Secure Token Distribution via Registration Authority
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing token systems burden token providers with computational tasks such as generating and managing Transaction Authentication Verification Values (TAVVs) and authenticating token requestors, which increases complexity and costs, especially when token requestors lack a direct relationship with the provider.
Innovation Solution
Delegating authentication efforts to registration authorities and shifting key generation to token requestors, allowing them to generate digital signatures for transactions, thus reducing the token provider's computational burden and enabling secure token provisioning and usage.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If the token provider generates and manages TAVVs for token requestors, then transaction authentication security is improved, but the computational burden and operational complexity on the token provider increases
Solution Approach 1:
The patent introduces a registration authority as an intermediary between the token provider and token requestor. The registration authority generates and manages TAVVs, while the token provider only issues tokens. This mediator approach maintains authentication security through proper TAVV management while relieving the token provider of computational burden and operational complexity.
Solution Approach 2:
The patent extracts the TAVV generation and management function from the token provider system and places it in a separate registration authority system. This separation allows the token provider to focus solely on token issuance while the registration authority handles authentication complexity, resolving the contradiction between security and complexity.
2Reliability
If the token provider authenticates token requestors directly, then authentication security is improved, but the time required for token provisioning increases
Solution Approach 1:
The patent implements preliminary authentication where the registration authority authenticates the token requestor and generates TAVVs in advance during the token provisioning process. This preliminary action ensures authentication security is established before token issuance, while the pre-generated TAVVs enable faster subsequent transactions without repeated authentication delays.
3Adaptability or versatility
If the token provider creates a direct relationship with token requestors, then service control is improved, but the distribution strategy complexity and development requirements increase
Solution Approach 1:
The patent makes the registration authority a universal component that serves multiple token requestors and multiple token providers. The registration authority provides authentication and TAVV generation services to any token requestor interacting with any token provider, eliminating the need for each provider to develop separate authentication systems and reducing distribution strategy complexity.
Data Source
AI summary
A method for utilizing a registration authority computer to facilitate a certificate signing request is provided. A registration authority computer may receive a certificate signing request associated with a token requestor. The registration authority computer may authenticate the identity of the token requestor and forward the certificate signing request to a certificate authority computer. A token requestor ID and a signed certificate may be provided by the certificate authority computer and forwarded to the token requestor. The token requestor ID may be utilized by the token requestor to generate digital signatures for subsequent token-based transactions.