurality of nodes, a reply message to the leader node including the set of hash values; signing, by each of the at least some of the plurality of nodes, the reply message with a digital signature; sending, by each of the at least some of the plurality of nodes, the reply message with the digital signature; and validating, by the leader node, the signatures of the reply messages and saving the sets of hash values.