Architecture for asymmetric crypto-key storage

Abstract

Techniques for securing an asymmetric crypto-key having a public key and a split private key with multiple private portions are provided. A first one of multiple factors is stored. All of the factors are under the control of a user and all are required to generate a first private portion of the split private key. The first private portion not stored in a persistent state. A second private portion of the split private key under control of an entity other than the user is also stored. The first private portion and the second private portion are combinable to form a complete private portion.

Description

RELATED APPLICATIONS [0001] This application is related to U.S. application Ser. No. ______, filed concurrently herewith, and entitled “TECHNIQUE FOR ASYMMERIC CRYPTO-KEY GENERATION” [Attorney Docket No. 3001-32], U.S. application Ser. No. ______, filed concurrently herewith, and entitled “MULTIPLE FACTOR PRIVATE PORTION OF AN ASYMMETRIC KEY” [Attorney Docket No. 3001-33], U.S. application Ser. No. ______, filed concurrently herewith, and entitled “AUTHENTICATION PROTOCOL USING A MULTI-FACTOR ASYMMETRIC KEY PAIR” [Attorney Docket No. 3001-34], U.S. application Ser. No. ______, filed concurrently herewith, and entitled “ROAMING UTILIZING AN ASYMMETRIC KEY PAIR” [Attorney Docket No. 3001-35], U.S. application Ser. No. ______, filed concurrently herewith, and entitled “ASYMMETRIC KEY PAIR HAVING A KIOSK MODE” [Attorney Docket No. 3001-36], and U.S. application Ser. No. ______, filed concurrently herewith, and entitled “TECHNIQUE FOR PROVIDING MULTIPLE LEVELS OF SECURITY” [Attorney Dock...

AI Technical Summary

Benefits of technology

[0035] A factor could be as simple as a readily available number string, such as a serial number of a user's computer, or could be a sophisticated algorithm, such as a cryptographic key. Also, if the multiple factors are simple number strings, generation of the first private portion could be a simple concatenation of the multiple factors. However, preferably, generation of the first portion includes cryptographically combining the multiple factors, and each of the multiple factors is, or is used to produce, a cryptographic key. Thus, in the preferred embodiment, cryptographic keys are used to produce a crypto-graphic key.

Problems solved by technology

Access control is an old problem, tracing its roots to the earliest days of computers.

This simple scheme suffers from two problems.

A second problem with this approach is that when Alice enters her password it travels from her terminal to the computer in the clear, and Eve could potentially eavesdrop.

In this example as F( ) is a one way function, computing XD45DTY from apple23 is easy, but as it is a “one way function”, the reverse is believed to be computationally difficult or close to impossible.

However, this approach, while solving the problems due to the storage of the password on the computer, does not solve the problem of the password traveling in the clear.

The passwords are transmitted in the clear, thus token techniques are subject to man-in-the-middle attacks.

As will be recognized by one of ordinary skill, this particular approach is undesirable due to it being susceptible to a dictionary attack, to be discussed in detail further below.

Smart card techniques are associated with certain problems.

These problems include the fact that the technique is costly to implement, due to hardware costs.

Further, a lack of readers makes use of a user's smart card difficult, and smart cards themselves are subject to loss.

An attacker who does not know K, and sees C, cannot successfully decrypt the message, if the underlying algorithms are strong.

Symmetric key systems have always suffered from a major problem—namely how to perform key distribution.

This is simply because in practice all known asymmetric systems are fairly inefficient, and while they are perfectly useful for encrypting short strings such as K, they are inefficient for large messages.

With digital signatures this is not possible since only the sender has knowledge of the sender's private key required to compute the signature.

The verifier can only verify the signature but not generate it.

The process for getting and storing the binding [Alice, Ealice] which binds Ealice to Alice is tricky.

Asymmetric key cryptosystems have been around for a long time, but have found limited use.

The primary reasons are twofold: (a) the private key D in most systems is long, which means that users cannot remember them, and they have to either be stored on every computer they use, or carried around on smart cards or other media; and (b) the infrastructure for ensuring a certificate is valid, which is critical, is cumbersome to build, operate, and use.

This clearly does not scale well to an environment with millions of users.

The second method proposed was to require that one inquire about the validity of a certificate on-line, which has its own associated problems.

Further, if the server is informed that a particular ID has been revoked, then it will cease to perform its part of the operation for that user, and consequently no further signatures can ever be performed.

The converse function in SSL, client side SSL, which lets a client authenticate herself to a server by means of a digital signature is rarely used, because although the technical mechanism is much the same, it now requires users to manage certificates and long private keys which has proven to be difficult, unless they use the split private key system.

Although the attacker did not gain access, now legitimate users cannot access their own accounts either, creating a denial of service problem.

The system is only vulnerable to this attack if it is true that M has some predictable structure.

Further, and as discussed above, existing multiple factor systems that overcome these problems rely upon expensive hardware.

Because of this and other reasons, such systems have failed to gain support.

Images