Cryptographic Commitment Authorization Transfer

Resolve Bottlenecks,
Find Innovative SolutionsGenerate Solutions

Solution Overview

Problem

Users face challenges in recovering and validating user data when they lose access to their secret key, leading to issues with identity verification and authorization set associations.

Innovation Solution

A system comprising a processor and memory that identifies a first entry cryptographically linking identifiers and a user-specific secret, receives an authorization transfer request, and generates a new entry associating the second identifier with the first authorization set, using cryptographic commitments and proof of possession to verify user identity and transfer authorization.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If users store data securely using cryptography with secret keys, then data security is improved, but users cannot recover or transfer authorization when they lose the secret key

Engineering Contradiction:

Improvedata securityVSAvoiddata recovery

Core Design Contradiction:

ReliabilityVSEase of operation

Solution Approach 1:

The secret key is segmented into multiple shares distributed across different identifiers. The cryptographic commitment is divided into portions that can be retrieved through different identifiers, allowing recovery without requiring the original complete secret key.

Inventive Principle:

Principle #1Segmentation

Solution Approach 2:

A cryptographic commitment acts as an intermediary between the secret key and the identifiers. This commitment can be verified and transferred through multiple identifiers without exposing the original secret key, enabling secure authorization transfer.

Inventive Principle:

Principle #24Intermediary (Mediator)

2Reliability

If cryptographic commitments are used to link identifiers with authorization sets, then authorization security is improved, but the system complexity increases

Engineering Contradiction:

Improveauthorization securityVSAvoidsystem complexity

Core Design Contradiction:

ReliabilityVSDevice complexity

Solution Approach 1:

Cryptographic commitments are established in advance linking identifiers to authorization sets. This preliminary cryptographic binding simplifies subsequent authorization verification and transfer operations by pre-computing the security relationships.

Inventive Principle:

Principle #10Preliminary action

Solution Approach 2:

The authorization relationship is copied through cryptographic commitments rather than directly replicating secret keys. Multiple identifiers can reference the same authorization set through cryptographic proofs without duplicating sensitive key material.

Inventive Principle:

Principle #26Copying

Data Source

PatentUS11856095B2Apparatus and methods for validating user data by using cryptography

Publication Date: 2023.12.26 JOB COM LLC

AI summary

An apparatus for validating user data includes a resource data storage system that stores data identifiers, data entries, and authorization sets. Resource data storage system may use an immutable sequential listing to store data. Resource data system may be used to evaluate and fulfill an authorization transfer request, in which, a user may request to transfer an authorization set with a lost identifier to a known identifier. User may be requested to commit to a user secret to validate user identity.