Linked Cryptographic Repositories for Decentralized Key Security
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Conventional blockchain systems lack robust security mechanisms, particularly when private keys are compromised, leading to unauthorized access and loss of digital assets, as users have limited recourse without a central administrator.
Innovation Solution
The system employs linked cryptography-based digital repositories with varying key structures, where a first private key is stored on a user device and partial private keys are distributed between the user and a remote device, ensuring that neither entity can perform blockchain operations without the other, and automatically transfers a predetermined amount of digital assets to a less secure storage application for secure operations.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Adaptability or versatility
If users store private keys in cryptography-based digital repositories for blockchain operations, then users can perform decentralized operations without central administrators, but users have limited recourse if private keys are compromised or made public
Solution Approach 1:
The private key is segmented into multiple partial private keys stored in different cryptography-based digital repositories. No single repository contains the complete private key, so compromise of one repository does not result in loss of security. The system divides the cryptographic secret across multiple locations to eliminate the single point of failure.
Solution Approach 2:
The system implements nested cryptography-based digital repositories where repositories are linked in a hierarchical structure. Each repository may contain references to or encapsulations of other repositories, creating a nested arrangement where the complete private key is reconstructed only when accessing the proper sequence of nested repositories in the correct order.
2Reliability
If users retain complete control of private keys for maximum security, then unauthorized access is prevented, but users have little ability to retrieve digital assets if keys are lost or compromised
Solution Approach 1:
By segmenting the private key into partial keys distributed across multiple repositories, the system maintains security (nonequivalence of partial keys) while enabling recovery (access to multiple repositories). If one repository is compromised or lost, the user can still access their assets through the other repositories that contain the remaining partial keys.
Solution Approach 2:
The system changes the parameter of key control from single-point control to multi-point control. Instead of one complete private key held in one location, the system uses multiple partial private keys in multiple locations, transforming the security model from absolute control to distributed control with built-in redundancy.
3Ease of operation
If the system uses conventional public key-private key pairing algorithms, then digital signing operations can be performed, but the security mechanism is insufficient given the criticalness of private key breaches
Solution Approach 1:
The conventional single private key is segmented into multiple partial private keys. Each partial key can independently perform digital signing operations for its associated repository, but the segmentation ensures that compromise of one key does not compromise the entire system. This maintains operational capability while improving security robustness.
Solution Approach 2:
The system introduces cryptography-based digital repositories as intermediaries between the user and the blockchain network. These repositories act as secure mediators that hold and manage partial private keys, performing digital signing operations without exposing the complete private key. This intermediary layer adds robustness against security breaches while maintaining digital signing functionality.
Data Source
AI summary
Methods and systems disclosed herein recite the use of linking cryptography-based digital repositories in order to perform blockchain operations in decentralized applications. For example, the system may link a first cryptography-based, storage application (e.g., a first digital wallet) with a second first cryptography-based, storage application (e.g., a second digital wallet). The first cryptography-based, storage application may correspond to a first private key, and wherein the first private key is stored on a first user device. The second cryptography-based, storage application corresponds to a first partial private key and a second partial private key, wherein the first partial private key is stored on a first remote device, and wherein the second partial private key is stored on the first user device.