Cryptographic Key Share Control via Multi-Party Computation
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current key management solutions in cloud storage face a tradeoff between security and usability, as they either compromise security for usability or vice versa, particularly in scenarios where attackers or government subpoenas may demand decryption of encrypted data.
Innovation Solution
A system comprising two nodes, each storing a share of a cryptographic key, uses a Multi-Party Computation (MPC) process to secure data, allowing the owner to control the operation mode of the key shares, including disabling communication and deleting shares to prevent unauthorized access, with a management interface for user input and log storage to detect irregular usage.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If HSM solutions are used to improve security, then security is improved, but usability deteriorates
Solution Approach 1:
The cryptographic key is divided into multiple shares distributed across different nodes (e.g., cloud storage provider nodes and customer-controlled nodes). This segmentation allows the system to achieve high security through distributed key management while maintaining usability by enabling selective access and control over key shares without requiring complete key compromise.
Solution Approach 2:
The system provides dynamic control over key shares, allowing the operation mode of each share to be changed from enable to disable based on user commands. This dynamic capability enables flexible security management and access control, resolving the contradiction between static security guarantees and flexible usability requirements.
2Ease of operation
If cloud service providers control cryptographic keys to enable data access, then usability is improved, but security deteriorates
Solution Approach 1:
By segmenting the key into multiple shares stored at different locations (some controlled by the cloud provider, others by the customer), the system enables the cloud provider to maintain usability for data access while the customer retains security control through their own key shares.
Solution Approach 2:
The system introduces key share shares as intermediaries between the cloud service provider and the customer. These intermediate key shares enable the cloud provider to facilitate data access (usability) while the customer's key shares act as a mediator that maintains security control and prevents unauthorized access.
3Ease of operation
If key control is centralized to simplify management, then ease of operation is improved, but security deteriorates
Solution Approach 1:
The key management function is segmented across multiple distributed nodes rather than centralized at a single location. This distribution simplifies the system architecture by eliminating single points of failure while enhancing security through redundant key shares that must be coordinated across multiple locations.
Solution Approach 2:
The system provides multi-functional capabilities at each node, where key shares can be enabled or disabled based on various conditions (user commands, irregular activity detection). This universality allows a single distributed key share system to handle multiple security and management functions, improving ease of operation without compromising security.
Data Source
AI summary
The subject matter discloses a computerized system for securing data, comprising a first node, comprising a first memory storage configured to store a first share of a cryptographic key and a communication module, a second node, in communication with the first node, comprising a second memory storage configured to store a second share of the cryptographic key, wherein the first share and the second share of the cryptographic key are required to perform a cryptographic operation using a multi-party computation (MPC) process, wherein the second node further comprises a control unit configured to change an operation mode of the second share from enable to disable, wherein the disable operation mode prevents performing the cryptographic operation using the MPC process.