Modular Token Issuer Isolation for Secure Token Generation
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing token-based transaction systems, particularly in central bank digital currency systems, face high security requirements that are not adequately addressed by current token issuer units, necessitating a secure and flexible method for generating and destroying tokens without compromising security.
Innovation Solution
A token issuer unit is modularly divided into a secure token generation unit and a token management unit, with an air gap interface to prevent direct data transmission, using internal temporary token elements and cryptographic functions to generate and destroy tokens securely, ensuring that sensitive data remains isolated and protected.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If a token issuer unit is used in central bank digital currency systems, then token generation and management can be performed, but security requirements are not adequately addressed and sensitive data may be exposed
Solution Approach 1:
The token issuer unit is divided into separate functional modules: a token generation unit that creates temporary token elements, a token management unit that handles token issuance, and a token destruction unit that securely deletes tokens. This segmentation isolates sensitive operations and prevents unauthorized access to private keys and secret data throughout the token lifecycle.
Solution Approach 2:
Temporary token elements are introduced as intermediary data structures that exist only during the token generation process. These temporary elements allow the system to manage token issuance without exposing permanent storage of sensitive private keys, as the temporary elements are automatically destroyed after use.
2Reliability
If direct data transmission is used between token generation and management units, then communication is simple, but security is compromised as sensitive data may be accessed
Solution Approach 1:
The private key and secret data are extracted from the token management unit and stored exclusively in the token generation unit. This extraction ensures that sensitive cryptographic material never leaves the secure generation environment, eliminating the security risk of data transmission while allowing the management unit to function with non-sensitive token reference data.
3Productivity
If tokens are generated and stored permanently, then token issuance is efficient, but security risks increase as sensitive data remains exposed
Solution Approach 1:
The system implements automatic discarding of temporary token elements immediately after they are used to generate issued tokens. The token destruction unit securely deletes these temporary elements, ensuring that sensitive data does not persist in the system. This approach maintains token issuance efficiency while eliminating security vulnerabilities associated with permanent storage of sensitive information.
Data Source
AI summary
A method is described for securely generating a token that can be issued by a token issuer within an electronic transaction system, which includes a token reference register. This method also covers the secure destruction of a token in the same system, featuring both a token reference register and a token issuer. In a token issuer unit equipped with a secure token generating unit, the following steps are performed: a unique token element pair is generated, consisting of a secret token element and a public token reference element; an addition command is created that instructs the token reference register to add the generated public token reference element as an additional token reference in the token reference register; and the addition command is then transmitted to the token reference register.