Keyless Distributed Transaction Framework Using Hash-Chain Signatures
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current electronic transaction systems rely on symmetric and asymmetric cryptography, which pose security risks due to reusable cryptographic keys, complex calculations, and susceptibility to quantum attacks, and require trusted intermediaries and public-key infrastructures.
Innovation Solution
A distributed electronic transaction framework using hash-chain-based digital signatures and one-way functions, eliminating the need for cryptographic keys and trusted intermediaries, allowing for secure authentication and authorization on low-cost devices without synchronization with a reference clock.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If symmetric or asymmetric cryptography is used for authentication, then security is provided, but cryptographic keys become reusable and susceptible to compromise
Solution Approach 1:
The patent extracts the authentication mechanism from traditional cryptographic key-based systems and replaces it with a token-based system using one-way hash functions. The harmful element (reusable cryptographic keys) is removed entirely, while the security function is preserved through irreversible hash chain tokens that cannot be reversed or reused.
Solution Approach 2:
The patent implements disposable authentication tokens generated through hash chains. Each token is used once and then discarded, replaced by the next token in the sequence. This eliminates the reusability problem of traditional keys while maintaining security, as each token is short-lived and cannot be reused after authentication.
2Reliability
If asymmetric cryptography is used, then secure authentication is achieved, but complex calculations are required that are difficult to implement on low-cost hardware
Solution Approach 1:
The patent replaces the complex mathematical operations of asymmetric cryptography (mechanical/computational system) with simple one-way hash function evaluations. This substitution dramatically reduces computational complexity while maintaining security, enabling implementation on low-cost hardware devices that cannot handle complex cryptographic calculations.
Solution Approach 2:
The patent changes the fundamental parameter of authentication from reversible cryptographic operations to irreversible hash operations. By changing from symmetric/asymmetric encryption to one-way hashing, the computational complexity is reduced from O(n^3) or higher to simple hash evaluations, making it feasible for low-cost devices.
3Reliability
If public-key infrastructure is implemented, then secure transactions are enabled, but the system becomes expensive and difficult to maintain
Solution Approach 1:
The patent extracts the authentication function from the complex public-key infrastructure and implements it through a simplified token-based system. This removes the need for certificate authorities, key management systems, and complex infrastructure while preserving the essential security function of authentication.
Solution Approach 2:
The hash chain token system is self-generating and self-validating. Each device can independently generate its own token sequence through one-way hashing without requiring external infrastructure. The system serves itself by using the mathematical properties of hash functions to provide both token generation and verification capabilities locally.
4Reliability
If cryptographic keys are used for authentication, then parties can be identified, but the legitimacy of transactions becomes subject to scrutiny and trust issues
Solution Approach 1:
The patent converts the irreversibility of hash functions (which could be seen as a limitation) into a security benefit. The one-way nature of hashing ensures that tokens cannot be reversed, predicted, or reused, providing inherent security without requiring trust in key management. The mathematical property becomes the security mechanism itself.
Data Source
AI summary
Disclosed are systems and methods for performing distributed, keyless authorized electronic transactions. The disclosed systems and methods provide an electronic transaction framework where hardware and/or software devices can be used to authenticate users and/or authorize transactions involving such users. The disclosed framework operates as a distributed system in that it can be built without an entity that all parties must trust. The framework relies entirely on one-way functions and avoids using both symmetric and asymmetric cryptography; therefore, the framework does not have secret keys that can be compromised. The framework provides a distributed, electronic authorization system that does not require a reference clock to which components are synchronized, thereby enabling dynamic, agile authorization with improved security for user and transactional data.