Remote Proxy Identity Verification Across Heterogeneous Nodes

Resolve Bottlenecks,
Find Innovative SolutionsGenerate Solutions

Solution Overview

Problem

In distributed systems, particularly in vehicles with multiple computing nodes running different operating systems, determining the identity of interacting software entities securely and efficiently is challenging due to the heterogeneity of OSs and sensor manufacturers, leading to potential data tampering and unauthorized access.

Innovation Solution

Implementing a remote proxy model that utilizes existing OS mechanisms like UIDs and GIDs, with each node having a trusted remote proxy that verifies and signs messages based on manifests, ensuring secure communication across nodes with different OSs.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If centralized identity verification is used, then security control is improved, but system scalability and performance are worsened

Engineering Contradiction:

Improvesecurity controlVSAvoidsystem scalability

Core Design Contradiction:

ReliabilityVSProductivity

Solution Approach 1:

The centralized identity verification system is segmented into distributed identity verification nodes that operate autonomously across the network. Each node can independently perform identity verification, eliminating the single-point bottleneck while maintaining security standards through consistent verification protocols.

Inventive Principle:

Principle #1Segmentation

Solution Approach 2:

The system transitions from a single-dimensional centralized verification model to a multi-dimensional distributed architecture where verification occurs across multiple nodes simultaneously. This dimensional shift enables parallel processing of identity verification requests, improving both scalability and performance.

Inventive Principle:

Principle #17Another dimension (Dimensionality change)

2Reliability

If more identity verification nodes are added, then system reliability is improved, but communication overhead and complexity increase

Engineering Contradiction:

Improvesystem reliabilityVSAvoidcommunication overhead

Core Design Contradiction:

ReliabilityVSDevice complexity

Solution Approach 1:

Identity verification credentials are pre-computed and stored in a distributed manner before verification is needed. This preliminary action reduces the computational burden and communication overhead during actual verification operations, as nodes can quickly retrieve and validate pre-prepared verification data.

Inventive Principle:

Principle #10Preliminary action

Solution Approach 2:

The verification logic and credentials are extracted from centralized control and distributed to individual nodes. Each node maintains only the necessary verification data locally, reducing the need for constant communication with central authorities and minimizing overall system complexity.

Inventive Principle:

Principle #2Taking out (Extraction)

Data Source

PatentEP4305835B1Method and system for performing identity checks in a distributed system

Publication Date: 2026.05.06 BLACKBERRY LTD

Figure 1
Figure 2
Figure 3

AI summary

A method at a remote proxy on a first node, the method including receiving, at the remote proxy, a first message from a first module on the first node, the first message being directed to a second module on a second node; verifying the first message at the remote proxy utilizing operating system verification; determining, based on a manifest at the remote proxy, the second node; signing, using a private key for the first node, the first message; and sending the first message to the second node.