Signature Server Validation Challenge for WYSIWYS
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing digital signature methods fail to provide the 'What You See Is What You Sign' (WYSIWYS) functionality effectively, especially in electronic commerce, where secure and legally binding electronic signatures are required, and none of the previous solutions have adequately addressed the need for strong WYSIWYS functionality using local or central signature creation devices.
Innovation Solution
A method and system that utilizes two separate user devices, with a signature server generating a validation challenge allowing users to confirm the message before signing, ensuring the message has not been altered, and using shared secrets for verification, thereby providing WYSIWYS functionality.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If a local signature creation device (smartcard or signing stick) is used to store private keys, then security is improved, but device complexity and portability requirements increase
Solution Approach 1:
The patent introduces a signature server as an intermediary that hosts the signature creation device remotely. This mediator allows users to access signature creation functionality through a web browser without needing local hardware devices, USB ports, or smart card readers. The signature server handles key storage and signature generation centrally, eliminating the need for complex local hardware while maintaining security through the web-based interface.
2Reliability
If separate validation device is introduced to provide WYSIWYS functionality, then security and legal binding are improved, but device complexity increases
Solution Approach 1:
The patent merges the signature creation device and validation device functionalities into a single integrated system hosted on the signature server. Both devices share common components including the user database, cryptographic key pairs, and validation logic. This consolidation provides WYSIWYS functionality (allowing users to validate the message they are signing) while avoiding the complexity of completely separate hardware devices, as everything operates through the web-based interface.
3Ease of operation
If central signature creation device is used, then ease of operation and mobility are improved, but control and security management become more complex
Solution Approach 1:
The signature server provides a universal platform that handles multiple functions through a single web-based interface: user authentication, message display, signature creation, and validation. This multi-functional approach eliminates the need for users to manage multiple devices or software applications, improving ease of operation while centralizing complexity management on the server side where it can be properly controlled and secured.
Data Source
Figure 1a
Figure 1b
Figure 2a~3a
AI summary
A method and system for generating a signature for a user are described. The system comprises a signature server, an initial transaction device for a user and a validation device for a user. The initial transaction device is configured to display a first message M and send a request to the signature server to create a signature for said first message M. The signature server is configured to generate a validation challenge using a second message M' which is based on said first message M' and a first secret shared between said user and said signature server and send said validation challenge to the validation device. The validation device is configured to regenerate said second message M' using said first shared secret, display said second message M', receive user confirmation that the displayed second message M' corresponds to said first message M, generate a validation code confirming the request to create a signature; and send said validation code to said signature server. Thereafter, said signature server generates the signature for the user for the first message M.