Blockchain Key State Synchronization for Hash-Based Signatures

Resolve Bottlenecks,
Find Innovative SolutionsGenerate Solutions

Solution Overview

Problem

Existing cryptographic systems face challenges in efficiently and securely synchronizing hash-based signature states across multiple security modules, particularly due to network failures, delays, and the risk of key reuse, which can compromise security and hinder scalability.

Innovation Solution

The implementation of a blockchain system with smart contracts ensures synchronized use of hash-based signatures by guaranteeing state correctness across collaborating security modules, protecting against key reuse and failure, and enabling seamless addition of new modules or capacity through a permissioned blockchain setup.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If a distributed database with hierarchical authority nodes is used to address contentions on counter values, then key reuse is prevented, but transaction processing time increases and network connection loss halts the system

Engineering Contradiction:

Improveprevention of key reuseVSAvoidtransaction processing time

Core Design Contradiction:

ReliabilityVSProductivity

Solution Approach 1:

The patent introduces a blockchain as an intermediary layer between security modules and the distributed database. The blockchain manages counter value commitments and provides a decentralized consensus mechanism, eliminating the need for hierarchical authority nodes while preventing key reuse through cryptographic commitments.

Inventive Principle:

Principle #24Intermediary (Mediator)

Solution Approach 2:

The patent replaces the mechanical hierarchical authority node system with a cryptographic-based blockchain consensus system. Instead of relying on hierarchical permissions and manual arbitration, the system uses cryptographic commitments and blockchain consensus to automatically resolve contentions and prevent key reuse.

Inventive Principle:

Principle #28Mechanics substitution (Replace mechanical system)

2Productivity

If counter ranges are divided and distributed among security modules, then transaction processing speed improves, but the system becomes vulnerable to network failures and delays

Engineering Contradiction:

Improvetransaction processing speedVSAvoidresistance to network failures

Core Design Contradiction:

ProductivityVSReliability

Solution Approach 1:

The patent implements prior cushioning by requiring security modules to cryptographically commit to counter values before using them. This commitment mechanism prevents race conditions and ensures that even if network failures occur, the counter values remain unique and valid, cushioning the system against failures.

Inventive Principle:

Principle #11Beforehand cushioning (Prior cushioning)

Solution Approach 2:

The blockchain provides continuous feedback to security modules about the state of committed counter values. This feedback mechanism allows security modules to verify the uniqueness and validity of their counter values, enabling them to operate independently while maintaining system-wide consistency even during network failures.

Inventive Principle:

Principle #23Feedback

3Ease of operation

If a centralized counter management system is used, then key synchronization is simplified, but the system lacks scalability and resilience to failures

Engineering Contradiction:

Improvekey synchronization simplicityVSAvoidsystem scalability

Core Design Contradiction:

Ease of operationVSAdaptability or versatility

Solution Approach 1:

The patent segments the counter management functionality across multiple independent security modules, each operating autonomously with their own counter ranges. The blockchain provides a decentralized coordination layer, eliminating the single point of failure in centralized systems while maintaining operational simplicity through standardized cryptographic protocols.

Inventive Principle:

Principle #1Segmentation

Solution Approach 2:

The blockchain serves multiple functions simultaneously: it manages counter value commitments, provides consensus for resolving contentions, enables scalability by accommodating new security modules, and ensures resilience through its distributed nature. This multi-functional design replaces multiple specialized components with a single universal system.

Inventive Principle:

Principle #6Universality (Multi-functionality)

Data Source

PatentUS11171774B2System for synchronizing a cryptographic key state through a blockchain

Publication Date: 2021.11.09 INTEL CORP

AI summary

In one embodiment, an apparatus comprising a memory to store a first value of a cryptographic key state; and a processor to generate a request to commit the first value of the cryptographic key state into a block of a blockchain, the blockchain to synchronize the cryptographic key state for a plurality of security modules; and generate a one-time cryptographic key based on the first value of the cryptographic key state responsive to a determination that the first value of the cryptographic key state has been committed to the blockchain.