Digitally Signed SQR Code for Content Integrity Verification
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current techniques for preventing photo/video morphing attacks and theft, such as password protection and encryption, lead to escalation of privilege in cloud servers, compromising data integrity during transfer.
Innovation Solution
Implementing a digitally signed secure quick response (SQR) code system that captures and transfers content as an SQR code, allowing for secure storage, transmission, and verification, ensuring tamper-proof and theft-proof integrity through hash checks at both source and destination devices.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If password protection and encryption are used to prevent content manipulation and theft, then security is improved, but cloud server privilege escalation occurs compromising data integrity
Solution Approach 1:
The patent extracts the content from its original form and converts it into a QR code representation. The actual content is not stored in the QR code itself, but rather a hash or signature of the content is embedded, separating the content verification function from the content storage function. This prevents cloud servers from having direct access to manipulate the actual content while maintaining verification capability.
Solution Approach 2:
The patent applies digital signatures and hash functions to the content before converting it to a QR code. This preliminary cryptographic processing ensures that the content integrity is established before transmission or storage, allowing verification without requiring trusted cloud storage. The digital signature is embedded in the QR code, enabling later verification of content authenticity.
2Ease of operation
If cloud servers store copies of transferred data, then data accessibility is improved, but privilege escalation and security risks increase
Solution Approach 1:
The patent creates a QR code copy that contains verification information (hash or digital signature) of the original content. This copy can be widely distributed and stored in multiple locations including cloud servers, but since it contains only verification data rather than the actual content, security risks are minimized while accessibility is maintained.
3Reliability
If digital signatures are applied to captured content, then content authenticity is improved, but processing complexity increases
Solution Approach 1:
The patent extracts only the essential verification information (hash or digital signature) from the content and embeds it in a QR code, rather than processing or storing the entire content. This extraction approach maintains authenticity verification capability while significantly reducing the complexity of generating and managing digital signatures.
Solution Approach 2:
The patent transforms the content from its original large-scale format into a compact QR code representation containing cryptographic verification data. This parameter change from full content to verification signature reduces processing complexity while maintaining authenticity verification capability.
Data Source
AI summary
A system and method of implementing digitally signed secure quick response (SQR) codes include storing captured content as a hash map, calculating a hash of the captured content, where the hash is a unique key that is stored in the hash map, creating a digital signature for the captured content using a private key such that the captured content is digitally signed, generating a SQR code of the digitally signed captured content, and storing the SQR code including the digitally signed captured content in a secure digital (SD) card.