Distributed Verification Key Generation for Secure Node Reconnection
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Distributed networks face challenges in generating and distributing verification keys for public-key signature schemes, particularly for nodes that are not up-to-date or reconnecting to the network, and in ensuring secure and efficient reconnection and synchronization of execution states.
Innovation Solution
A method involving subdividing nodes into subnetworks, where a governance subnetwork generates and signs verification keys for other subnetworks, allowing secure and efficient distribution of verification keys and state information packages, enabling nodes to reconnect and synchronize with the network.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If verification keys are generated and distributed in traditional distributed networks, then nodes can participate in consensus, but nodes that are not up-to-date cannot efficiently reconnect or synchronize with the network
Solution Approach 1:
The system performs preliminary actions by generating verification keys in advance through distributed key generation protocols before nodes need to reconnect. The governance subnetwork pre-generates and signs verification keys for potential future use, allowing nodes to efficiently synchronize without requiring full state reconstruction when reconnecting.
Solution Approach 2:
A governance subnetwork is introduced as an intermediary entity that manages verification key generation and distribution. This intermediary coordinates key generation between subnetworks, signs verification keys, and maintains a registry, enabling seamless reconnection for nodes while preserving network security and consistency.
2Device complexity
If subnetworks are introduced to manage verification keys, then key distribution becomes more organized, but the system structure becomes more complex
Solution Approach 1:
The network is segmented into multiple subnetworks, each capable of independent verification key generation through distributed key generation protocols. This segmentation allows organized key management within each subnetwork while enabling flexible reconnection scenarios across the broader network through the governance subnetwork's coordination.
Solution Approach 2:
The governance subnetwork performs multiple functions: it generates verification keys for other subnetworks, signs these keys, maintains a registry of verification keys, and facilitates node reconnection. This multi-functional design consolidates complexity into a single coordinating entity while providing versatile support for various node operations.
3Reliability
If a governance subnetwork signs verification keys for other subnetworks, then security is enhanced, but the key generation and distribution process becomes more time-consuming
Solution Approach 1:
Verification keys are generated in advance through distributed key generation protocols before they are needed for node operations. The governance subnetwork pre-signs these keys and stores them in a registry, eliminating the need for time-consuming key generation and signing operations when nodes need to reconnect or perform operations.
Solution Approach 2:
Instead of generating and signing new verification keys each time a node needs them, the system creates copies of pre-generated and pre-signed verification keys from the registry. This copying approach maintains security through the original signing process while dramatically speeding up key distribution to nodes.
Data Source
AI summary
Embodiments of the invention relate to a computer-implemented method for generating verification keys of a public-key signature scheme in a distributed network. The method comprises performing, by a subset of the nodes of a first subnetwork of nodes, a first distributed key generation protocol, the first distributed key generation protocol being configured to generate jointly a verification key for the first subnetwork and a plurality of corresponding secret key shares for the nodes of the first subnetwork. The method further comprises a step of performing, for a second subnetwork, by a subset of the plurality of nodes of the first subnetwork, a second distributed key generation protocol, the second distributed key generation protocol being configured to generate jointly a verification key of the second subnetwork and a plurality of corresponding secret key shares for the nodes of the second subnetwork. A further step comprises signing, by a subset of the nodes of the first subnetwork, the verification key of the second subnetwork with a permissible subset of the secret key shares of the nodes of the first subnetwork, thereby generating a joint signature on the verification key of the second subnetwork.Further aspects relate to a distributed network, a node of a distributed network and corresponding computer program products.