Distributed Electronic Wallet Security via Multi-Lock Encryption
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing IoT devices face challenges in securely and reliably implementing electronic wallets, particularly due to constraints on memory and processing power, which can lead to security issues such as balance loss to hackers.
Innovation Solution
The implementation of a crypto multi-lock process using multiple encryption techniques and multi-signature methods, combined with enhanced privacy ID (EPID) for distributed wallet keys and fractional transactions, enhances the security and reliability of electronic wallets on constrained IoT devices.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Adaptability or versatility
If crypto-currency is implemented in IoT devices with constraints on memory and processing power, then transaction capability is enabled, but security issues arise leading to balance loss to hackers
Solution Approach 1:
The private key is divided into multiple shares using secret sharing schemes, distributing cryptographic security across multiple IoT devices rather than concentrating it in a single device. This segmentation enables transaction capability while enhancing security through distributed key management, preventing single-point compromise that led to balance loss.
Solution Approach 2:
The patent implements nested encryption layers where multiple encryption techniques are applied hierarchically to protect the private key shares. Each layer provides additional security protection, creating a nested structure that must be systematically decrypted, thereby maintaining security reliability while enabling secure transactions in constrained IoT environments.
2Reliability
If multiple encryption techniques and multi-signature methods are implemented, then security is enhanced, but device complexity increases
Solution Approach 1:
The complex security protocol is segmented into distinct functional modules: key generation, key sharing, encryption layers, and multi-signature verification. Each module operates independently with well-defined interfaces, reducing overall system complexity while maintaining enhanced security through coordinated operation of these segmented components.
Solution Approach 2:
The patent introduces intermediary components such as key management servers and coordination protocols that mediate between the complex encryption techniques and the constrained IoT devices. These intermediaries handle computationally intensive operations centrally, allowing individual devices to participate in secure transactions without bearing the full complexity burden.
3Reliability
If distributed wallet keys are used, then security against balance loss is improved, but memory and processing constraints are exacerbated
Solution Approach 1:
The patent extracts the computationally intensive and memory-intensive key management operations from the constrained IoT devices and relocates them to external key management infrastructure. Only essential cryptographic primitives remain on-device, while distributed key shares and encryption/decryption operations are performed externally, reducing memory requirements while maintaining protection against balance loss.
Solution Approach 2:
The patent replaces physical storage of complete private keys in device memory with cryptographic mathematical operations on distributed key shares. Instead of storing large key materials locally, the system uses mathematical relationships among share fragments that require minimal storage but provide equivalent security, effectively substituting mechanical storage with computational cryptography.
Data Source
AI summary
Methods and systems are provided for securing distributed shares of an electronic wallet. An example method includes provisioning a plurality of devices each hosting an e-wallet share with enhanced privacy identification (EPID) private keys for the e-wallet share. A signature is posted for the e-wallet share to a blockchain. A determination is made as to whether the e-wallet share is compromised, and, if so, posting a revocation list comprising the signature for the e-wallet share to a blockchain.


