Trust Propagation for Signed Files via Server Verification
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Devices without access to public keys or with limited resources struggle to efficiently authenticate digitally signed files, as traditional methods require random access and are resource-intensive.
Innovation Solution
A method where a device identifies a signed file, calculates its hash, and sends it to a server for verification, receiving a trust indicator to determine if the digital signature is valid, allowing the device to trust the file based on this indicator.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If traditional digital signature verification methods are used, then authentication reliability is improved, but device resource consumption increases and accessibility decreases
Solution Approach 1:
The patent introduces a server as an intermediary that performs the computationally intensive digital signature verification. The device sends the signed file to the server, which verifies the signature using the public key and returns a trust indicator. This mediator approach allows devices with limited resources to achieve reliable authentication without consuming significant local computational resources.
Solution Approach 2:
The patent creates a copy of the verification process by having the server perform signature verification independently. Instead of requiring the device to perform the full verification algorithm, the system copies the verification function to a more powerful server that can handle the computational load, while the device only handles data transmission and result reception.
2Reliability
If traditional digital signature verification methods are used, then authentication reliability is improved, but device complexity increases
Solution Approach 1:
The server acts as an intermediary that handles the complex verification logic. The device only needs basic functionality to send files and receive trust indicators, while the server manages the digital signature verification complexity using stored public keys and cryptographic algorithms.
Solution Approach 2:
The patent extracts the complex verification functionality from the device and places it in the server. The device is relieved of the burden of implementing full digital signature verification capabilities, reducing its complexity while maintaining authentication reliability through the server's verification services.
3Measurement precision
If traditional random access verification methods are used, then authentication accuracy is improved, but processing time increases
Solution Approach 1:
The server performs verification in advance by receiving the signed file and immediately checking the digital signature against stored public keys. This preliminary verification action eliminates the need for time-consuming random access and iterative verification processes, providing accurate authentication results quickly.
Solution Approach 2:
The patent replaces the mechanical random access verification process with a more efficient server-based system. Instead of sequential or random file access for verification, the system uses direct server processing that simultaneously checks signatures, providing both accuracy and speed through centralized computational power.
Data Source
AI summary
A computer-implemented method for trust propagation of signed files across devices may include identifying a signed file on a device, calculating, on the device, a hash based at least in part on the signed file, querying, with the hash, a server which has verified that the signed file is trustworthy based on a digital signature of the signed file having been verified by an additional device capable of verifying digital signatures, receiving on the device, in response to querying the server, a trust indicator indicating that the digital signature of the signed file has been verified and trusting the signed file on the device, based on the trust indicator indicating that the digital signature of the signed file has been verified. Various other methods, systems, and computer-readable media are also disclosed.