Asymmetric Cryptography Key Generation via User Authentication
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing secure data storage methods lack robustness in ensuring data access is restricted to authorized users, particularly in scenarios where symmetric cryptography may not provide sufficient security against unauthorized access.
Innovation Solution
The implementation of asymmetric cryptography using user authentication factors (UAFs) to generate decryption keys, where biometric information and hardware IDs are combined to create unique authentication factors, and a one-way function is used to derive encryption keys, ensuring that only authenticated users can access encrypted data without storing the decryption key.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If symmetric cryptography is used for data encryption, then data can be encrypted and decrypted efficiently, but security against unauthorized access is insufficient
Solution Approach 1:
The patent applies asymmetry by using asymmetric cryptography where the decryption key is derived from user authentication factors (biometric data, passwords) through one-way functions. The encryption key is stored publicly while the decryption key remains private and is never stored, creating an asymmetric key management system that enhances security while maintaining operational efficiency
2Ease of operation
If decryption keys are stored securely, then data can be decrypted when needed, but the risk of unauthorized access increases
Solution Approach 1:
The patent extracts the decryption key from the system entirely - it is never stored in memory or on storage devices. Instead, the decryption key is generated on-demand by processing user authentication factors through cryptographic functions, eliminating the security vulnerability of stored decryption keys while maintaining the ability to decrypt data when needed
Solution Approach 2:
The patent introduces user authentication factors (biometric data, passwords, security questions) as intermediaries between the user and the decryption process. These factors serve as mediators that must be verified before the decryption key can be generated, adding a layer of security control without preventing legitimate access
3Reliability
If user authentication factors are combined to generate decryption keys, then only authenticated users can access data, but the system complexity increases
Solution Approach 1:
The patent merges multiple authentication factors (biometric data, passwords, security question answers) into a single decryption key through cryptographic hashing functions. This combining approach strengthens access control by requiring multiple factors while managing complexity through standardized cryptographic operations that leverage existing hardware and software capabilities
Data Source
AI summary
A device uses a user authentication factor to generate a decryption key for use in asymmetric cryptography. An encryption key is generated from the decryption key using a one-way function.