Asymmetric Key Fragmentation for Identity Verification
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current identity verification methods for online services rely on insecure methods such as passwords and personal information, leading to increased risks of identity theft and high costs for security measures.
Innovation Solution
The use of asymmetric key pairs, where a private key is fragmented into three private key fragments, with the public key used for encryption and the fragments used for partial decryption, allowing for secure identity verification by combining the partially decrypted challenges.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If traditional password-based identity verification is used, then the system is easy to operate, but security reliability deteriorates due to identity theft risks
Solution Approach 1:
The private key is divided into multiple fragments (first private key fragment stored on server, second private key fragment stored on client device, third private key fragment provided by user). This segmentation ensures that no single point holds the complete private key, thereby enhancing security while maintaining operational ease through distributed storage and verification.
2Reliability
If strong security measures are implemented to protect user identification information, then security reliability improves, but device complexity and cost increase
Solution Approach 1:
The private key is divided into multiple fragments (first private key fragment stored on server, second private key fragment stored on client device, third private key fragment provided by user). This segmentation ensures that no single point holds the complete private key, thereby enhancing security while maintaining operational ease through distributed storage and verification.
Solution Approach 2:
An encrypted challenge mechanism is introduced as an intermediary between the server and client for verification. The server sends an encrypted challenge to the client, which must be decrypted using the fragmented private keys. This intermediary process enables secure verification without requiring direct exposure of the private key, thus reducing complexity compared to traditional centralized security models.
3Device complexity
If complete private key is stored in one location, then verification process is simple, but security reliability deteriorates as it becomes a single point of failure
Solution Approach 1:
The private key is divided into multiple fragments (first private key fragment stored on server, second private key fragment stored on client device, third private key fragment provided by user). This segmentation ensures that no single point holds the complete private key, thereby enhancing security while maintaining operational ease through distributed storage and verification.
Data Source
AI summary
Systems and methods for identify confirmation and transaction security are described. The system transmits to a client computing system an encrypted challenge generated using a public key of an asymmetric key pair and a first partially decrypted challenge generated by applying a first private key fragment of a private key of the asymmetric key pair to the encrypted challenge. The system receives a decrypted challenge generated by applying a second private key fragment of the private key to the encrypted challenge to generate a second partially decrypted challenge, applying a third private key fragment of the private key to the encrypted challenge to generate a third partially decrypted challenge, and combining the first partially decrypted challenge, the second partially decrypted challenge and the third partially decrypted challenge to generate the decrypted challenge. The system uses the decrypted challenge for verification.