Trusted Computing Digital Resource Transfer Authentication

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Existing digital resource transfer systems require continuous connectivity to a central ledger system for authorization, which is inefficient and lacks direct authentication of entities involved in the transfer.

Innovation Solution

A system utilizing trusted computing environments to authenticate digital resources through public and private digital signatures, verifying possession and integrity of the digital resource directly between entities without relying on a central system.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If continuous connectivity to a central ledger system is required for authorization, then transfer reliability is improved, but system efficiency and operational speed deteriorate

Engineering Contradiction:
Improvetransfer authorization reliabilityVSAvoidtransfer operation efficiency
Core Design Contradiction:
ReliabilityVSProductivity

Solution Approach 1:

The patent extracts the authentication function from the central ledger system and embeds it directly into the digital resource itself through cryptographic signatures. The digital resource contains embedded authentication data that allows verifying its legitimacy without contacting a central system, thus eliminating the dependency for continuous connectivity while maintaining reliability.

Inventive Principle:
Principle #2Taking out (Extraction)

Solution Approach 2:

The digital resource performs self-authentication through its own embedded cryptographic signatures and authentication data. The resource verifies its own legitimacy and the legitimacy of transfers involving it without requiring external authorization from a central ledger system, enabling peer-to-peer verification that improves efficiency while maintaining security.

Inventive Principle:
Principle #25Self-service

2Reliability

If a central ledger system is used for transfer authorization, then transfer security is improved, but direct authentication between entities is lost

Engineering Contradiction:
Improvetransfer securityVSAvoiddirect entity authentication
Core Design Contradiction:
ReliabilityVSEase of operation

Solution Approach 1:

The patent introduces cryptographic digital signatures as an intermediary mechanism that enables direct authentication between entities. Instead of relying on a central ledger to mediate authentication, the digital resource itself carries authentication data (digital signatures) that allow any participant to verify the authenticity of the resource and transfer history directly, eliminating the need for central system involvement in authentication operations.

Inventive Principle:
Principle #24Intermediary (Mediator)

3Measurement precision

If continuous central system connectivity is maintained, then authorization accuracy is improved, but system complexity and infrastructure requirements increase

Engineering Contradiction:
Improveauthorization accuracyVSAvoidsystem infrastructure complexity
Core Design Contradiction:
Measurement precisionVSDevice complexity

Solution Approach 1:

The patent extracts the authorization verification function from the central system and embeds it within the digital resource itself through cryptographic signatures. This allows accurate authorization verification to be performed locally by any participant using the embedded authentication data, eliminating the need for complex continuous connectivity infrastructure while maintaining authorization accuracy.

Inventive Principle:
Principle #2Taking out (Extraction)

Data Source

PatentUS11888759B2System for executing digital resource transfer using trusted computing
Publication Date: 2024.01.30 BANK OF AMERICA CORP
  • US11888759B2 patent drawing
  • US11888759B2 patent drawing

AI summary

Systems, computer program products, and methods are described herein for executing digital resource transfer using trusted computing. The present invention is configured to receive, from a second computing device, an indication that a first computing device has initiated a transfer of a digital resource; determine, using the authentication protocol, that the first computing device is in secure possession of the digital resource; initiate, via the second computing device, a request to receive the digital resource from the first computing device; receive, via the second computing device, an indication that the second computing device has received the digital resource from the first computing device; initiate, via the second computing device, a resource verification protocol on the digital resource; verify, using the resource verification protocol, one or more digital signatures associated with the digital resource; and transmit, via the second computing device, an acknowledgement to the first computing device.