Provisioning Token for Secure Digital Document Issuance
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current methods fail to provide digital documents in a cryptographically secure manner for mobile devices, lacking effective authorization and secure linking mechanisms.
Innovation Solution
A method involving a server-based system that generates a provisioning token by identifying requesters, creating a signed data set with a unique hash value and salt value, and sending it to the requester for authorization, ensuring secure linking of digital documents to terminal devices.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If a provisioning token is generated with cryptographic signature and salt value, then security and integrity are improved, but device complexity and processing requirements increase
Solution Approach 1:
The provisioning token is segmented into distinct components: a unique identifier, a salt value, a hash value, and a cryptographic signature. Each component serves a specific security function, allowing the system to achieve cryptographic security through modular design rather than a monolithic complex system.
Solution Approach 2:
The salt value is generated and stored in advance before the actual document issuance process. This preliminary action ensures that when the provisioning token is created, the salt is already available for cryptographic operations, reducing real-time processing complexity while maintaining security.
2Manufacturing precision
If the provisioning token includes hash value and salt value combination, then data integrity is improved, but data processing time increases
Solution Approach 1:
The salt value is pre-generated and stored in the database before the provisioning token creation process. This eliminates the need for salt generation during the critical hash calculation phase, reducing processing time while maintaining data integrity through the hash-salt combination.
Solution Approach 2:
Instead of storing the actual data elements in the provisioning token, the system stores only the hash value derived from the data elements combined with the salt. This copying approach maintains data integrity through the hash while significantly reducing the data processing time required to handle and transmit the token.
3Measurement precision
If the system validates the provisioning token against database entries, then authorization accuracy is improved, but system response time increases
Solution Approach 1:
The salt value and its association with the data element are stored in the database in advance. When validating the provisioning token, the system only needs to retrieve the pre-stored salt value and compare it with the one in the token, rather than performing complex validation operations, thus improving authorization accuracy while reducing response time.
Data Source
Figure 1
Figure 2
Figure 3
AI summary
The invention relates to a method for generating a digital provisioning token (170) by an issuing service. The provisioning token (170) entitles the holder to receive a digital document (172) to be issued via an end device (150) and to cryptographically link it to the end device (150) during the issuance process. The method comprises a server (100) of the issuing service receiving a creation request for the creation of the provisioning token (170), identifying the requester using received identification data (186) of the requester, creating the requested provisioning token (170) in the form of a signed data record (602), and sending the provisioning token (170) to the identified requester.