Digital Signature Verification Platform Program Memory Efficiency
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Communication devices face challenges in securely verifying and generating digital signatures, particularly with Java applications, where the risk of leaking confidential root certificates is high and memory usage efficiency is poor due to duplicate functions.
Innovation Solution
A communication device with a platform program that controls constituent elements and an application that runs on it, where the application judges the need for signature verification or generation and outputs data to the platform program for processing, preventing direct user handling and reducing duplication of functions.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Adaptability or versatility
If signature verification and generation functions are implemented in Java applications that can be downloaded and installed from outside, then data reception and verification processing can be performed by external applications, but confidential root certificate information is at high risk of being leaked to the outside
Solution Approach 1:
The system is divided into two distinct components: a Java application that handles data reception and a platform program that handles signature verification and generation. The Java application judges whether signature verification is required and outputs received data to the platform program, which then performs the actual cryptographic operations using confidential information stored in the memory unit. This segmentation allows external applications to provide data reception functionality while preventing direct access to sensitive cryptographic materials.
Solution Approach 2:
The platform program acts as an intermediary between the Java application and the confidential information stored in memory. Instead of allowing the Java application to directly access root certificates or perform cryptographic operations, the platform program receives data from the Java application, performs verification or generation operations using the confidential information, and returns results. This intermediary layer prevents leakage of confidential information while enabling the desired functionality.
2Adaptability or versatility
If Java applications perform both data reception processing and signature verification processing, then data handling functionality is provided, but duplicate functions are created and memory usage efficiency deteriorates
Solution Approach 1:
The platform program combines multiple functions into a single component: data reception judgment, signature verification, and signature generation. Instead of having separate Java applications for each function, the system merges these operations into the platform program, which shares a common memory unit for storing confidential information. This consolidation eliminates duplicate storage of cryptographic materials and improves memory usage efficiency while maintaining full functionality.
Solution Approach 2:
The platform program is designed as a universal component that can perform multiple functions: judging whether signature verification is required, performing signature verification on received data, and generating signatures for output data. By making the platform program multi-functional, the system eliminates the need for separate specialized applications for each operation, thereby improving memory efficiency while maintaining adaptability.
Data Source
AI summary
It is an object of the present invention to provide a communication device, a digital signature verification method, and a digital signature generation method, in which the memory usage efficiency is improved without confidential information required for the verification or generation of a signature being easily leaked to the outside.The Java application judges whether signature verification is required for the received signature target data. When judging that signature verification is required, the Java application outputs the received signature target data to the PKI of the platform. The PKI verifies the signature that has been added to the data output by the Java application and performs signature generation, and then notifies the Java application.