Dynamic Key Management via Multi-Party Computation
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current key management systems for cryptographic transactions on blockchain networks lack flexibility in key creation and utilization, often compromising between security and usability, and do not support dynamic key distribution mechanisms, which is crucial for institutional trading clients managing significant funds.
Innovation Solution
A dynamic key management system that uses multi-party computation (MPC) to generate and manage key shares based on user-selected properties, such as geographic location and operation type, ensuring that no single party controls the private key, and enforces access structures through a central coordinator to facilitate secure and adaptable key usage.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If a single party holds or has access to a private key to support cryptographic or blockchain operations, then usability is improved, but security deteriorates
Solution Approach 1:
The private key is segmented into multiple key shares distributed among different parties or devices. Each party holds only a portion of the key material, making it impossible for any single party to compromise the entire key. The key shares can be reconstructed through a secure multi-party computation process when needed for cryptographic operations.
Solution Approach 2:
A secure multi-party computation protocol acts as an intermediary mechanism that enables cryptographic operations without requiring any single party to possess the complete private key. The protocol coordinates between multiple parties, each contributing their key share, to perform signing or other cryptographic functions while maintaining security through the distributed key structure.
2Adaptability or versatility
If traditional key management systems are used, then device complexity is reduced, but adaptability deteriorates
Solution Approach 1:
The key management system transitions from a static structure where a single key is managed to a dynamic structure where multiple key shares can be independently created, distributed, and managed. The system adaptively selects and combines key shares based on operational requirements, enabling flexible key creation and utilization while maintaining security through the distributed architecture.
Data Source
AI summary
Methods, systems, and devices for data management are described. A custodial token platform may communicate with a client to support a multi-party computation (MPC) signature for a message. A central coordinator may receive, from the client, a request to sign a message using respective key shares generated by MPC nodes. The key shares may be generated in accordance with an access structure, where the access structure is configured based on a respective set of parameters for the MPC nodes. The central coordinator may transmit a request to execute a MPC signature using a respective key share. The central coordinator may maintain data associated with execution of the MPC signature function by a subset of the MPC nodes using the respective key shares. Additionally, the central coordinator may transmit, to the client, a result of execution of the MPC signature function by the subset of the MPC nodes.