Data Holding with Dynamic Secret-Share Updates Against Collusion
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing secret distribution technologies for crypto-assets are vulnerable to collusion among administrators or parties holding shares, leading to potential leakage of secret keys, despite measures to enhance security.
Innovation Solution
A data holding system that employs (m, n) secret distribution, where shares are updated cooperatively based on random numbers, and access is locked in (n−(m−1) servers when (m−1) servers are accessed, inhibiting the restoration of original data.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If secret distribution technology is used to divide and distribute secret key shares among multiple servers, then security against single-point breach is improved, but vulnerability to collusion among administrators holding shares remains
Solution Approach 1:
The patent implements dynamic share updating by periodically regenerating secret shares using random values. Each update creates new share versions that invalidate previous shares, preventing colluded administrators from using accumulated shares to restore the secret key. This dynamic regeneration transforms static vulnerable shares into dynamic protected credentials.
Solution Approach 2:
The system performs periodic share updates at predetermined intervals or based on update counts. This periodic regeneration of shares ensures that even if collusion occurs, the window of opportunity is limited and previous share versions become useless, thereby mitigating the harmful effect of collusion over time.
2Reliability
If secret shares are periodically updated to prevent collusion, then security against collusion is improved, but access complexity and operational overhead increase
Solution Approach 1:
The patent implements feedback mechanisms where each server monitors access requests and share usage. When a threshold of access attempts or share requests is reached, the system automatically triggers share regeneration. This feedback-driven approach balances security enhancement with operational simplicity by updating shares only when necessary.
Solution Approach 2:
The system enables automated share management where servers can autonomously participate in share regeneration processes without requiring complex manual coordination. The predetermined update rules and automatic triggering mechanisms allow the system to self-manage the complexity of periodic updates, reducing operational overhead.
3Reliability
If access to shares is restricted through locking mechanisms, then security against unauthorized restoration is improved, but legitimate access efficiency decreases
Solution Approach 1:
The patent implements preliminary locking mechanisms that proactively prevent access when suspicious patterns are detected. By locking shares before unauthorized restoration can occur and using predetermined access thresholds, the system stops potential breaches in advance while allowing legitimate access within normal parameters to proceed without interruption.
Data Source
AI summary
A data holding system holds n pieces of shares to be utilized for (m, n) secret distribution based multi-party computation (MPC) in n pieces of share holding servers in a distributed manner, and makes a new revision by updating each share based on a random number cooperatively in each of the share holding servers, to cancel an influence of the random number at a time of restoration of original data. In a case of an access state in which access to the share of the same revision occurs or is likely to occur in (m−1) pieces of the share holding servers, access to the held share is locked in other (n−(m−1)) pieces of the share holding servers.