Blockchain-Authenticated Diffie-Hellman Key Exchange
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing key exchange protocols, such as Diffie-Hellman, are vulnerable to Man-In-the-Middle attacks and require a trusted third party for robustness, while blockchain-based solutions face challenges in managing ephemeral wallet addresses and are sensitive to cryptanalytic attacks.
Innovation Solution
A method for exchanging keys between peers using a blockchain that generates ephemeral private and public keys, records them in transactions, and verifies their authenticity without generating new wallet addresses, using an elliptic curve cryptosystem and OP_RETURN scripts to secure the exchange.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If Diffie-Hellman key exchange protocol is used, then secure channel establishment is achieved, but vulnerability to Man-In-the-Middle attacks occurs
Solution Approach 1:
The patent introduces a blockchain as an intermediary mediator that provides decentralized verification of public keys. Instead of relying solely on the Diffie-Hellman protocol which is vulnerable to MITM attacks, the blockchain serves as a trusted intermediary that records and verifies public key registrations, allowing parties to authenticate each other's public keys without requiring a traditional trusted third party certificate authority.
2Reliability
If a trusted third party is introduced to prevent Man-In-the-Middle attacks, then authentication reliability is improved, but system complexity and trust requirements increase
Solution Approach 1:
The patent implements a self-service mechanism where the blockchain network collectively performs the authentication function through its distributed consensus mechanism. Each node in the blockchain network independently verifies and records public keys, eliminating the need for a centralized trusted third party. The system serves itself through decentralized verification, reducing both complexity and trust requirements compared to traditional certificate authority models.
3Reliability
If ephemeral wallet addresses are generated for key exchange, then security is improved, but computational cost and management complexity increase
Solution Approach 1:
The patent extracts the essential security function from the ephemeral wallet address concept, keeping only the public key generation and registration aspects while eliminating the overhead of wallet address management. The solution focuses on generating ephemeral public keys for key exchange and registering them in the blockchain, without requiring the full ephemeral wallet address infrastructure, thereby reducing computational cost and management complexity while maintaining security.
4Adaptability or versatility
If existing blockchain-based key exchange methods are used, then decentralized authentication is achieved, but sensitivity to cryptanalytic attacks increases
Solution Approach 1:
The patent applies preliminary action by pre-registering public keys in the blockchain before they are used for key exchange. This advance registration allows the system to establish a trusted baseline of public keys that can be verified during the exchange process. By performing this authentication setup in advance through blockchain registration, the system reduces vulnerability to cryptanalytic attacks during the actual key exchange while maintaining decentralized authentication.
Data Source
AI summary
The invention relates to a method for exchanging keys between peers, of Diffie-Hellmann type, authenticated by means of a blockchain of transactions. The public keys of the peers are recorded in the ledger distributed by means of transactions transmitted by the peers, the latter being identified by their wallet addresses and authenticated by their respective signatures.