Collaborative Session Decryption Using Split Private Keys
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
The security and reliability of session service data are compromised due to the single-point storage of private keys, making them vulnerable to unauthorized leakage during decryption.
Innovation Solution
Implement a collaborative decryption method where private key components are stored on different service terminals, generating a collaborative public key for encryption and performing mask processing to ensure secure decryption through collaboration between terminals.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If a complete private key is stored in single-point mode for decryption, then decryption simplicity is improved, but security against unauthorized leakage deteriorates
Solution Approach 1:
The patent segments the complete private key into multiple private key components, each stored on different service terminals. This segmentation allows decryption to be distributed across multiple terminals rather than relying on a single stored key, thereby improving security while maintaining operational capability through collaborative decryption processes.
2Reliability
If private key components are distributed on different service terminals, then security against unauthorized leakage is improved, but decryption complexity increases
Solution Approach 1:
The patent introduces an intermediary collaborative decryption mechanism where service terminals work together to reconstruct the decryption capability. Each terminal contributes its private key component, and through coordinated computation involving encrypted data components and random masks, the original plaintext is recovered without any single terminal possessing the complete decryption key, thus managing complexity through structured collaboration.
3Ease of manufacture
If a complete private key is stored centrally, then key management simplicity is improved, but vulnerability to key leakage increases
Solution Approach 1:
The patent applies segmentation by dividing the centralized private key storage into distributed private key components across multiple service terminals. This eliminates the single point of failure while maintaining key management through structured processes where each terminal manages its own component securely, and collaborative decryption restores the ability to access encrypted data without centralizing the complete key.
Data Source
Figure 1
Figure 2
Figure 3~4a
AI summary
This application provides a data processing method and apparatus, a device, and a medium. The method includes: when receiving encrypted session data, obtaining, by a first service terminal, a first encrypted data component from the encrypted session data, and generating a random mask configured to perform mask processing; performing mask processing on the first encrypted data component by using the random mask to obtain mask data corresponding to the first encrypted data component, and obtaining, based on a first private key component and the mask data, a first decrypted data component to be transmitted to a second service terminal, the second service terminal being configured to perform collaborative decryption on the first decrypted data component based on a second private key component to obtain a second decrypted data component to be returned to the first service terminal; and obtaining session service data by using the second decrypted data component and the first encrypted data component. In this application, private key leakage caused by single-point storage of the private key can be avoided, and reliability and security of session service data obtained through decryption can also be improved.