Distributed Secret Share Generation Without a Trusted External Computer
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing distributed cryptographic systems are vulnerable to security breaches due to the reliance on a single 'trusted external computer' for secret share generation, which can be exploited by cybercriminals to steal or misuse secret values or shares.
Innovation Solution
Cryptographic devices are partitioned into groups, with one device in each group generating and distributing secret shares, accompanied by commitments and signatures, and confirmed by a threshold number of devices, ensuring secure distribution without reliance on a trusted external computer.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If a single trusted external computer is used to generate and distribute secret shares, then the system is easier to operate and manage, but the security is compromised because the external computer becomes a single point of failure and potential attack target
Solution Approach 1:
The patent segments the secret share generation process into multiple independent cryptographic devices, eliminating the single trusted external computer. Each device generates and distributes secret shares independently, so that no single point of failure exists. This segmentation directly resolves the contradiction by distributing the operational function across multiple devices while simultaneously improving security through decentralization.
2Reliability
If multiple cryptographic devices are used to generate secret shares, then the security is improved by eliminating the single point of failure, but the system complexity increases due to coordination and verification requirements
Solution Approach 1:
The patent merges the secret share generation and distribution functions into a standardized protocol that all cryptographic devices follow uniformly. By combining the generation, distribution, and verification steps into a unified multi-device process with consistent procedures, the patent reduces the perceived complexity while maintaining the security benefits of multiple devices.
Solution Approach 2:
The patent implements feedback mechanisms where cryptographic devices verify secret shares through cryptographic proofs and commitments. Each device provides feedback to others about the validity of received secret shares, creating a self-verifying system that automatically detects and rejects malicious or erroneous shares without requiring complex manual coordination.
3Productivity
If secret shares are generated by a trusted external computer, then the distribution process is simpler and faster, but the system becomes vulnerable to theft and misuse of secret values
Solution Approach 1:
The patent enables cryptographic devices to perform self-service by generating and verifying their own secret shares through cryptographic proofs. Each device independently validates the authenticity of secret shares received from others using built-in verification mechanisms, eliminating the need for an external trusted computer while maintaining distribution efficiency through automated peer-to-peer verification.
Solution Approach 2:
The patent applies preliminary anti-action by having cryptographic devices pre-verify secret shares through cryptographic commitments and proofs before accepting them. This preventive verification mechanism stops potential attacks in advance by ensuring the authenticity and integrity of secret shares before they are used, thereby countering the vulnerability to theft and misuse without slowing down the distribution process.
Data Source
AI summary
Methods and systems for securely generating secret shares in a distributed manner and distributing those secret shares to cryptographic devices are disclosed. The cryptographic devices can use these secret shares to perform threshold distributed cryptographic operations (e.g., encryption and decryption). The cryptographic devices can be partitioned into groups based on the total number of devices and a threshold number. One generating device from each group can generate a secret share corresponding to that group, then transmit the secret share to members of the group. The generating devices can also generate commitments and transmit those commitments to other cryptographic devices. A group of confirming devices can use the commitments to generate confirmation values that can be used to confirm that the secret share were generated and distributed correctly. Later, a threshold number of cryptographic devices, collectively possessing all the secret shares can perform cryptographic operations using those secret shares.