MPC Key Segmentation for Blockchain Security and Efficiency
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Conventional multi-party computation (MPC) based key operations in blockchain systems face issues such as loss of digital assets due to the loss of a single key and inefficiencies due to the need for all parties to be online simultaneously, as well as latency from multiple signature rounds and reliance on online storage for private keys.
Innovation Solution
The implementation of cohort/group designation during key creation, using partial private keys with one maintained online and others offline, along with threshold signing requirements and independent key recovery mechanisms, to reduce risks and enhance efficiency by allowing partial key recovery and flexible approval policies.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If conventional MPC-based key operations are used where all parties must be online simultaneously, then security is maintained through multi-party verification, but system efficiency deteriorates due to latency from multiple signature rounds and requirement for all parties to be online
Solution Approach 1:
The patent segments the private key into multiple partial private keys distributed among different parties. Instead of requiring all parties to be online simultaneously for complete key operations, each party holds and operates with their own partial private key. This segmentation allows operations to proceed with available partial keys, reducing the efficiency penalty while maintaining security through the requirement that multiple partial keys are needed for complete access.
Solution Approach 2:
The patent implements threshold signing requirements where a specified number of partial private keys (less than all parties) can authorize operations. This partial action approach allows blockchain operations to proceed when the threshold is met, without requiring all parties to be online, thus improving system efficiency while maintaining adequate security through multi-party verification.
2Reliability
If all private keys are maintained offline for security, then security is improved, but ease of operation deteriorates due to inability to perform operations without offline key access
Solution Approach 1:
The patent divides the private key into multiple partial private keys that can be distributed across different storage locations (online and offline). This segmentation allows one or more partial keys to remain offline for security while others can be online for operational convenience. The system reconciles the contradiction by enabling operations when the required threshold of partial keys is available, without requiring all keys to be offline.
Solution Approach 2:
The patent introduces an intermediary mechanism where partial private keys serve as mediators between offline security requirements and online operational needs. The threshold signing system acts as an intermediary that reconciles the conflict by allowing operations to proceed when sufficient partial keys are present, without requiring complete key availability or compromising offline storage security.
3Ease of operation
If a single private key is used for blockchain operations, then ease of operation is maintained, but reliability deteriorates due to loss of digital assets if the key is lost
Solution Approach 1:
The patent segments the single private key into multiple partial private keys distributed among different parties or storage locations. This segmentation maintains operational simplicity through the use of a unified threshold signing interface, while improving asset security by ensuring that no single point of failure exists. The loss of one or more partial keys does not result in total asset loss as long as the threshold is maintained.
Solution Approach 2:
The patent implements beforehand cushioning by distributing partial private keys across multiple parties and storage locations before any potential key loss event. This proactive measure ensures that even if one or more partial keys are lost or compromised, the assets remain secure as long as the required threshold of partial keys is maintained. The system cushions against potential key loss through the redundant distribution of key material.
Data Source
AI summary
Methods and systems for the use of multi-party computation (“MPC”) key systems that involve the use of multiple parties, each of which hold respective private data that may be used to evaluate a computation without ever revealing any of the private data held by each party to perform blockchain operations. Using the MPC key systems, the methods and systems generate secure, encrypted communications across distributed computer networks for authorizing use of cryptography-based digital repositories in order to perform blockchain operations in decentralized applications.