Hashed Data Retrieval via Inverse Hash Function
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing methods for retrieving lost data, such as passwords, are insecure due to reliance on unsecured communication channels and storage of sensitive information, which can be intercepted or hacked, compromising confidentiality for both clients and servers.
Innovation Solution
A method involving a cryptographic hash function, specifically SHA-3, where a hashed word and a security key are concatenated to retrieve the original data using an inverse hash function, ensuring neither the client nor server stores sensitive information, thus preventing data theft and maintaining security.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Adaptability or versatility
If sensitive information (passwords, personal data) is stored on servers for retrieval, then data recovery capability is improved, but security is worsened due to risks of interception and hacking
Solution Approach 1:
The original data is segmented into two separate components: a hashed version stored on the server and a security key kept by the client. This segmentation ensures that neither component alone can reveal the original data, thereby resolving the contradiction between enabling data recovery and maintaining security.
Solution Approach 2:
A cryptographic hash function serves as an intermediary mechanism that transforms the original data into a hashed form for storage while preserving the ability to reconstruct the original data through concatenation with the security key and application of an inverse hash function.
2Reliability
If hashed data is stored on the server for later retrieval, then data integrity checking is improved, but data retrieval capability is worsened because the original data cannot be recovered from the hash alone
Solution Approach 1:
The security key is generated and stored on the client device in advance, before any data loss occurs. This preliminary action ensures that when data needs to be recovered, the necessary component (security key) is already available on the client side to combine with the server-stored hashed data.
Solution Approach 2:
The solution moves from a single-dimension approach (storing only hashed data on server) to a two-dimension approach by introducing the security key as a separate component stored on the client, enabling data retrieval while maintaining integrity checking capabilities.
3Ease of operation
If traditional authentication methods are used where servers store password information, then authentication functionality is improved, but confidentiality is worsened due to potential data breaches
Solution Approach 1:
The sensitive security key is extracted from the server environment and placed on the client device. This extraction removes the critical secret from the vulnerable server storage, thereby maintaining authentication functionality while improving confidentiality by eliminating the risk of server-side data breaches.
Data Source
AI summary
Method for retrieving data entered during a server connection, the server having access to a memory including a generated hashed word of a first input data, which corresponds to the data modified by a processing function, the capacity of the hashed word being lower than a predefined capacity, a generated security key of a second input data, which corresponds to the data modified by a processing function, the capacity of the security key being equal to the difference between the predefined capacity and the hashed word capacity, the security key not being stored, method wherein: —after a request to retrieve the data, the hashed word and the security key are concatenated in order to reach the predefined capacity, and —an inverse hash function, using an algebraic solving of the hash function, is applied to the concatenation of the hashed word and security key, to retrieve the data.