Multi-party Computation MFA Key Distribution
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing multi-factor authentication (MFA) solutions face security risks due to the storage of private keys on user devices, which can be compromised by theft, loss, or cyber-attacks, and lack efficient distributed key generation and signing protocols for blockchain-based systems.
Innovation Solution
A method and system utilizing multi-party computation (MPC) protocols for generating and co-signing cryptographic key shares between a computing device and a server, enabling secure MFA by distributing key generation and signing processes without compromising public verification protocols, and incorporating key rotation and recovery mechanisms for enhanced security.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If private keys are stored on user devices for MFA, then authentication functionality is enabled, but security is compromised due to theft, loss, or cyber-attacks
Solution Approach 1:
The patent divides the private key into multiple secret shares distributed across different parties (user device, server, and potentially third parties). No single party holds the complete private key, making it impossible to compromise authentication security by attacking a single storage location. The secret shares are generated through multi-party computation protocols that ensure none of the participating parties can reconstruct the full private key alone.
Solution Approach 2:
The patent introduces multi-party computation protocols as an intermediary mechanism that enables joint key generation and signing operations without requiring any party to expose their secret shares. The MPC protocol acts as a secure mediator that coordinates between the user device and server to perform cryptographic operations while maintaining the confidentiality of all secret shares throughout the process.
2Reliability
If distributed key generation and signing protocols are implemented, then security is improved by distributing key management, but system complexity increases
Solution Approach 1:
The patent implements universal interfaces and protocols that maintain compatibility with existing authentication standards while enabling distributed key management. The system provides multi-functional capabilities including key generation, signing, and verification through unified MPC-based protocols that can work across different platforms and applications, reducing the need for separate implementations of each cryptographic function.
Solution Approach 2:
The system enables automated MPC-based key generation and signing operations that reduce manual configuration and management overhead. The protocols are designed to automatically coordinate between parties, perform necessary cryptographic computations, and manage secret shares without requiring complex manual setup or intervention, thereby reducing operational complexity despite the advanced cryptographic mechanisms involved.
3Object-affected harmful factors
If MPC-based distributed signing is used, then security against key theft is improved, but authentication performance may be reduced due to additional computational steps
Solution Approach 1:
The patent performs key generation and secret share distribution in advance during account setup, so that during actual authentication, the system only needs to perform signing operations with pre-distributed shares rather than generating keys in real-time. This preliminary setup phase enables faster authentication transactions while maintaining the security benefits of distributed key management.
Solution Approach 2:
The system allows for configurable parameters in the MPC protocol, such as the number of required parties for signing operations and the level of secret sharing, which can be adjusted to balance security requirements against performance constraints. By changing these parameters, the system can optimize authentication speed for specific use cases while maintaining adequate security thresholds.
Data Source
AI summary
Systems and methods of performing multi factor authentication (MFA), including: receiving, by a computing device, an MFA request from a first server, generating, by the computing device, a first share of a cryptographic key, based on a multi-party computation (MPC) protocol, generating, by a second server, a corresponding second share of the cryptographic key, based on the MPC protocol, wherein the cryptographic key corresponds to a public key and private key pair, co-signing, by the computing device and the second server, the MFA request based on the MPC protocol, wherein the computing device signs the MFA request with the first share and the second server signs the MFA request with the second share, and verifying, by the first server, the signed MFA request.