Distributed Ledger Key Management via Per-User Public Key Encryption
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current blockchain systems lack flexibility in concealing transaction data and managing encryption keys, leading to complex key management and potential security risks, especially in applications like cargo insurance where multiple organizations need controlled access.
Innovation Solution
A method where a common key is generated for data encryption and decryption, encrypted with each user's public key, and registered in the distributed ledger, allowing flexible concealment and decryption management without a centralized server, using blockchain's distributed authority for secure key exchange and storage.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If a centralized concealment server is introduced to manage encryption keys and control data disclosure, then ease of operation improves, but reliability deteriorates due to single point of failure and loss of decentralized authority
Solution Approach 1:
The patent introduces a mediator component within the distributed network that facilitates key management and disclosure control without centralizing authority. This mediator acts as an intermediary between data holders and data requesters, enabling automated enforcement of disclosure policies while maintaining the decentralized nature of the blockchain system.
Solution Approach 2:
The patent segments the key management functionality into distributed components across multiple nodes rather than consolidating it in a single centralized server. Each node maintains its own key management capabilities, and the system collectively provides key distribution and disclosure control through smart contracts and distributed consensus mechanisms.
2Adaptability or versatility
If flexible item-level encryption is implemented in smart contract blockchains, then adaptability improves, but device complexity worsens due to complex key management and disclosure control
Solution Approach 1:
The patent creates a universal key management framework that handles multiple encryption scenarios through a single standardized interface. The system provides multi-functional capabilities including item-level encryption, selective disclosure, key distribution, and access control all through unified smart contract mechanisms that work across different data types and application scenarios.
Solution Approach 2:
The patent utilizes parameter changes in the form of configurable smart contract parameters that allow flexible specification of encryption items and disclosure policies without changing the underlying system architecture. By parameterizing the key management behavior, the system achieves adaptability while keeping the core mechanism relatively simple and reusable.
3Adaptability or versatility
If encryption items and disclosure ranges are managed in smart contract blockchains, then adaptability improves, but ease of operation worsens due to complex key exchange procedures and user burden
Solution Approach 1:
The patent implements self-service mechanisms where the system automatically performs key exchange, key distribution, and disclosure control operations without requiring manual user intervention. Smart contracts automatically manage the complex key exchange procedures, and the system self-regulates disclosure based on predefined policies, significantly reducing the operational burden on users.
Solution Approach 2:
The patent employs preliminary action by pre-configuring key management policies and disclosure rules in smart contracts before actual data exchange occurs. The system prepares key distribution mechanisms and access control policies in advance, so that when data needs to be encrypted or disclosed, the complex procedures have already been set up and can execute automatically without user complexity.
Data Source
AI summary
An objective is to manage contract data registered in a distributed ledger with part of the contract data flexibly concealed without a centralized concealment server and without bothering the user with complicated procedures or the key management. A data registration method performed by a computer includes: generating a common key for encrypting and decrypting an item included in data that is registered in a distributed ledger; acquiring a public key for each account of a user having access authority to the item; encrypting the common key with the public key for each account; and registering the common key encrypted for each account in the distributed ledger via a transaction.