Trusted Server Identity Verification via Remote Attestation
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing identity verification methods using digital certificates are vulnerable to security risks due to the potential misuse of private keys, leading to inaccurate identity verification results.
Innovation Solution
The implementation combines digital identity verification with remote attestation technology to issue a digital certificate with a trusted identifier only after verifying both the digital identity and trusted state of a terminal, allowing verification terminals to directly verify identities based on this certificate without parsing trusted protocols or reference values.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If digital certificate verification is performed using traditional methods, then identity verification can be conducted, but security risks arise when private keys are obtained or misused by attackers
Solution Approach 1:
The patent introduces a trusted server as an intermediary between the terminal and the verification process. The trusted server issues digital certificates after verifying both digital identity and trusted state, acting as a mediator that prevents direct reliance on potentially compromised private keys. This intermediary mechanism ensures that even if a terminal's private key is obtained by an attacker, the verification process remains secure because the trusted server maintains additional trust anchors.
Solution Approach 2:
The patent performs preliminary verification of both digital identity and trusted state before issuing a digital certificate. The trusted server first verifies the terminal's digital identity, then separately verifies the terminal's trusted state using remote attestation technology. Only after both preliminary checks pass does the server issue the digital certificate. This preliminary action ensures that the terminal is trustworthy before any verification occurs, preventing security risks from compromised private keys.
2Reliability
If verification terminals perform comprehensive identity verification including trusted state checking, then verification accuracy improves, but verification workload and complexity increase
Solution Approach 1:
The trusted server performs all complex verification tasks (digital identity verification and trusted state verification using remote attestation) as preliminary actions before the verification terminal needs to act. By completing these complex checks in advance at the trusted server, the verification terminal only needs to perform simple certificate verification, significantly reducing its workload and complexity while maintaining high verification accuracy.
Solution Approach 2:
The trusted server acts as an intermediary that handles the complex verification logic. Instead of requiring the verification terminal to perform complex remote attestation and digital identity verification, the trusted server performs these complex tasks and issues a digital certificate that encapsulates the verification results. This intermediary approach transfers computational complexity from the verification terminal to the trusted server, simplifying the terminal's verification process while maintaining accuracy.
3Reliability
If verification terminals parse trusted protocols and reference values to verify terminal state, then verification thoroughness improves, but verification difficulty and time consumption increase
Solution Approach 1:
The patent extracts the complex trusted state verification process from the verification terminal's workload. The trusted server performs the extraction of trust information through remote attestation and encapsulates it in the issued digital certificate. This allows the verification terminal to obtain trust information directly without parsing complex trusted protocols or reference values, significantly reducing verification time while maintaining thoroughness through the trusted server's pre-performed verification.
Solution Approach 2:
The trusted server creates a copy of the verification results (digital certificate containing trusted identifier) that the verification terminal can use without reperforming the complex verification. Instead of requiring the terminal to parse trusted protocols and reference values and perform thorough verification itself, the terminal receives a pre-verified copy from the trusted server, reducing verification time while maintaining the same level of thoroughness.
Data Source
AI summary
A computer-implemented method includes: verifying, by a trusted server, an identity of a first terminal; determining that the verification is a success; based on determining that the verification is a success, determining, using a remote attestation protocol, that the first terminal is in a trusted state; and based on determining that the first terminal is in the trusted state, issuing a digital certificate including a trusted identifier to the first terminal, in which the digital certificate is usable by a second terminal to verify the identity of the first terminal.