Key Shadowing for Secure Multi-Party Access Control
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing cryptographic systems face challenges in securely managing access to encrypted information, as the loss of a key holder can result in loss of access or unauthorized access if multiple key holders are involved.
Innovation Solution
The method generates 'key shadows' of a master key, where any Y key shadows out of X are sufficient to generate a range of possible master keys, ensuring that less than Y key shadows are insufficient for determining the master key, and these key shadows are encrypted with personal keys and concatenated to the encrypted message.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If multiple key holders are involved in decrypting encrypted information, then access security is improved, but the risk of unauthorized access increases if key holders are compromised or leave the organization
Solution Approach 1:
The master key is divided into multiple key shadows, where each key shadow is encrypted with a different personal key. Any Y key shadows out of X can be used to decrypt the message, but less than Y key shadows are insufficient to determine the master key. This segmentation allows the system to maintain security even if some key holders are compromised or leave the organization.
Solution Approach 2:
Personal keys act as intermediaries between the master key and the encrypted message. Each personal key encrypts a corresponding key shadow, creating a layered security structure where the personal keys mediate access to the master key without requiring direct access to it.
2Adaptability or versatility
If key revocation is implemented without key holder participation, then access control flexibility is improved, but system complexity increases
Solution Approach 1:
The system performs preliminary actions by pre-generating multiple key shadows encrypted with different personal keys before any access is needed. This allows the system to maintain flexibility in revoking access to specific key holders without requiring their participation, as the key shadows are already prepared and can be selectively activated or deactivated based on organizational needs.
Data Source
AI summary
A technique of generating key shadows performed by at least one computing device including at least one tangible computing element. The method includes receiving an indication of a first number X representing how many of the key shadows are to be generated, receiving an indication of a second number Y representing how many of the key shadows are to be required for decrypting an encrypted message, determining or receiving a master key for decrypting the encrypted message, and determining X key shadows of the master key. Y of those key shadows is sufficient to generate a range of more than one possible master keys that can be computationally feasibly searched for the master key. Less than Y of those key shadows is insufficient to determine any part of a value for the master key. Also, a technique of decrypting an encrypted message using Y of the key shadows. Further, associated systems.