Digital Signature Aggregation via Beacon and Validator Nodes
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current digital signing methods in network security, particularly in blockchain environments, are computationally intensive and inefficient due to the need for multiple rounds of data transmission and processing, leading to significant delays and resource utilization issues when signing messages, such as cryptocurrency transactions.
Innovation Solution
A system where a beacon device computes and transmits a signature-data value to multiple validator devices, allowing them to compute partial-open decrypted values, which are then aggregated by the requestor device to generate the digital signature in a single request and response session, using additive homomorphic secret sharing and threshold decryption processes to reduce the number of transmission and computation rounds.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If traditional digital signing methods are used with multiple rounds of data transmission, then security and verification can be achieved, but computational resources and network latency increase significantly
Solution Approach 1:
The patent segments the digital signing process by dividing the private key into multiple shares distributed across different validator devices. Each validator computes a partial signature using its key share and the message, then these partial signatures are aggregated to form the complete signature. This segmentation allows parallel processing across multiple devices, reducing computational time while maintaining security through distributed key management.
Solution Approach 2:
The patent merges the signature computation process by aggregating partial signatures from multiple validator devices into a single complete signature. Instead of requiring multiple sequential rounds of communication where each validator signs separately, the system combines their partial results in a single aggregated operation, significantly reducing network latency and computational overhead while achieving the same security verification.
2Measurement precision
If multiple rounds of data transmission are used for digital signing, then verification accuracy is improved, but network latency and processing time increase
Solution Approach 1:
The patent applies preliminary action by pre-distributing key shares to multiple validator devices before the actual signing operation. Each validator device is pre-configured with its portion of the private key, allowing it to immediately compute partial signatures when the message arrives. This eliminates the need for multiple sequential communication rounds to establish key distribution, reducing processing time while maintaining verification accuracy through the aggregated partial signatures.
3Reliability
If distributed validation across multiple devices is implemented, then security against single point of failure is improved, but system complexity increases
Solution Approach 1:
The patent introduces an intermediary aggregation mechanism that collects and combines partial signatures from multiple validator devices. This intermediary layer abstracts the complexity of coordinating multiple distributed validators, presenting a simplified interface where the requestor device only needs to send the message and receive the aggregated signature. The intermediary handles the complex coordination of key shares and partial signature computation, reducing the operational complexity at the user level while maintaining fault tolerance through distributed validation.
Data Source
AI summary
There is provided a requestor device for digital signing of a message, comprising: at least one hardware processor executing a code for: transmitting the message for signing thereof, in a single request session over the network to each one of a plurality of validator devices, wherein a beacon device computes and transmits over a network to each one of a plurality of validator devices a signature-data value computed and signed by the beacon device, receiving in a single response session from each one of the plurality of validator devices, a respective partial-open decrypted value computed for the signature-data value and the message, and aggregating the partial-opens decrypted values received from the plurality of validator devices to compute the digital signature of the message.