Security Key Fragment Distribution Across Proxy Storage
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current security mechanisms for digital wallets, such as those used in Bitcoin systems, are inadequate in protecting private keys from hackers, as weak keys can be easily guessed or recorded, while stronger keys are difficult to manage securely.
Innovation Solution
A method that divides security keys into fragments and distributes them across different proxy storage devices, allowing for the reconstruction of the key based on a threshold number of fragments received, enhancing security by dispersing the key across various secure locations with distinct access controls.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If a strong security key is used to protect digital wallet data, then security against hackers is improved, but key management complexity and risk of loss increase
Solution Approach 1:
The security key is divided into multiple key fragments using secret sharing schemes (e.g., Shamir's Secret Sharing). Each fragment is stored in a separate proxy storage device, so that the complete key can only be reconstructed when a sufficient number of fragments are combined. This segmentation resolves the contradiction by maintaining strong security while distributing management responsibilities across multiple storage devices, reducing the risk of total key loss.
2Ease of operation
If the security key is stored in a single location for easy access, then ease of operation is improved, but vulnerability to theft and loss increases
Solution Approach 1:
The key is segmented into fragments distributed across multiple proxy storage devices. Access is simplified through automated reconstruction processes that combine fragments when needed, while security is enhanced because no single storage device holds the complete key. This resolves the contradiction by maintaining operational ease through automation while reducing theft risk through distribution.
Solution Approach 2:
Proxy storage devices act as intermediaries that hold key fragments rather than the complete key. These intermediaries enable secure key management by providing controlled access points that can reconstruct the full key only when sufficient fragments are present, thus facilitating easy access while preventing unauthorized theft.
3Reliability
If the security key is divided and distributed across multiple storage devices, then security is improved, but system complexity increases
Solution Approach 1:
The system is segmented into proxy storage devices that independently hold key fragments. Each proxy device operates semi-autonomously, reducing the complexity burden on any single component. The segmentation allows the system to achieve high security through distribution while managing complexity through modular architecture where each proxy device follows standardized protocols for fragment storage and retrieval.
Data Source
AI summary
A method performed by a processor of a computer, includes obtaining a security key associated with data, dividing the security key into key fragments, and distributing different ones of the key fragments to different proxy storage devices. Key fragments are received from the proxy storage devices, a reconstructed security key is generated based on the key fragments received from the proxy storage devices, and programmatic access to the data is controlled based on the reconstructed security key. Related computer program products and systems are disclosed.