Immutable Ledger Key Management for Secure Access
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current encryption technologies using single keys are vulnerable to unauthorized access and lack efficient management of data access permissions, making them insecure and difficult to audit, especially with the rise of global data access and quantum computer threats.
Innovation Solution
A system utilizing an immutable ledger to manage key-encryption-keys (KEKs) and data-encryption-keys (DEKs) through a key tree structure, enabling secure distribution, revocation, and anonymous access, while providing an audit trail and resilience against denial-of-service attacks.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Device complexity
If single key encryption is used, then encryption simplicity is maintained, but security against unauthorized access deteriorates
Solution Approach 1:
The patent divides the single encryption key into multiple key shares distributed among different users. No single user possesses the complete key, making unauthorized decryption impossible without sufficient key shares. This segmentation resolves the contradiction by maintaining operational simplicity while dramatically improving security through distributed key management.
Solution Approach 2:
The patent implements asymmetric access control where different users have different levels of key access based on their roles and permissions. The key management structure uses asymmetric cryptography to enable selective decryption capabilities, resolving the contradiction by providing both structured complexity for security and asymmetric permissioning for controlled access.
2Productivity
If symmetric key management is used, then computational efficiency is improved, but key distribution security deteriorates
Solution Approach 1:
The patent introduces a blockchain-based intermediary system that mediates symmetric key distribution. The blockchain acts as a trusted third party that securely manages key sharing without requiring direct peer-to-peer secure channels. This resolves the contradiction by maintaining the computational efficiency of symmetric encryption while improving key distribution security through the decentralized, immutable blockchain infrastructure.
3Device complexity
If traditional encryption systems are used, then implementation simplicity is maintained, but audit trail capability deteriorates
Solution Approach 1:
The patent implements a feedback mechanism where all key access, decryption events, and data modifications are recorded on the blockchain. This creates an immutable audit trail that provides real-time feedback on system access and usage. The feedback resolves the contradiction by adding minimal structural complexity while dramatically improving audit capability through transparent, tamper-proof logging of all cryptographic operations.
4Ease of operation
If centralized key management is used, then operational control is improved, but vulnerability to denial-of-service attacks deteriorates
Solution Approach 1:
The patent segments centralized key management into distributed key shares stored across multiple blockchain nodes. No single point of control or failure exists, as key recovery and management operations require collaboration among multiple distributed participants. This segmentation resolves the contradiction by reducing operational simplicity while dramatically improving resilience to denial-of-service attacks through decentralization.
Data Source
AI summary
The system can be for the management of access authorization using an immutable ledger comprising and can include a server having a computer readable medium in communications with an immutable ledger. A set of computer readable instructions can be included in the server and can be configured for: receiving a set of data, encrypting the set of data with a data-encryption-key and storing the encrypted data on the immutable ledger, creating a key tree having a node associated with a user, creating a key-encryption-key associated with the node and the user, and, distributing the key-encryption-key to the user wherein the key-encryption-key is configured to decrypt the data-encryption-key thereby providing access to the data for the user.