Distributed Credential Store Protection via Multi-Key Segmentation
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Conventional techniques fail to provide adequate protection for password vaults and other credential stores, especially when held by a service provider, as they remain susceptible to attacks, with users often using weak master passwords and service providers risking en bloc compromise.
Innovation Solution
A distributed protection system is implemented using multiple keys derived from a master key, where a user device generates first and second keys, encrypts the credential store with the second key, and stores it across a plurality of servers in a distributed verification system, ensuring secure access and storage.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If a single master key is used to protect the credential store, then ease of operation is improved, but security is worsened because compromise of the master password gives immediate access to multiple valid passwords
Solution Approach 1:
The master key is segmented into multiple component keys (first key for verification, second key for encryption, third key for decryption). These keys are distributed such that no single key holder can access the credential store alone. The verification system holds the first key while the user device holds the second and third keys, creating a segmented security architecture that prevents single-point compromise.
2Ease of operation
If password vaults are stored by a service provider, then ease of operation is improved, but security is worsened due to risk of en bloc compromise and cracking of vaults
Solution Approach 1:
The credential store is segmented into encrypted portions distributed across multiple servers. Each server holds only a fragment (encrypted credential store portion) that is useless alone. The verification system segments the master key into multiple component keys distributed between the user device and verification system, preventing en bloc compromise.
Solution Approach 2:
The verification system acts as an intermediary that facilitates credential verification without possessing the decryption capability. It holds the first key for verification but lacks the second and third keys needed for decryption. This intermediary architecture allows the service provider to assist users while preventing centralized compromise of all credentials.
3Reliability
If multiple keys are used for distributed protection, then security is improved, but device complexity is worsened
Solution Approach 1:
The complex key management and encryption operations are extracted from the user device and placed in the verification system. The user device only needs to generate keys and perform local encryption, while the verification system handles key distribution, storage segmentation, and verification logic. This extraction reduces device complexity while maintaining security.
Data Source
AI summary
A user device is configured for communication with a distributed verification system over a network. The user device generates first and second keys from a master key for a password vault or other credential store, provides the first key to the distributed verification system, encrypts the credential store based at least in part on the second key, and provides the encrypted credential store to the distributed verification system. The credential store is encrypted utilizing the second key and information that is stored in a distributed manner over a plurality of servers of the distributed verification system. For example, encrypting the credential store illustratively comprises generating a ciphertext by encrypting the credential store utilizing the second key, obtaining a third key stored in the distributed manner over the servers, and encrypting the ciphertext utilizing the third key to generate the encrypted credential store that is provided to the distributed verification system.