Client-Side Cryptographic Key Splitting and Wrapping
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
There is a need for a secure method to protect electronic data from unauthorized access by securely passing encryption keys across computing systems, as existing technologies lack effective mechanisms to restrict access to sensitive data.
Innovation Solution
A system that generates an encryption key and splits the wrapping key into multiple parts, storing some parts in a cryptographic database and transmitting others to the client computing system, allowing reconstruction of the wrapping key for secure encryption key retrieval and access.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If the wrapping key is transmitted in full to the client computing system, then the client can easily reconstruct and access the encryption key, but the security of the encryption key is compromised during transmission
Solution Approach 1:
The wrapping key is divided into multiple wrapping key parts (first, second, and third parts) that are distributed between the server computing system and the client computing system. The client receives only the first wrapping key part initially, and additional parts are provided later, preventing unauthorized access while enabling reconstruction when needed.
2Object-affected harmful factors
If the wrapping key is split into multiple parts and stored distributedly, then the security of the encryption key is improved, but the complexity of key retrieval increases
Solution Approach 1:
The wrapping key is pre-split into multiple parts and distributed before any encryption key retrieval operation. The first wrapping key part is provided to the client in advance during initial setup, and additional parts are stored securely on the server, enabling secure reconstruction when needed without complex real-time processing.
3Adaptability or versatility
If all wrapping key parts are stored on the server computing system, then centralized control is maintained, but the client cannot independently reconstruct the wrapping key for secure key retrieval
Solution Approach 1:
The wrapping key parts are segmented and distributed such that the client holds the first wrapping key part locally, while the server retains the second and third parts. This distribution enables the client to independently reconstruct the wrapping key by combining the first part with additional parts provided by the server, reducing centralized security risks.
Data Source
AI summary
A system is provided for secure client-side cryptographic key retrieval using cryptographic key splitting and wrapping. In particular, the system may generate an encryption key that may be wrapped using a wrapping key. The wrapping key may in turn be split into a plurality of parts that may be stored in a distributed manner on a client computing system and a cryptographic database. Furthermore, the wrapping key may be generated using an encryption algorithm that allows the wrapping key to be reconstituted with fewer than all of the plurality of parts. In this way, the system provides a secure way to restrict access to sensitive data to authorized parties.