Distributed Private Key Recovery Without Call Center Delays
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing systems do not adequately address the inconvenience and inefficiency in recovering a lost private key, requiring users to contact a call center, which wastes time and effort.
Innovation Solution
A private key recovery system that utilizes a first and second recovery key managed by different services to facilitate distributed recovery of the first private key, enhancing user convenience and security by requiring malicious parties to breach both services.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If a user contacts a call center to recover a lost private key, then the private key can be recovered, but the user spends excessive time and effort
Solution Approach 1:
The system enables users to recover their private keys automatically through a self-service mechanism. When a user loses their private key, the recovery system allows them to retrieve it by providing authentication credentials (such as email and password) without requiring manual intervention from support staff. The server automatically verifies the credentials, generates a new private key, and sends it to the user's registered email address, thereby eliminating the time-consuming call center process.
2Ease of operation
If private key recovery is centralized in one service, then recovery process is simple, but security risk increases
Solution Approach 1:
The system segments the private key recovery function across multiple independent services. Instead of relying on a single centralized service, the architecture distributes recovery capabilities across different servers and services. Each service maintains its own authentication and key generation processes, so that if one service is compromised, the others remain secure. This segmentation reduces the security risk associated with centralized key management while maintaining operational simplicity through standardized recovery protocols.
Data Source
AI summary
A private key recovery system, comprising at least one processor configured to: acquire a first recovery key managed by a first service in which a first private key stored in a user terminal of a user is used; acquire a second recovery key managed by a second service different from the first service; and to recover the first private key based on the first recovery key and the second recovery key.