Encrypted Member-Node Data Exchange With Token Authentication
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing secure multi-party computation (MPC) systems face challenges in ensuring data security and privacy during data interaction among member nodes, as the operation node does not broadcast member information, limiting interoperability and imposing restrictions on member nodes, and existing solutions fail to address data leakage, tampering, and malicious requests.
Innovation Solution
Implementing a data interaction method that encrypts data using public keys, signs it with private keys, and generates access tokens to authenticate and verify interactions, allowing member nodes to securely communicate while maintaining data integrity and preventing unauthorized access.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If the operation node does not broadcast member information to member nodes, then data security and privacy are protected, but member nodes cannot perform data interaction with each other and are restricted to communicate only with the operation node
Solution Approach 1:
The system segments member information into two parts: public information (node ID, public key) that can be shared for interoperability, and private information (private key, sensitive data) that remains protected. This segmentation allows member nodes to identify and communicate with each other while the operation node never exposes private information, resolving the contradiction between security and interoperability
Solution Approach 2:
The operation node acts as an intermediary that facilitates secure data interaction between member nodes without exposing private information. It provides the public key infrastructure and authentication mechanisms that enable direct peer-to-peer communication while maintaining security through cryptographic protocols, thus enabling interoperability without compromising data security
2Adaptability or versatility
If member nodes are allowed to interact directly with each other, then data interaction needs are met and interoperability is improved, but data leakage and tampering risks increase
Solution Approach 1:
The system applies preliminary anti-action through cryptographic measures: data is encrypted before transmission using recipient's public key, and digital signatures are attached to prevent tampering. These preventive measures are built into the communication protocol itself, so even if data is intercepted or modified during transmission, the encryption and signature verification prevent successful attacks, thus enabling direct interaction while preventing data leakage and tampering
Solution Approach 2:
The system changes the parameters of data transmission by transforming plaintext into ciphertext through encryption, and attaching cryptographic signatures. This parameter transformation ensures that even if data is exposed during transmission, it remains unintelligible without the private key and cannot be tampered with undetected, resolving the contradiction between interaction capability and security risks
3Reliability
If the operation node verifies and forwards all data interaction requests between member nodes, then data security is maintained, but interaction efficiency and response time are reduced
Solution Approach 1:
The operation node performs preliminary authentication actions during the initial setup phase, where it distributes public keys and establishes trust relationships between member nodes. This preliminary action creates a foundation of mutual trust that allows member nodes to verify each other's identities and encrypt communications directly without requiring the operation node's involvement in every subsequent interaction, thus maintaining security while improving efficiency
Solution Approach 2:
The system extracts the essential security verification functions from the operation node and implements them locally at member nodes through cryptographic protocols. Each member node independently verifies digital signatures and decrypts data using its own private key, removing the need for the operation node to mediate every verification step, thereby maintaining authentication security while significantly improving interaction efficiency
Data Source
AI summary
A data interaction method is applied to a first member node of a first alliance network including an operation node and a plurality of member nodes. The method includes: encrypting first interaction data based on a public key of the second member node to obtain first encrypted data; signing the first interaction data and/or the first encrypted data based on a private key of the first member node to obtain first signed data; generating a first access token for a first node based on the first encrypted data and a first initial access token for the first node; generating a first request message for data interaction based on the first encrypted data, the first signed data and the first access token; and sending the first request message to the first node.