Implicit Certificate Key Derivation for Secure Crypto Wallet Delegation
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing cryptocurrency wallet systems lack robust key derivation schemes that provide adequate privacy and security, particularly in blockchain transactions, as they are vulnerable to attacks where learning a single derived key may reveal the master key.
Innovation Solution
Implementing a key derivation scheme using implicit certificates based on elliptic curve cryptography (ECQV) to generate a plurality of key pairs from a root key pair, where only the root private key can derive the private keys, and additional information like policies can be encoded to restrict key usage.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If traditional key derivation schemes are used in cryptocurrency wallets, then key generation is simple, but security is compromised because learning a single derived key may reveal the master key
Solution Approach 1:
The patent introduces implicit certificates as an intermediary mechanism between the master key and derived keys. The implicit certificate contains encoded policy information and enables key derivation without exposing the master key, thus enhancing security while maintaining controlled complexity through the use of established cryptographic primitives
Solution Approach 2:
The key derivation process is segmented into multiple controlled steps using implicit certificate generation, policy encoding, and hierarchical key management. This segmentation allows security to be enhanced through layered protection mechanisms while managing complexity through modular design
2Reliability
If multiple key pairs are generated for different transactions, then privacy is improved, but key management complexity increases
Solution Approach 1:
The implicit certificate system provides multi-functionality by enabling both privacy enhancement through multiple derived keys and simplified management through a universal derivation mechanism. The same implicit certificate structure supports generation of multiple key pairs with different policies, reducing management complexity compared to separate key systems
Solution Approach 2:
The master key owner performs preliminary actions by generating the implicit certificate and establishing policies in advance. This preliminary setup enables automated derivation of multiple key pairs later, improving privacy while reducing ongoing management complexity through pre-configured rules
3Adaptability or versatility
If policy restrictions are encoded in implicit certificates, then key usage control is improved, but certificate generation complexity increases
Solution Approach 1:
The patent uses parameter changes by encoding policy restrictions as specific parameters within the implicit certificate structure. This allows flexible key usage control through parameterized policies while managing generation complexity by reusing the same certificate generation process with different parameter values
Data Source
AI summary
A client computer system implements a cryptocurrency wallet using derived cryptographic keys generated from an implicit certificate. The client computer system uses a root key pair that includes a root public key and a root private key to produce the implicit certificate. The implicit certificate is provided to other entities which generate derived public keys from the implicit certificate. In an embodiment, the client computer system encodes an identifier and additional information into the implicit certificate. In an embodiment, entities may derive one or more public keys from the implicit certificate, and the client computer system may derive corresponding private keys from the implicit certificate and the root key pair. In an embodiment, the client computer system generates a tree or derived key pairs that may be used to delegate portions of the cryptocurrency wallet to other computer systems.