Blockchain Contract Data Security via Temporary Key Segmentation
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current blockchain technologies face significant data security risks due to the potential theft and loss of key information for contract participants, leading to reduced security trust and user experience in blockchain services.
Innovation Solution
Implementing temporary keys generated using asymmetric encryption algorithms for contract participants, enabling secure data processing and storage by encrypting and verifying contract data off-chain before uploading it to the blockchain, thereby enhancing data security.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If traditional blockchain data storage methods are used, then the blockchain maintains decentralization and transparency, but key information of contract participants can be maliciously stolen and lost, generating data security risks
Solution Approach 1:
The patent segments the traditional single key structure into multiple key pairs (first key pair for encryption, second key pair for signing). This segmentation allows different keys to serve different security functions, preventing a single point of failure and reducing the risk of complete data compromise if one key is stolen or lost.
Solution Approach 2:
The patent introduces an intermediary key management mechanism where the first public key encrypts the second private key, and the first private key signs the second public key. This intermediary structure creates a layered security system where keys protect each other, adding an additional layer of protection against key theft and loss.
2Reliability
If contract data is encrypted using encryption methods, then contract content is protected, but key information may still be maliciously stolen, reducing security trust
Solution Approach 1:
The patent divides the encryption and signing functions into separate key pairs. The first key pair handles encryption of contract content, while the second key pair handles signing for authentication. This segmentation ensures that even if one key pair is compromised, the other continues to provide security protection.
Solution Approach 2:
The patent creates a composite security structure by combining encryption and signing operations with multiple key pairs. The contract data is protected through a combination of encryption (confidentiality) and digital signatures (integrity and authentication), creating a multi-layered security approach that is more resistant to key theft.
3Ease of operation
If the same keys are used for multiple contracts, then key management is simpler, but security risks increase due to potential key exposure across multiple transactions
Solution Approach 1:
The patent generates separate key pairs for each contract (first and second key pairs for each contract). This per-contract key segmentation ensures that compromise of keys for one contract does not affect the security of other contracts, while the systematic generation process maintains operational simplicity.
Solution Approach 2:
The patent implements dynamic key generation where key pairs are created specifically for each contract rather than using static, reusable keys. This dynamic approach adapts the security structure to each contract's specific needs, isolating security risks to individual contracts while maintaining overall system manageability.
Data Source
Figure 1
Figure 2
Figure 3
AI summary
Implementations of the present specification disclose blockchain data processing methods, apparatuses, processing devices, and systems. In an implementation, a registration of contract participants in a blockchain is received by using a blockchain registration authority. Whether the contract participants are legal users of the blockchain is determined. In response to determining that the contract participants are the legal user of the blockchain, temporary keys are generated for a target contract of the contract participants, where the temporary keys comprise a temporary public key and a temporary private key that are paired with each other and are generated based on an asymmetric encryption algorithm. Blockchain data of the target contract is generated in a blockchain based on the temporary keys.