Public Key Request Authentication With Reduced Server Storage
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing smart key systems for vehicles face challenges with high management costs and reliance on specific service providers, leading to potential service discontinuity and storage overload in server systems.
Innovation Solution
A request processing system utilizing a first apparatus and a second apparatus for authenticating user terminals using a public key, where a smaller-sized public key data is generated and stored on a network, allowing direct transmission and authentication without overloading server storage.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If the actual public key is stored in the server, then authentication accuracy is improved, but the server's storage area becomes overloaded
Solution Approach 1:
The patent segments the public key into two parts: the actual public key (for authentication) and public key data (a smaller representation for storage and comparison). This segmentation allows the system to maintain authentication accuracy while reducing storage requirements, as only the smaller public key data needs to be stored in the server.
Solution Approach 2:
The patent creates a simplified copy or representation of the public key (public key data) that can be stored efficiently in the server. This copy contains sufficient information for authentication purposes without requiring the full size of the actual public key, thereby reducing server storage load while maintaining authentication functionality.
2Ease of operation
If a smart key system is managed by private corporations, then service provision is improved, but management expenses become excessively high making service continuation difficult
Solution Approach 1:
The patent implements a self-service mechanism where the system uses cryptographic authentication (public key infrastructure) to enable automatic verification and service provision without requiring extensive manual management or intervention from service providers. This reduces management expenses by automating the authentication and service delivery processes.
Solution Approach 2:
The patent creates a universal authentication system based on public key infrastructure that can be implemented without reliance on specific service providers. The system uses standardized cryptographic methods that can be universally applied, reducing dependency on proprietary management systems and lowering long-term management costs.
3Ease of manufacture
If service relies on specific service providers, then initial service setup is improved, but service universality and continuity are reduced
Solution Approach 1:
The patent implements a universal service architecture based on public key infrastructure that is not tied to any specific service provider. The authentication mechanism uses standardized cryptographic protocols that can be universally adopted across different providers and platforms, ensuring service continuity and adaptability while maintaining ease of initial setup.
Data Source
AI summary
There is provided a request processing system for receiving a request sent from the first apparatus at the second apparatus and executing the request, wherein the first apparatus comprises: means for writing the generated first apparatus-identifying specific data into a predetermined address on a communication network; and means for sending a request with a signature, signed with the secret key, and the public key to the second apparatus, wherein the second apparatus comprises: means for reading the first apparatus-identifying specific data; means for authenticating the first apparatus by generating, from the public key, public key data enable to uniquely identify the public key; and determining whether this public key is included in the downloaded first apparatus-identifying specific data as well as, based on the determination, validating a signature of the request with a signature based on the public key received from the first apparatus and the unlocking cryptographic data included in the downloaded first apparatus-identifying specific data; and means for executing the validated request based on the authentication of the first apparatus.