Identity Cryptographic Chip Secure Key Storage
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current identity authentication technologies face challenges in securely managing cryptographic keys and verifying user identity information, especially in decentralized systems like blockchain and IoT networks, where secure storage and efficient use of cryptographic keys are crucial.
Innovation Solution
The implementation of an identity cryptographic chip (ICC) that receives and stores user cryptographic keys and identity information, digitally signed with a master user's private key, and verifies authenticity using a pre-stored public key, ensuring secure storage and use of these keys for authorized users.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If cryptographic keys are stored in decentralized systems like blockchain or IoT networks, then users can safely self-store their own identity information, but the keys become vulnerable to copying and sharing, compromising security
Solution Approach 1:
The patent introduces an identity cryptographic chip (ICC) as an intermediary hardware device that mediates between the user and the cryptographic keys. The ICC securely stores the private key in a protected environment, preventing copying and unauthorized access while still allowing the user to control their digital assets through the public key interface.
Solution Approach 2:
The patent replaces the software-based key storage mechanism with a hardware-based cryptographic chip. This substitution moves from a vulnerable software environment where keys can be copied to a secure hardware environment with physical protection and cryptographic safeguards against extraction.
2Reliability
If cryptographic keys are stored in hardware devices, then security is improved, but the device complexity increases
Solution Approach 1:
The identity cryptographic chip is designed as a universal device that can serve multiple functions: storing identity information, managing cryptographic key pairs, verifying digital signatures, and controlling digital assets. This multi-functionality consolidates what would otherwise require multiple separate systems into a single integrated chip.
Solution Approach 2:
The patent embeds the cryptographic functionality within a compact chip structure that can be integrated into various devices. The ICC contains nested functional modules including secure storage elements, cryptographic processing units, and interface circuits, all organized in a hierarchical manner that optimizes space and performance.
3Measurement precision
If digital signatures are used to verify identity information, then authentication accuracy is improved, but the verification process time increases
Solution Approach 1:
The patent performs preliminary actions by pre-generating and storing cryptographic key pairs and digital signatures during the identity registration phase. When verification is needed, the pre-computed signatures can be quickly validated without requiring complex real-time computations, thus reducing verification time while maintaining high accuracy.
Data Source
AI summary
Disclosed herein are methods, systems, and apparatus, including computer programs encoded on computer storage media, for managing cryptographic keys based on user identity information. One of the methods includes receiving a request to store identity information and a user key pair to a memory on a chip, the request being digitally signed with a digital signature, the identity information uniquely identifying the user, and the user key pair being assigned to the user; determining that the digital signature is authentic based on a public key pre-stored in the memory; encrypting the identity information and the user key pair; and storing the identity information and the user key pair to the memory.