Cryptographic Key Generation via Hashed Security Question Sequences
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Cryptocurrency wallet users face the risk of losing access to their assets due to lost or compromised private keys, as they often fail to securely record and store recovery information, such as key phrases.
Innovation Solution
A system that generates a cryptographic authentication key using a defined sequence of security questions, where each question is associated with a difficulty value, and answers are hashed to determine the next question, creating a pseudo-randomized sequence that does not require recording or storing personal information, thus allowing secure access to cryptocurrency wallets from any location or device.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If users are required to record and store key phrases manually, then wallet recovery is possible, but users often fail to do so securely leading to loss of access
Solution Approach 1:
The system performs automatic key phrase generation and storage without requiring user intervention. The computing device generates the key phrase, stores it securely in encrypted form, and links it to the wallet automatically, eliminating the need for users to manually record and manage recovery information.
Solution Approach 2:
The computing device acts as an intermediary between the user and the key phrase. Instead of the user directly handling the key phrase, the system generates, stores, and manages it securely, providing recovery access through authenticated requests rather than direct user access to the key phrase.
2Ease of operation
If private keys are stored locally on user devices, then wallet functionality is enabled, but keys can be lost or copied without consent
Solution Approach 1:
The key phrase is nested within multiple layers of security: stored in encrypted form in the computing device's secure storage, protected by authentication credentials, and associated with the wallet through cryptographic links. This nested structure provides multiple barriers against unauthorized access.
Solution Approach 2:
The key phrase is stored in a secure, isolated environment within the computing device's encrypted storage system, separate from the user's general file system and applications. This creates an inert, protected atmosphere that prevents unauthorized access while maintaining wallet functionality.
3Reliability
If key phrases are automatically generated, then recovery capability is provided, but users must securely record and store them which they often fail to do
Solution Approach 1:
The system automatically generates the key phrase and stores it securely without requiring user action. The computing device performs the entire key phrase management process autonomously, eliminating the information loss risk associated with manual user handling.
Solution Approach 2:
Instead of requiring users to create and manage physical or digital copies of the key phrase, the system creates a secure cryptographic copy stored in encrypted form within the computing device, accessible only through authenticated recovery processes.
Applied Scientific Principles
This section explains which scientific principles are used to turn an abstract innovation direction into a practical engineering solution.
Function Achieved in This Case
This method ensures users can access their cryptocurrency assets securely without needing to record or store recovery information, making it more resistant to dictionary attacks and providing a secure, user-friendly way to recover private keys, even when switching devices.
Implementation Method 1
applying a hash function to the received answer to generate a hash string corresponding to the received answer
Data Source
AI summary
Methods and apparatuses are described for generating a cryptographic authentication key. A computing device receives a request to generate a cryptographic key. The device generates a defined sequence of security questions, each question associated with a difficulty value. The device generates the key using the defined sequence of questions, comprising: a) presenting a first question and receiving an answer to the first question, b) generating a hash string corresponding to the received answer, c) determining a next question based upon the hash string, d) presenting the next question and receiving an answer to the next question, e) concatenating the answer to the next question with the hash string, f) applying a hash function to the hash string with the concatenated answer to update the hash string, g) repeating steps c-f until the difficulty values of the questions reaches a threshold, and h) generating the key from the updated hash string.