Secure Inter-Process Communications via Digital Certificates
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current security measures for inter-process communications are inadequate, as they primarily focus on authenticating computer addresses rather than ensuring the security of the communications themselves, making them susceptible to corruption, especially in unmonitored peer-to-peer networks where users may unknowingly participate in insecure interactions.
Innovation Solution
Implementing the use of digital certificates to authenticate the identity of processes involved in inter-process communications, utilizing a public key infrastructure (PKI) to ensure the security and authenticity of communications by exchanging encryption keys and verifying the identity of processes through a certification authority, thereby securing the communication channel.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If conventional address-based authentication is used for inter-process communications, then the implementation is simple and straightforward, but the security is insufficient and communications are susceptible to corruption
Solution Approach 1:
The patent introduces a certification authority as an intermediary that issues digital certificates to processes. These certificates serve as trusted mediators that verify the identity of communicating processes, replacing the inadequate address-based authentication with certificate-based verification, thereby enhancing security without requiring direct trust between communicating parties
Solution Approach 2:
The patent replaces the mechanical/address-based authentication system with a cryptographic system using digital certificates and public key infrastructure. This substitution transforms the authentication mechanism from simple address matching to cryptographic verification, providing stronger security guarantees while maintaining automated operation
2Reliability
If digital certificates are implemented for process authentication, then the security and authenticity of communications are ensured, but the complexity of the authentication mechanism increases
Solution Approach 1:
The patent implements mechanisms where processes automatically manage their own digital certificates, including obtaining certificates from certification authorities, storing them securely, and presenting them during communication establishment. This self-service approach reduces the burden on users and administrators while maintaining strong authentication
Solution Approach 2:
The patent requires processes to obtain digital certificates before engaging in inter-process communications. This preliminary action ensures that authentication credentials are ready in advance, enabling secure communications to proceed without delays during the actual interaction, and allowing certification authorities to verify process identities before granting communication permissions
Data Source
AI summary
Inter-process communications between a first process and a second process are secured. A first process recognizes that inter-process communications must be initiated with a second process. A first computer that supports the first process submits a request to initiate inter-process communications with a second computer that supports the second process. The second computer replies to a request to initiate inter-process communications by replying to the first computer with a request for information of a digital certificate that authenticates the first process.