Public Key Reliability Certification via Hash Verification
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current public key cryptosystems centered on certification authorities face challenges in flexibly meeting the increasing demand for reliable digital authentication, particularly in generating and certifying key pairs for secure internet interactions.
Innovation Solution
A method for generating a second key pair associated with a first key pair using a hash function to calculate a second private and public key, where the second public key is mathematically proven to be a child key of the first public key, allowing for digital signature verification without relying on certification authorities.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If a certification authority is used to issue digital certificates, then the reliability of public key authentication is improved, but the device complexity and operational overhead are increased
Solution Approach 1:
The patent extracts the core trust verification function from the certification authority and implements it locally through the hash function verification. Instead of requiring a centralized CA to issue and manage digital certificates, the system extracts the essential verification step (computing and comparing hash values) to be performed independently by each device, thereby eliminating the need for complex CA infrastructure while maintaining authentication reliability
Solution Approach 2:
Each device performs self-verification of public key reliability by independently computing the hash function H(pk, r) and comparing it with the received verification value. This self-service approach eliminates dependence on external certification authorities, reducing system complexity while ensuring that each device can autonomously verify authentication reliability
2Reliability
If a certification authority is used to manage digital certificates, then public key reliability is certified, but the ease of operation and flexibility are reduced
Solution Approach 1:
The system enables each device to independently verify public key reliability through local computation of the hash function H(pk, r) and comparison with the verification value. This eliminates the need for complex certificate management operations, making the system easier to operate while maintaining reliability through cryptographic verification
Solution Approach 2:
The patent changes the verification parameter from complex digital certificate validation to a simple hash function comparison. By transforming the verification process into computing H(pk, r) and comparing with a received value, the system maintains reliability while dramatically simplifying operational complexity and improving flexibility
3Reliability
If traditional digital signature verification is used, then authentication is performed, but the adaptability to different authentication purposes is limited
Solution Approach 1:
The hash function verification mechanism H(pk, r) serves as a universal authentication foundation that can be adapted to multiple different authentication purposes and scenarios. The same verification principle can be applied across different applications and contexts, providing both reliability and adaptability through a single versatile mechanism
Data Source
AI summary
The reliability of a second public key which is part of a second key pair generated in association with a first key pair is certified. A generating apparatus 210 provides certification data to a receiving apparatus 220 (S301). The receiving apparatus 220 transmits a certification request requesting a certification that the second public key PK2 is in a parent-child relationship with the first public key PKI to a certifying apparatus 230 (S302). In this example, the certification request includes the certification data, but if the certification data is provided directly from the generating apparatus 210 to the certifying apparatus 230, the certification request does not need to include the certification data. The certifying apparatus 230 verifies the certification data by calculating a verification formula for the certification data in response to the certification request (S303).