Secure Key Generation for Data Delivery Verification
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current data delivery mechanisms lack robust mechanisms for verifying data transmission, which can lead to illegal value transfers if the data distribution platform and end user collude, causing damage to data owners.
Innovation Solution
A data delivery apparatus and method that utilize secure key generation and verification processes, where a pair of signature and verification keys are generated in secure areas of both the data delivery and requesting apparatuses, enabling secure data transmission and verification.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Productivity
If data delivery is performed without robust verification mechanisms, then data transmission efficiency is improved, but reliability of data delivery deteriorates
Solution Approach 1:
The patent applies preliminary action by generating signature keys and verification keys in advance before data delivery occurs. The data delivery apparatus generates a signature key and corresponding verification key, publishes the verification key, and stores the signature key securely. This preliminary key generation enables subsequent verification of data delivery without hindering transmission efficiency.
Solution Approach 2:
The patent implements feedback mechanisms where the data requesting apparatus verifies received data using the published verification key and sends verification results back to the data delivery apparatus. This feedback loop ensures that data delivery reliability is maintained while allowing efficient transmission, as verification only occurs when needed.
2Reliability
If verification mechanisms are strengthened to prevent collusion, then reliability of data delivery is improved, but device complexity increases
Solution Approach 1:
The patent uses cryptographic keys as intermediaries to enable verification without requiring direct trust between parties. The verification key acts as a mediator that allows the data requesting apparatus to verify data delivery independently, reducing the need for complex mutual authentication mechanisms while maintaining reliability.
Solution Approach 2:
The patent creates a copy of the verification key and publishes it to the data requesting apparatus. This copying approach allows the requesting apparatus to perform verification locally without needing access to the original signature key or complex verification infrastructure, thereby reducing system complexity while maintaining reliability.
3Reliability
If signature keys are stored securely in secure areas, then security against collusion is improved, but ease of operation deteriorates
Solution Approach 1:
The patent extracts the verification key from the secure storage area and publishes it to the data requesting apparatus. This separation allows the signature key to remain securely stored in the secure area for signing operations, while the verification key is made accessible outside the secure area for verification purposes, balancing security with ease of operation.
Data Source
AI summary
An apparatus publishes the first verification key generated in a first secure area outside the apparatus, acquires a second verification key that is generated in a second secure area of a data requesting apparatus and published by the data requesting apparatus, signs, in the first secure area, in response to a data delivery request, delivery target data using the first signature key, transmits transmission data obtained through the signing to the data requesting apparatus, receives certification data from the data requesting apparatus, verifies a signature of the certification data using the second verification key, and transmits, when the signature of the certification data is successfully verified using the second verification key, the certification data to the data providing apparatus.