Securing Hash-Based Storage With Secret Key Derivation
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Hash-based storage systems are vulnerable to malicious and unauthorized access due to susceptibility to collisions and the ability of attackers to exploit hash functions, leading to potential data corruption and unauthorized data retrieval.
Innovation Solution
A method involving the generation of keys that depend on a secret value associated with the storage system, using a hash algorithm to combine the information with the secret value, and implementing secure hash algorithms resistant to collisions, such as SHA-1 or HMAC, to ensure only authorized access and prevent data substitution or unauthorized retrieval.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Productivity
If hash-based storage systems use public hash algorithms for data access, then data retrieval efficiency is improved, but security vulnerability increases due to collision attacks and unauthorized access
Solution Approach 1:
The patent introduces a secret key as an intermediary element between the data and the hash function. The key generation process combines the data with a secret key through a key derivation function before hashing, creating a secure access mechanism that prevents unauthorized retrieval while maintaining efficient data access for authenticated users.
Solution Approach 2:
The patent changes the parameter space of the hash function by introducing a secret key as an additional input parameter. This transforms the public hash function into a keyed hash function where the output depends on both the data and the secret key, making it computationally infeasible for attackers to generate valid access keys without knowing the secret.
2Reliability
If hash algorithms are made more secure against collisions, then data integrity is improved, but computational complexity increases
Solution Approach 1:
The patent segments the security function into two independent parts: a key derivation function that generates access keys from the secret key and data, and a hash function that computes the actual data hash. This segmentation allows the use of efficient hash algorithms while maintaining security through the separate key derivation mechanism, avoiding the need for overly complex hash functions.
Data Source
AI summary
Various methods and systems for securing access to hash-based storage systems are disclosed. One method involves receiving information to be stored in a storage system from a storage system client and then generating a key. The key identifies the information to be stored. The value of the key is dependent upon a secret value, which is associated with the storage system. The key is generated, at least in part, by applying a hash algorithm to the information to be stored. The key can then be returned the key to the storage system client. The storage system client can then use the key to retrieve the stored information.