Bidirectional Blockchain for Data Authentication
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current data authentication systems using public/private key pairs are vulnerable to key compromise, allowing adversaries to falsify data until the key is revoked or expires, as they do not require a new key pair for each data signing operation, thereby extending the window of potential data falsification.
Innovation Solution
A bidirectional blockchain system is implemented, utilizing forward and reverse blockchains to ensure data integrity and authenticity, where a new public/private key pair is generated for each data element, with the reverse blockchain storing public keys to verify authenticity, thereby expiring previous keys and reducing the window of vulnerability.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Productivity
If a single public/private key pair is used for multiple data signing operations, then the authentication process is simplified and more efficient, but the security window is extended allowing adversaries more time to compromise the key
Solution Approach 1:
The patent segments the authentication process by creating multiple key pairs (first key pair, second key pair, etc.) instead of using a single key pair. Each key pair is associated with specific data elements, dividing the authentication function into discrete units that can be independently managed and expired, thus reducing the security window while maintaining efficiency.
Solution Approach 2:
The patent implements dynamic key management where key pairs have expiration dates and are rotated over time. The system transitions from static key usage to dynamic key rotation, where each subsequent key pair replaces the previous one after a predetermined period, adapting the security posture to minimize exposure time while maintaining continuous authentication capability.
2Reliability
If frequent key rotation is implemented to reduce the security window, then security is improved, but the complexity of key management increases
Solution Approach 1:
The patent introduces a certificate authority as an intermediary that automatically manages the issuance, distribution, and expiration of certificates containing public keys. This intermediary handles the complexity of key rotation logistics, allowing the system to achieve frequent key rotation without proportionally increasing management complexity, as the intermediary automates the coordination between key generation, distribution, and expiration.
Solution Approach 2:
The system implements self-service mechanisms where clients automatically receive and update their certificates without manual intervention. The automated certificate distribution and expiration handling reduces the operational burden of frequent key rotation, allowing the system to maintain short security windows without requiring complex manual key management processes.
3Reliability
If new key pairs are generated for each data element, then the security window is minimized, but the computational overhead and system complexity increase
Solution Approach 1:
The patent applies partial action by generating new key pairs not for every single data element, but in predetermined intervals or batches. This approach achieves sufficient security window reduction without the full computational overhead of generating unique key pairs for each individual data element, balancing security requirements with system complexity constraints.
Data Source
Figure 1
Figure 2
Figure 3
AI summary
Described is a system for improving data authentication using blockchain technology and multi-party computation (MFC). The system ensures authenticity of distributed data sent from one or more servers to the distributed clients. The system initializes MFC protocols to ensure secrecy of keys used to sign a new data element. Blockchain technology is utilized to ensure correctness and integrity of the new data element. A bidirectional blockchain is used such that a forward blockchain stores the new data element to be received by the distributed clients, and a reverse blockchain stores a public key used by the distributed clients to verify authenticity of the new data element stored in the forward blockchain. Signing of the new data element with the public key causes a previous public key to expire.