Cryptographic Target Authentication for Authorized Resource Transfers
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
There is a need for a secure and efficient way to authenticate resource transfer targets within a virtual environment, ensuring the authenticity of both the transferor and transferee, as well as the resource itself, to facilitate secure resource transfers.
Innovation Solution
A system that generates cryptographic tokens (NFTs) for transferors and transferees, using a distributed ledger to verify identities and resource authenticity through smart contracts, ensuring authorized transfers and preventing unauthorized actions.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If traditional authentication methods are used for resource transfer, then the process is simpler, but security and reliability are compromised
Solution Approach 1:
The system performs preliminary authentication actions by requiring the transferee to digitally sign a data record containing their identifier and public key before the resource transfer is executed. This preliminary cryptographic verification ensures that only authorized transferees can receive resources, establishing reliability before the actual transfer occurs.
Solution Approach 2:
The patent introduces a distributed ledger system as an intermediary that stores and verifies cryptographic signatures. The ledger acts as a neutral mediator that validates the transferee's identity through their digital signature without requiring direct trust between transferor and transferee, thereby enhancing security while maintaining system integrity.
2Reliability
If cryptographic verification is performed for each transfer, then authentication reliability is improved, but computational overhead increases
Solution Approach 1:
The system performs the computationally intensive cryptographic operations in advance by requiring transferees to generate and store their digital signatures and public keys in the distributed ledger before any resource transfer. This preliminary setup eliminates the need for repeated complex computations during each transfer, reducing real-time computational overhead while maintaining verification reliability.
Solution Approach 2:
The transferee independently generates and manages their own cryptographic key pair and digital signature without requiring continuous verification computation from the system. The transferee's device performs the self-service authentication by providing their pre-generated signature, significantly reducing the computational burden on the resource transfer system.
3Productivity
If unauthorized transfer requests are processed, then system throughput is maintained, but security is compromised
Solution Approach 1:
The system implements preliminary anti-action by requiring cryptographic verification of the transferee's identity before allowing any resource transfer to proceed. The digital signature requirement acts as a preventive measure that blocks unauthorized transfers at the authentication stage, ensuring that only verified transferees can receive resources while maintaining system throughput for legitimate transfers.
Solution Approach 2:
The distributed ledger serves as an intermediary that automatically validates transfer requests against stored cryptographic signatures. This intermediary layer efficiently filters out unauthorized requests without requiring complex manual verification, maintaining high throughput for authorized transfers while reliably blocking unauthorized ones through automated cryptographic validation.
Data Source
AI summary
A system is provided for authentication of a resource transfer target after resource allocation. In particular, the system may generate a secure token associated with the target of the resource transfer as part of a registration process. In this regard, the token may comprise various types of information regarding the target, which may include a cryptographic address associated with the target. Upon receiving a request to transfer a resource, the system may prompt the target to input information associated with the target and/or the resource transfer, and subsequently prompt the target to digitally sign a data record associated with the resource transfer using a private key associated with the target. Based on comparing the information provided by the user with the information obtained by the system in decrypting the data record, the system may perform authentication of the target.