Asymmetric Key Pair Generation for User Privacy Protection
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing electronic security systems using public key/private key systems face disadvantages such as the potential for misuse of fixed keys to gather extensive user information and lack of protection against unauthorized access, as a single public key can be used across multiple resources, allowing website operators to share information freely.
Innovation Solution
A method and system for creating asymmetric key pairs by generating a master key, receiving an identity key from a server, and using it to create a seed through an encryption or hashing function, which is then used to produce a unique asymmetric or symmetric key pair for each server, allowing for secure authentication and proof of knowledge or possession, thereby protecting user information.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If a fixed public key is used to identify the originator across multiple websites, then authentication is simplified and consistent, but user information privacy is compromised as websites can match keys and exchange information about the user
Solution Approach 1:
The patent segments the authentication key system by generating a unique key pair for each website instead of using a single fixed public key across all websites. The client generates a unique private key and corresponding public key for each server, preventing websites from matching keys and exchanging user information while maintaining authentication consistency through the use of identity keys and seeds that are specific to each server-client relationship
Solution Approach 2:
The patent applies local quality by making each key pair locally specific to a particular server-client relationship. Each server receives an identity key and generates a unique seed that is specific to that server, which is then used to generate a unique key pair. This ensures that the authentication credentials are tailored locally to each relationship rather than being globally uniform
2Device complexity
If a single public key system is used across multiple resources, then the key management is simple, but security is weakened as operators can freely exchange information about users
Solution Approach 1:
The patent segments the key management system by creating separate key pairs for each server interaction. Instead of managing a single public key across all resources, the system generates unique private and public keys for each server, preventing operators from exchanging user information. The complexity is managed through automated seed generation and key pair creation processes that occur locally on the client side
Solution Approach 2:
The patent introduces identity keys and seeds as intermediaries between the user's master key and the server-specific key pairs. The identity key received from each server acts as an intermediary that, when combined with the master key through hashing, generates a unique seed. This seed then generates the server-specific key pair, providing an intermediary layer that enhances security while maintaining manageable complexity
3Productivity
If fixed authentication keys are used, then authentication processes are efficient, but vulnerability to fraud and man-in-the-middle attacks increases
Solution Approach 1:
The patent applies dynamics by making the authentication keys dynamic and specific to each server interaction rather than static and fixed. Each server receives an identity key that generates a unique seed, which in turn generates a unique key pair. This dynamic approach ensures that authentication credentials change based on the specific server being accessed, maintaining efficiency through automated generation while protecting against fraud and man-in-the-middle attacks
Solution Approach 2:
The patent changes the parameters of the authentication system by transitioning from fixed keys to variable, server-specific keys. The identity key parameter received from each server changes the resulting seed and key pair parameters, creating unique authentication credentials for each interaction. This parameter change maintains authentication efficiency while fundamentally reducing vulnerability to fraud and interception
Data Source
AI summary
Exemplary embodiments disclosed herein may include a method and system for creating pair-wise security keys, comprising receiving an identity key from a website, generating a master key, creating a pair-wise symmetric key or asymmetric key pair by utilizing an encryption function of the identity key and the master key, and storing the pair-wise public or symmetric key at the client and the website.