SYSTEMS AND METHODS FOR CREATING AND MANAGING AUTHENTICATION INFORMATION

Abstract

The invention proposes a system and method for generating and managing secure authentication information, particularly for the identification and management of digital assets. The solution involves locally generating a private key on the user's device, then applying a secret sharing mechanism to fragment this key into at least three separate fragments. These fragments are stored in a distributed manner across cloud storage, a separate database, and the local device. Thanks to this threshold mechanism, the system only needs to recover at least two of the fragments to be eligible to restore the original private key, ensuring authentication continues normally even if the user loses their local storage device. When a transaction is requested, the system retrieves the fragments and places them in an isolated Trusted Execution Environment (TEE) configured to act as a secure, isolated partition on a remote server.The private key is temporarily and completely recreated within the isolated TEE's memory to perform digital transaction signing, thereby ensuring that no single entity controls the entire private key in plaintext form, effectively preventing the risk of data leakage.

Images