Digital Signature Verification Caching for Mobile Efficiency
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
The verification of digital signatures on certificates is time-consuming and costly, particularly on smaller devices like mobile devices, where the same digital signature may be subject to verification multiple times during the processing of multiple certificates.
Innovation Solution
A method that stores the public key used in successful signature verification operations for reuse, allowing for efficient verification by comparing the stored key with subsequent requests, thereby avoiding redundant signature verification processes.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If digital signature verification is performed on each certificate request, then security and authentication are ensured, but computing resource usage increases and battery power is consumed
Solution Approach 1:
The system performs signature verification in advance and stores the verified public key in a cache. When subsequent certificate requests arrive, the cached key is reused without repeating the verification process, thus consuming less battery power while maintaining security
Solution Approach 2:
The verification process is differentiated based on local conditions: fully verified certificates use cached keys for quick processing, while unverified certificates undergo complete verification. This local optimization reduces overall computing resource usage and battery consumption
2Reliability
If digital signature verification is performed on each certificate request, then authentication accuracy is maintained, but processing time increases
Solution Approach 1:
Signature verification is performed in advance and the results are cached. Subsequent requests that match cached entries bypass the time-consuming verification process, significantly reducing processing time while maintaining authentication accuracy through selective verification
Solution Approach 2:
The verification process is segmented into two paths: cached verification for previously verified certificates (fast path) and full verification for new certificates (slow path). This segmentation allows most requests to use the fast path, reducing overall processing time while maintaining security through periodic full verifications
3Reliability
If signature verification is performed repeatedly on the same digital signature, then verification completeness is ensured, but computing resource usage increases
Solution Approach 1:
The system applies different verification strategies based on local characteristics of each certificate request. Previously verified certificates use cached keys for efficient processing, while new certificates undergo complete verification, optimizing the balance between verification completeness and processing efficiency
Solution Approach 2:
The system discards redundant verification operations by recovering and reusing previously computed verification results stored in the cache. This eliminates wasted computing resources while maintaining verification completeness through selective full verification when needed
Data Source
AI summary
A system and method for verifying a digital signature on a certificate, which may be used in the processing of encoded messages. In one embodiment, when a digital signature is successfully verified in a signature verification operation, the public key used to verify that digital signature is cached. When a subsequent attempt to verify the digital signature is made, the public key to be used to verify the digital signature is compared to the cached key. If the keys match, the digital signature can be successfully verified without requiring that a signature verification operation in which some data is decoded using the public key be performed.