Secure Signature Module with PIN-Linked Verification
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing secure signature methods in information security lack assurance as PIN verification and signature operations are independent, leading to potential illegitimate signature operations and user information leakage, necessitating a more secure method to protect user information.
Innovation Solution
A method and apparatus that generate a shared key from a terminal's public key and a stored signature module private key during PIN verification, associating PIN verification with signature operations through PIN verification signature data, and updating the signature module key pair upon failed verification to enhance security.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If PIN verification and signature operations are implemented through two independent instructions, then the ease of operation is improved, but the security of the signature operation deteriorates
Solution Approach 1:
The patent merges the PIN verification operation and the signature operation into a single integrated instruction execution flow. The processor executes both operations sequentially within one instruction, ensuring that the signature operation can only be performed immediately after successful PIN verification, thereby eliminating the security vulnerability of independent operations while maintaining operational simplicity
2Productivity
If multiple signature operations are performed after one PIN verification, then the productivity is improved, but the security of the signature operation deteriorates
Solution Approach 1:
The patent introduces dynamic state tracking through a verification state flag that is set during PIN verification and automatically reset after each signature operation. This dynamic mechanism allows multiple signature operations to be performed efficiently while ensuring that each operation is properly authenticated, preventing illegitimate access even during continuous operation sequences
3Reliability
If PIN verification is performed again before each signature operation, then the security of the signature operation is improved, but the loss of time increases
Solution Approach 1:
The patent performs PIN verification in advance as part of the integrated instruction execution, setting a verification state flag that remains valid for subsequent signature operations within the same instruction flow. This preliminary action eliminates the need for repeated PIN verification while maintaining security through the state flag mechanism, thereby reducing time loss
4Reliability
If the signature module key pair is updated upon failed PIN verification, then the security of the signature operation is improved, but the device complexity increases
Solution Approach 1:
The patent implements a feedback mechanism where the system monitors PIN verification results and automatically triggers key pair regeneration when verification fails. This feedback-driven approach enhances security by ensuring that compromised keys are replaced while maintaining relatively simple device architecture through automated response to verification failures
Data Source
AI summary
A method and apparatus for realizing secure signature, the method includes: when a PIN verification instruction is received, verifying a first calculation result in the instruction by using a second shared key generated according to a terminal public key and a signature module private key, if the verifying is failed, replacing a stored signature module key pair with a regenerated signature module key pair; otherwise, generating PIN verification signature data and storing the PIN verification signature data, generating a second calculation result according to a second shared key and the PIN verification signature data and sending the second calculation result to the terminal; when a signature operation instruction is received, determining whether the PIN verification signature data in the instruction is consistent with the stored PIN verification signature data, if yes, signing an intermediate data to be signed by using a signature private key.