Centralized Key Master Service for Secure Asymmetric Credential Distribution
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing cryptographic key distribution systems face challenges when the verifying party is unknown or unavailable at the time of key generation, particularly in scenarios where key transfer to mobile devices is cumbersome and insecure.
Innovation Solution
A centralized key distribution system involving a key master service with a public key repository and client applications that enables asynchronous creation and distribution of cryptographic keys, allowing user-driven identity and secure policy management, including temporary key storage and access control, to facilitate key transfer between client devices and outside services.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Speed
If public key is transferred directly to destination, then transfer speed is fast, but security deteriorates when destination is unknown or unavailable
Solution Approach 1:
The patent introduces a key master service as an intermediary between the client device and the destination service. The public key is first transferred to the key master service, which then distributes it to the destination service when needed. This mediator approach allows the key to be transferred securely to a trusted third party before final distribution, resolving the contradiction between fast transfer and security when destination availability is uncertain.
2Ease of operation
If key pair is generated on mobile device, then user control is improved, but key transfer becomes cumbersome and insecure
Solution Approach 1:
The patent extracts the public key from the mobile device after generation and stores it in the key master service. This separation allows the private key to remain securely on the user's device while the public key is managed centrally. The user retains control through the private key while the complex task of key distribution is handled by the key master service, reducing transfer complexity.
3Reliability
If centralized key distribution system is implemented, then security is enhanced, but system complexity increases
Solution Approach 1:
The key master service is designed as a universal system that handles multiple cryptographic operations including key generation, storage, distribution, and revocation. By consolidating these functions into a single multi-functional service, the patent enhances security through centralized management while avoiding the complexity of implementing separate systems for each cryptographic function.
Data Source
AI summary
A system and method for distributing key pair credentials that includes receiving a public key message at a key master service, wherein the public key message originates from a first client application; associating a key identifier with the public key; storing the public key at the key master service indexed at least by a key identifier; receiving a request for a public key from an outside service, wherein the request specifies a key identifier; and responding to the request with a public key according to the key identifier.