Digital Token Security via Secure Enclave Key Extraction
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Digital token stores are vulnerable to cyber threats, allowing unauthorized access to sensitive information, as existing encryption methods do not adequately protect against compromise of encryption keys and malware attacks during data transmission.
Innovation Solution
A method involving encrypting digital tokens using a unique identification code specific to a computing device, transmitting this code, and expunging both the encrypted token and code from memory, with the encrypted token stored remotely and the code secured within the device's secure enclave.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If digital tokens are stored in a digital token store for easy access and management, then ease of operation is improved, but security is worsened as the store becomes vulnerable to cyber threats and key compromise
Solution Approach 1:
The patent extracts the encryption key from the centralized token store and relocates it to the individual computing device's secure enclave. This extraction eliminates the vulnerability of storing keys centrally while maintaining the ability to access encrypted tokens, as the key is now embedded in the device's secure hardware rather than stored externally.
Solution Approach 2:
The secure enclave acts as an intermediary between the token store and the decryption process. It securely stores the encryption key and facilitates decryption only when authorized, preventing direct access to both the key and tokens. This intermediary layer protects against malware and unauthorized access while enabling legitimate operations.
2Ease of operation
If encryption keys are stored centrally for efficient token decryption, then ease of operation is improved, but security is worsened as the key store becomes equally vulnerable to compromise
Solution Approach 1:
The encryption key is extracted from the centralized key store and embedded directly into the computing device's secure enclave. This extraction eliminates the centralized key store vulnerability while maintaining decryption capability, as the key is now physically embedded in the device's secure hardware rather than stored externally.
Solution Approach 2:
The computing device performs self-verification using the embedded key in its secure enclave, eliminating the need for centralized key management. The device autonomously handles encryption and decryption operations using its own embedded key, reducing dependency on centralized security infrastructure.
3Speed
If tokens and keys are stored in memory for rapid access, then speed is improved, but security is worsened as malware can acquire data from memory components
Solution Approach 1:
The encryption key is preliminarily embedded in the secure enclave during device manufacturing or initial setup, rather than being loaded into memory at runtime. This preliminary placement ensures the key is already secured in hardware before any token operations occur, preventing malware from acquiring it during memory operations.
Solution Approach 2:
The patent replaces the software-based memory storage mechanism with a hardware-based secure enclave. Instead of storing keys in volatile or non-volatile memory that malware can access, the key is stored in dedicated secure hardware with isolated memory spaces that are invisible to external software processes.
Data Source
Figure 1
Figure 2
Figure 3
AI summary
The present disclosure relates to computer-implemented methods, systems, and products for securing the use of digital tokens in network environments using techniques for encrypting the digital token, transmitting an identification code to a computing device, and expunging the digital token and the identification code to mitigate the risk that a digital token store will be compromised.