Registration System Using Intermediary Key Signing
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing registration systems face challenges in safely and simply registering communication processing apparatuses to registration servers, particularly when incorrect devices are connected, leading to potential exposure of authentication keys and requiring time-consuming communication environment setups.
Innovation Solution
A registration system comprising a management apparatus that acquires and signs authentication key information using a registration key, and a registration server that verifies the signature using a paired registration key, allowing secure and efficient registration of communication processing apparatuses without exposing registration keys externally.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If authentication key information is transmitted during registration, then registration functionality is enabled, but security risk increases due to potential exposure of authentication keys
Solution Approach 1:
A management apparatus is introduced as an intermediary between the communication processing apparatus and the registration server. The management apparatus holds a registration key pair, signs the authentication key information, and transmits the signed data to the registration server. This intermediary mechanism enables the registration process while preventing direct exposure of the authentication keys, as the registration server only receives signed data that it cannot decipher without the corresponding verification key.
2Reliability
If communication environment setup is required for registration, then secure communication is established, but time consumption increases
Solution Approach 1:
The management apparatus pre-holds the registration key pair before the registration process begins. By having the signing capability prepared in advance, the system eliminates the need for time-consuming communication environment setup during the actual registration. The management apparatus can immediately sign the authentication key information using the pre-existing registration key, significantly reducing registration time while maintaining security through the established key infrastructure.
Data Source
AI summary
A registration system includes a management apparatus configured to acquire first information of an authentication key for registration from a communication processing apparatus to communicate with the management apparatus, put a signature for the first information with a first registration key, and transmit the first information completed with the signature to the communication processing apparatus, and a registration server configured to acquire a registration request including the first information completed with the signature by the management apparatus from the communication processing apparatus to communicate with the registration server, verify the signature put for the first information included in the registration request, by using a second registration key paired with the first registration key, and register the first information included in the registration request, based on a result of verifying the signature put for the first information.