Distributed Ledger Identifier Changes Using Hash-Chain Verification
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing identifier change management in distributed ledger systems requires a trusted third party, which can lead to security vulnerabilities and loss of the decentralized authority feature, and increasing the number of secrets complicates management.
Innovation Solution
An identifier change management apparatus and method that utilizes a distributed ledger network with a hash chain management system, allowing identifier changes without a trusted third party by using a seed value and hash values to verify transactions and update public keys.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If a trusted third party is introduced to manage identifier changes, then security against key leakage is improved, but the decentralized authority feature of distributed ledger is lost
Solution Approach 1:
The patent introduces a trusted third party that holds a share of the secret key and participates in identifier change transactions. This intermediary entity provides security guarantees while the system maintains its distributed ledger structure, resolving the contradiction between security and decentralization by adding a mediating component rather than choosing one over the other
2Reliability
If the number of secrets is increased to enhance security, then security is improved, but management complexity increases
Solution Approach 1:
The patent divides the secret key into multiple shares using secret sharing schemes, distributing them among the user terminal and trusted third parties. This segmentation allows security to be enhanced through multiple secrets while managing complexity by organizing them in a structured sharing framework with defined reconstruction rules
Solution Approach 2:
The system pre-establishes secret sharing schemes and threshold rules before identifier changes occur. By preparing the secret distribution structure in advance, the system enhances security through multiple pre-configured secrets while reducing management complexity during actual operations, as the reconstruction process follows predetermined rules
Data Source
AI summary
An identifier change management apparatus according to an embodiment includes: a distributed ledger in which an identifier change program holding a public key and a first hash value; an identifier change key input unit that receives a secret key; a hash chain management unit that holds a seed value of a hash value used in the identifier change; a transaction issuing unit that issues an identifier change transaction including a signature value of an electronic signature that has been performed using the secret key and a second hash value generated using the seed value; and a program control management unit that changes the identifier, by the identifier change program, on condition that the signature value included in the identifier change transaction is verifiable by using the public key and a value obtained by applying a hash function to the second hash value becomes the first hash value.