Multi-Party Computation Authentication with Node Segmentation
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current multi-party computation systems in digital transactions, particularly with cryptocurrencies, are insecure and unreliable when only two parties are involved, as they are vulnerable to data loss or theft due to single-point failures and lack of authority control in complex transactions involving multiple participants.
Innovation Solution
Implementing a multi-party computation protocol that distributes secret shares among multiple independent nodes and a server arrangement to verify and authenticate digital transactions, ensuring that the number of independent nodes exceeds the number of non-independent nodes, thereby preventing unauthorized authentication.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If only two independent parties are involved in MPC system, then the system is simpler to operate, but the system becomes vulnerable to single-point failures and security breaches
Solution Approach 1:
The patent segments the MPC system into multiple independent nodes (at least three nodes) instead of using only two parties. Each node holds a portion of the secret key, and the system requires a threshold number of nodes to participate in transactions. This segmentation eliminates single-point failures while maintaining operational simplicity through standardized protocols.
Solution Approach 2:
The patent assigns different roles and characteristics to different nodes in the MPC system. Independent nodes are distributed across different locations or organizations, each with unique secret shares. This local differentiation ensures that compromise of one node does not affect the overall system security, while the system remains easy to operate through consistent local procedures at each node.
2Device complexity
If a party runs two of three nodes in MPC system, then the system configuration is simplified, but the system becomes vulnerable to hijacking and data loss
Solution Approach 1:
The patent implements asymmetric distribution of nodes where independent nodes are separated from intermediary nodes. The system requires that not one party can control a majority of nodes. This asymmetric arrangement prevents any single entity from hijacking the system while maintaining manageable configuration complexity through clear role definitions.
Solution Approach 2:
The patent introduces a neutral intermediary node that facilitates transactions between parties without allowing any single entity to control the majority. The intermediary acts as a mediator that requires collaboration from other independent nodes, preventing hijacking while simplifying configuration through standardized intermediary protocols.
3Ease of operation
If centralized banking system is used for digital transactions, then transaction control and authorization are easier to manage, but the system becomes vulnerable to hacking and insolvency
Solution Approach 1:
The patent segments the centralized authorization function into distributed MPC nodes. Instead of one centralized bank controlling transactions, multiple independent nodes each hold secret shares and must collaborate to authorize transactions. This maintains transaction control capability through cryptographic protocols while eliminating the single point of failure inherent in centralized systems.
Solution Approach 2:
The patent replaces the centralized banking intermediary with a distributed network of MPC nodes that collectively perform the intermediary function. No single node has complete control, but together they provide the authorization and control functions previously performed by centralized banks, enhancing security while maintaining operational ease through standardized protocols.
Data Source
AI summary
Disclosed is a system (100, 200) for authenticating a digital transaction by implementing a multi-party computation protocol. The system comprises a first set of first nodes (102) configured to generate a first data (104), wherein each of the first nodes, from the first set of first nodes, in a second set of first nodes (102A) is an independent party and a server arrangement (106) communicably coupled with the first set of first nodes. The server arrangement is configured to receive the first data from the first set of first nodes, generate a second data (108), verify whether a number of other of the first nodes (102B) not in the second set of first nodes is equal to or at most only one greater than a number of first nodes in the second set of first nodes and authenticate the digital transaction based on the verification, using the secret shares in the first data and the second data.