Asymmetric Key Generation Using Login Name and Random Value
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
The existing use of chip cards for encryption and decryption of medical data objects is inconvenient as patients must carry the card and a card reader is required, making it impossible to access encrypted data without them.
Innovation Solution
A method for generating an asymmetric cryptographic key pair using a unique user identification and arbitrarily selectable login name, where the login name is mapped to a value through a collision-free one-way function, and a random value is generated to calculate the key pair, ensuring secure encryption and decryption without the need for a central entity to possess the login name and key combination.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If chip cards are used for encryption and decryption of medical data objects, then secure access to encrypted data is achieved, but convenience deteriorates as patients must carry the card and a card reader is required
Solution Approach 1:
The invention extracts the cryptographic key generation process from the physical chip card and relocates it to a remote server. The server generates asymmetric key pairs and stores the public keys, while only the private keys remain on the chip card. This extraction eliminates the need for patients to physically carry and use chip cards for data access, as the card reader can retrieve private keys from the server and perform decryption without requiring the patient to present their card.
Solution Approach 2:
The invention introduces a remote server as an intermediary between the chip card and the data storage system. The server acts as a mediator that generates cryptographic key pairs, stores public keys, and facilitates secure communication. This intermediary enables secure data access without requiring direct interaction between the patient's chip card and the medical system, thereby improving convenience while maintaining security.
2Ease of operation
If a central entity stores the combination of login name and key, then ease of operation is improved, but security deteriorates as the central database becomes a target for compromise
Solution Approach 1:
The invention segments the cryptographic key storage into separate components: public keys are stored on the remote server, while private keys remain on the chip card. This segmentation ensures that no single central entity possesses both the login name and the private key combination. The chip card itself serves as a secure storage location for the private key, eliminating the need for a central database to store key combinations and thereby preventing security compromises from affecting all data access.
Data Source
AI summary
The invention pertains to a method, computer readable medium, and data processing system for generation of an asymmetric cryptographic key pair including reception of an arbitrarily selectable login name, calculation of a first data object key, whereby a random value and the login name are included in the calculation, and calculation of a second data object key from the first data object key, whereby the first and second data object keys form the asymmetric cryptographic key pair.