Distributed Network Data Authentication via Subnet Certificates
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Distributed networks face challenges in providing efficient and authenticable access to computational results, particularly in ensuring the authenticity and security of data across nodes in a decentralized environment.
Innovation Solution
A computer-implemented method is introduced where nodes in a distributed network compute and regularly update a digest of an application subnet accumulator, producing a joint signature to create an application subnet certificate, which certifies computational units and their results, enabling secure authentication and verification of data through cryptographic accumulators and hash trees.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If nodes directly access the root subnet to verify data authenticity, then data authentication reliability is improved, but network access complexity and response time increase
Solution Approach 1:
The patent introduces application subnet certificates as intermediary credentials that enable nodes to verify data authenticity without directly accessing the root subnet. These certificates act as mediators by containing cryptographic proofs (Merkle paths and accumulator values) that allow local verification of data inclusion in the root subnet, thereby reducing network access complexity while maintaining authentication reliability
2Reliability
If computational results are frequently authenticated through root subnet verification, then data integrity is improved, but network traffic and processing time increase
Solution Approach 1:
The patent performs preliminary authentication by generating application subnet certificates that embed cryptographic proofs (Merkle paths and accumulator values) in advance. These pre-computed certificates allow nodes to verify data integrity locally without repeated time-consuming interactions with the root subnet, thus reducing verification processing time while maintaining data integrity through the embedded cryptographic evidence
Data Source
Figure 1
Figure 2~3
Figure 4
AI summary
Embodiments of the invention relate to a computer-implemented method for authenticating data in a distributed network. The distributed network comprises at least one application subnet. The application subnet comprises a plurality of nodes and each of the plurality of nodes is configured to run one or more computational units. The computational units are configured to execute computations in a deterministic and replicated manner across the application subnet. The method comprises steps of regularly computing, by the plurality of nodes of the application subnet, a digest of an application subnet accumulator. The application subnet accumulator comprises for each of the computational units of a respective application subnet an assigned accumulator element as unit variable. The method comprises further steps of regularly executing, by the nodes of the application subnet, a joint signature on the digest of the application subnet accumulator, thereby producing an application subnet certificate. Further aspects relate to a distributed network, a node of a distributed network and a corresponding computer program products.