Cryptographic Key Fragmentation for Secure Access
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
The secure distribution and reconstruction of cryptographic keys is cumbersome due to the need for secure storage of private keys, which limits their accessibility and usage in digitally signing data and applications.
Innovation Solution
A method of segmenting a cryptographic key into multiple segments, assigning users to groups, mapping and encoding these segments, and distributing them to users within a predefined format, allowing reconstruction of the key through cooperation of a subset of users, ensuring secure and convenient access.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If the private key is stored in a secure location isolated from the network, then security is improved, but accessibility and ease of operation deteriorate
Solution Approach 1:
The private key is divided into multiple key segments that are distributed to different users. Each user holds a portion of the key, and the key can be reconstructed when a sufficient number of users cooperate. This segmentation allows the key to remain secure (not stored in one accessible location) while still being accessible when needed through collaborative reconstruction.
2Reliability
If the private key is stored in a secure location isolated from the network, then security is improved, but device complexity increases
Solution Approach 1:
The key management system is segmented into multiple user participants, each holding a key segment. This distributes the security responsibility across multiple entities rather than requiring a single complex secure storage system, thereby improving security while managing complexity through distribution.
Solution Approach 2:
A key reconstruction mechanism acts as an intermediary that coordinates between multiple users holding key segments. This mediator facilitates key recovery without requiring any single user to have access to the complete key, balancing security requirements with operational feasibility.
3Ease of operation
If USB flash drives are used for storing the private key, then ease of operation is improved, but security deteriorates due to vulnerabilities
Solution Approach 1:
Instead of storing the complete private key on a USB flash drive (which improves accessibility but compromises security), the key is segmented and distributed among multiple users. This eliminates the vulnerability of storing the entire key on a single device while maintaining accessibility through collaborative key reconstruction when needed.
Data Source
AI summary
Methods, apparatuses, systems, and program products are disclosed for secret fragmentation and distribution. A method includes generating a secret that may be divided into a plurality of segments such that the secret is re-constructed by combining each of the plurality of segments. A method includes assigning each of a plurality of users to one or more groups or groups of groups. A method includes mapping each of a plurality of segments of a secret to one or more of a plurality of users as a function of a number of users within each group. A method includes encoding each of a plurality of segments in a predefined format based on a mapping. A method includes distributing each of a plurality of encoded segments to each of one or more users that is mapped to each encoded segment.