Method and system for assessing a message in a decentralized communication network

Patent metadata

Field	Value
Publication number	US-2016192192-A1
Application number	US-201414911737-A
Country	US
Kind code	A1
Filing date	Feb 17, 2014
Priority date	Dec 23, 2013
Publication date	Jun 30, 2016
Grant date	—

Abstract

A method for assessing a message transmitted between at least: two parties via a previously unknown third party in a decentralized communication network, wherein all parties share a common trust architecture, includes publishing, on-behalf-of indication and public, security information of the third party; publishing, the message of the first party; evaluating the published information to extract published content of the first party by the second party as intended receiver of the message; verifying a real-world-identity of the third party and/or the signature of the third party based on the previously received trust information and/or based on the self-certifying name and the public security information of the third party; checking a trust information chain according to the common trust architecture from the second party to the third party; and assessing the content of the first party based on the checked trust chain.

First claim

1 . A method for assessing a message transmitted between at least two parties via a previously unknown third party in a decentralized communication network, wherein all parties share a common trust architecture, wherein the message comprising includes content of a first party intended for a second party and published by a third party, and wherein a name of the first party and/or a name of the second party includes a first part including a self-certifying component and a second part including an indication of an on-behalf-of publication or not, and wherein the self-certifying component of the first party is previously provided to the second party, and wherein the parties have received at. least one trust information component according to the common trust architecture, the method comprising:
a) publishing, under the name of the first party with an on-behalf-of indication of a name of the third party with on-behalf-of indication and public security information of the third party, b) publishing, under a combination of an on-behalf-of name of the first part and the third party* the message of the first party, wherein the message is signed by the third party, e) evaluating information published in step a) and step b) to extract published content of the first party by the second party as intended receiver of the message, d) verifying a real-world-identity of the third party and/or the signature of the third party over the extracted message based on the previously received trust information and/or based on the self-certifying name and the public security information of the third party, e) checking a trust information chain according to the common trust architecture from the second party to the third party, and f) assessing the content of the first party based on the cheeked trust information chain.

2 . The method according to claim 1 , wherein the parts of the name of a party are concatenated, preferably with a marker between the two parts.

3 . The method according to claim 1 , wherein the self-certifying component is provided in form of cryptographic information.

4 . The method according to claim 1 , characterized in that the public security information is used, for identification within the common trust architecture.

5 . The method according to claim 1 , wherein in step d) a network-wide cryptographic hash function is used on the public security information of the third party to obtain the identification of the third party.

6 . The method according to claim wherein a functional decentralized local node is queried for the real-world identity of the first party by the third party to determine the self-certifying component of the first party.

7 . The method according to claim 1 , wherein for obtaining the trust information chain one or more functional decentralized local nodes located within the decentralized communication network are queried, wherein a functional decentralized local node provides trust information.

8 . The method according to claim 1 , wherein trust information is provided in a form of a web-of-trust file or a binding file comprising real-world-identity information associated with corresponding public security information.

9 . The method according to claim 8 , wherein the trust information is generated and updated by a functional decentralized local node in a part of the decentralized network to which the parties can connect.

10 . The method according to claim 1 , wherein step e) includes evaluating the length of the trust information chain and/or the number of independent paths between the first party and the second party.

11 . The method according to claim 1 , wherein the trust information chain is obtained by using a double-side breadth search first algorithm on the trust information.

12 . The method according to claim 1 , wherein trust information is revoked and/or updated upon a request of a party.

13 . The method according to claim 1 , wherein the trust information is compressed prior to storing.

14 . The method according to claim 13 , wherein the trust information is provided in a form of first real-world-identities are-listed sequentially, followed by a list of corresponding key-IDs in a same order.

15 . A system for assessing a message transmitted between at least two parties via a previously unknown third party in a decentralized communication network, wherein all parties share a common trust architecture, wherein the message includes content of a first party intended for a second party and published by a third party, wherein a name of the first party and/or the second party comprises at least two parts, wherein the first part includes a self-certifying component and a second part includes an indication of an on-behalf-of publication or not, wherein the a self-certifying component of the first party is previously provided to the second party, and wherein the parties have received at least one trust information component according to the common trust architecture,
the third party, operable to publish under the name of the first party with on-behalf-of indication a name of the third party with on-behalf-of indication and public security information of the third party, to publish under a combination of the on-behalf-name of the first and itself the message of the first party, wherein die message is signed by the third party, and the second party as intended receiver of the message is operable to evaluate the information published by the third party to extract the published content of the first party, to verify a real-world-identity of the third party and/or the signature of the third party over the extracted message based on the previously received trust information and/or based on the self-certifying name and the public security information of the third party, to check a trust information chain according to the common trust architecture from itself to the third party, and to assess the content of the first party based on the checked trust chain.

Assignees

• Nec Europe Ltd

Inventors

• Seedorf Jan
• Kutscher Dirk
• Schneider Fabian

Classifications

• H04L63/0823

  using certificates (cryptographic mechanisms or cryptographic arrangements for entity authentication involving certificates H04L9/3263) · CPC title

• H04L9/3265 Primary

  using certificate chains, trees or paths; Hierarchical trust model · CPC title

• H04L63/126

  the source of the received data · CPC title

• H04L9/3247

  involving digital signatures · CPC title

• H04L2463/081

  applying self-generating credentials, e.g. instead of receiving credentials from an authority or from another peer, the credentials are generated at the entity itself · CPC title