Blockchain Recovery Key Generation for Mobile Credential Management
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing password-based systems for mobile devices are insecure due to the need for long, hard-to-remember passwords, leading to compromised accounts across multiple sites if one password is hacked, and lack a method for users to recover credentials independently without relying on third parties when their device becomes unavailable.
Innovation Solution
A processor-implemented method generates a recovery key from a mnemonic sentence and Personal Identification Number (PIN) using a key derivation algorithm, which is then conditionally registered in a blockchain smart contract, allowing users to recover their credentials on another device.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If password-based authentication is used for mobile devices, then ease of operation is improved, but security deteriorates due to the need for long, hard-to-remember passwords
Solution Approach 1:
The patent replaces traditional password-based mechanical authentication with a cryptographic system using public-private key pairs generated by a cryptographic processor. The public key serves as the authentication credential, eliminating the need for users to remember complex passwords while maintaining strong security through cryptographic protection.
Solution Approach 2:
The patent introduces a blockchain-based intermediary system that stores and manages public keys and recovery keys. This intermediary enables secure authentication without requiring users to directly manage sensitive credentials, while the smart contract ensures that only authorized devices can access or recover credentials.
2Reliability
If private key extraction is restricted to protect security, then security is improved, but ease of repair deteriorates as users cannot recover credentials on another device
Solution Approach 1:
The patent performs preliminary action by generating a recovery key from the private key and storing its hash in the blockchain before the user needs it. This allows the user to later recover their credentials on a different device by proving ownership through the recovery key, without ever exposing the actual private key.
Solution Approach 2:
The patent extracts only the necessary information (hash of recovery key) from the secure cryptographic processor and stores it in the blockchain, while leaving the actual private key and recovery key within the secure hardware. This enables credential recovery functionality while maintaining security by not extracting the full private key.
3Reliability
If users manage their own credentials without third parties, then reliability is improved, but device complexity increases due to cryptographic processor requirements
Solution Approach 1:
The patent leverages the existing cryptographic processor that is already present in modern mobile devices for purposes such as secure element storage and biometric authentication. By reusing this existing hardware component for credential generation and management, the patent avoids adding significant complexity while enabling users to independently manage their credentials.
Data Source
AI summary
A processor implemented method for generating a recovery key for a first device associated with a user and conditionally registering an identifier of the recovery key in a blockchain is provided. The method includes the steps of generating, using a first cryptographic processor on the first device associated with the user, a first set of credentials; generating a mnemonic sentence from pseudorandom data; applying a key derivation algorithm to generate the recovery key and conditionally registering an identifier of the recovery key for the first public key of the first device in a smart contract in the blockchain. The first set of credentials includes a first blockchain-compatible public-private key pair associated with the user. The first blockchain-compatible public-private key pair includes a first public key and a first private key. The first private key is restricted to the first cryptographic processor on the first device.