Offline Virtual Document Authentication via Hash Comparison

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Existing methods for authenticating virtual documents often require online connections to central servers, which can be unreliable, especially for mobile devices, and involve cumbersome physical documents that are difficult to manage and secure.

Innovation Solution

A method using a first electronic device to store a virtual document and its memory ID, and a second electronic device with a cryptographically secured database storing hash values of virtual documents, allowing offline authentication by calculating and comparing hash values, ensuring authenticity without an online connection and eliminating the need for physical documents.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If online connection to central server systems is used for authentication, then authentication can be performed with centralized control, but reliability deteriorates when mobile network connection is unavailable

Engineering Contradiction:
Improveauthentication reliabilityVSAvoidoperation availability
Core Design Contradiction:
ReliabilityVSEase of operation

Solution Approach 1:

The authentication system is segmented into two independent parts: a portable authentication device that stores virtual documents and a verification device that contains a cryptographically secured database with hash values. This segmentation allows the verification device to perform offline authentication by comparing hash values locally, eliminating the need for continuous online connection to a central server while maintaining authentication reliability.

Inventive Principle:
Principle #1Segmentation

Solution Approach 2:

The verification device pre-stores a cryptographically secured database containing hash values of authentic virtual documents before the authentication process. This preliminary action enables the device to perform offline verification by comparing the hash value of the presented virtual document against the pre-stored hash values, ensuring authentication reliability without requiring online connection during the actual verification process.

Inventive Principle:
Principle #10Preliminary action

2Adaptability or versatility

If multiple physical documents are carried for different authentication purposes, then comprehensive authentication capability is achieved, but device complexity and ease of operation worsen due to cumbersome management

Engineering Contradiction:
Improveauthentication capabilityVSAvoiddocument management
Core Design Contradiction:
Adaptability or versatilityVSEase of operation

Solution Approach 1:

Instead of requiring multiple physical documents, the system creates virtual copies of authentication documents in digital form. The portable authentication device stores virtual documents that can be easily copied and transferred electronically, eliminating the need to physically carry multiple different documents while maintaining comprehensive authentication capability across various scenarios.

Inventive Principle:
Principle #26Copying

Solution Approach 2:

The portable authentication device is designed as a universal device that can store and present multiple types of virtual documents (identity cards, passports, certificates, etc.) in a single location. This multi-functionality allows the user to access different authentication credentials from one device, eliminating the need to manage multiple separate physical documents while maintaining versatility across different authentication purposes.

Inventive Principle:
Principle #6Universality (Multi-functionality)

3Reliability

If physical documents with electronics are provided for high authentication requirements, then security is improved, but device complexity increases and portability decreases

Engineering Contradiction:
Improveauthentication securityVSAvoidhardware requirements
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

The system replaces complex physical document infrastructure with a software-based solution. Instead of requiring specialized electronic hardware embedded in physical documents, the authentication mechanism uses cryptographic hash value comparison that can be implemented through software on standard portable devices. This substitution maintains high security through cryptographic verification while dramatically reducing hardware complexity and improving portability.

Inventive Principle:
Principle #28Mechanics substitution (Replace mechanical system)

4Extent of automation

If central server systems are used for document verification, then centralized control is achieved, but loss of time increases due to network dependency

Engineering Contradiction:
Improvecentralized controlVSAvoidauthentication time
Core Design Contradiction:
Extent of automationVSLoss of time

Solution Approach 1:

The centralized control functionality is segmented and distributed to the verification device through the pre-stored cryptographically secured database. This allows the verification process to occur locally without requiring real-time network communication with a central server, eliminating network-dependent delays while maintaining the integrity and control of the authentication system through cryptographic verification.

Inventive Principle:
Principle #1Segmentation

Data Source

PatentEP3319006B1Method for offline authenticity testing of a virtual document
Publication Date: 2023.06.07 BUNDESDRUCKEREI GMBH
  • EP3319006B1 patent drawingFigure 1
  • EP3319006B1 patent drawingFigure 2
  • EP3319006B1 patent drawingFigure 3

AI summary

The invention relates to a method for offline authentication of a virtual document (108) using a first and a second electronic device (102, 352). The first electronic device (102) comprises a virtual document (108) and a storage ID (110). The second electronic device (152) comprises a cryptographically secured database (162) containing hash values ​​of a plurality of virtual documents. The storage ID (110) identifies an entry in the database (162) with the hash value of the virtual document (108).The procedure comprises: • Transferring the virtual document (108) together with a storage ID (110) to the second electronic device (152), • Calculating a hash value of the virtual document (108) by the second electronic device (152), • Identifying the database entry with the hash value of the virtual document (108) using the storage ID (110) of the virtual document (108), • Comparing the calculated hash value with the hash value of the virtual document (108) stored in the identified database entry, confirming the authenticity of the virtual document (108) if both hash values ​​match.