Digital Wallet Certificate Swapping Without App Updates
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Conventional systems require updating and redistributing the entire application when a digital certificate is compromised, leading to downtime and potential fraud, as they lack a mechanism for dynamically swapping compromised certificates without updating the application.
Innovation Solution
Implementing a digital wallet system that associates a primary digital certificate with a backup certificate, allowing seamless swapping and updating of the backup certificate without requiring a new application version, using a certificate authority system to manage and distribute these certificates.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If the digital certificate is written into the application code and distributed with the application, then the application can verify server authenticity, but the entire application must be updated and redistributed when the certificate is compromised
Solution Approach 1:
The patent separates the digital certificate from the application code by storing it in a separate certificate store on the user computing device. This allows the certificate to be independently updated without requiring application redistribution. The application merely references the certificate location and performs verification, enabling rapid certificate replacement when compromise is detected.
Solution Approach 2:
The digital certificate is extracted from the application bundle and stored separately in a certificate store. This extraction enables the certificate to be updated, revoked, or replaced independently of the application itself, eliminating the need to redistribute the entire application when certificate security issues arise.
2Reliability
If the digital certificate is updated by creating and distributing a new application version, then the compromised certificate is replaced, but application downtime and user inconvenience occur
Solution Approach 1:
The system pre-fetches and stores backup certificates in the certificate store before they are needed. When a certificate compromise is detected, the application can immediately switch to a pre-stored backup certificate without requiring network access or user action, thereby eliminating downtime and maintaining continuous secure communication.
Solution Approach 2:
The patent implements automatic certificate monitoring and seamless switching mechanisms that ensure continuous secure communication. When a certificate is compromised, the system automatically detects the issue and switches to a backup certificate without interrupting the application's operation, maintaining uninterrupted secure connectivity.
3Ease of operation
If the digital certificate is stored on the user computing device, then certificate verification can be performed locally, but the certificate cannot be dynamically updated without application updates
Solution Approach 1:
The system implements automatic certificate monitoring and updating mechanisms that operate without user intervention. The application continuously monitors certificate status, automatically detects compromises, and seamlessly switches to backup certificates stored in the certificate store, enabling dynamic certificate updates while maintaining local verification capabilities.
Solution Approach 2:
The patent transforms the static certificate storage model into a dynamic system where certificates can be automatically updated and replaced. The certificate store maintains multiple versions of certificates, and the application dynamically selects the appropriate certificate based on current security status, enabling adaptability without requiring application redistribution.
Data Source
AI summary
Providing backup digital certificates comprises an application provider, such as a digital wallet system, that obtains signed digital certificates from a certificate authority. The digital wallet system provides an application, such as a digital wallet application, to a user computing devise along with a primary digital certificate and a backup digital certificate. The user computing device utilizes the primary digital certificate to ensure a secure connection with the digital wallet system. If the primary digital certificate is compromised, the digital wallet system may communicate the backup digital certificate to the digital wallet system when a subsequent secure connection is requested. The user computing device may access the backup digital certificate and verify the provided digital certificate. The digital wallet system provides a new backup digital certificate to the user computing device, and the user computing device deletes the compromised digital certificate.