Decentralized Multiparty Key Exchange via Hierarchical Segmentation
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing multiparty key exchange methods face scalability issues, particularly with large numbers of participants, as public key sizes increase significantly with the number of parties, making them impractical for large-scale Internet infrastructure and vulnerable to quantum attacks.
Innovation Solution
A decentralized multiparty key exchange system that uses symmetric cryptographic methods and one-way hash functions to establish a shared secret among multiple parties without relying on centralized authorities, allowing for secure communication among any subset of participants without increasing public key sizes with the number of parties.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If traditional multiparty key exchange methods are used, then security is provided, but public key sizes increase linearly with the number of participants making them impractical for large-scale systems
Solution Approach 1:
The patent segments the multiparty key exchange into hierarchical groups where a small number of group representatives perform the key exchange, rather than requiring all participants to exchange keys directly. This segmentation reduces the number of key operations from O(n²) to O(g²) where g is the number of groups, dramatically reducing public key sizes for large-scale systems while maintaining security through the hierarchical structure.
Solution Approach 2:
The patent introduces group representatives as intermediary entities that facilitate key exchange between members of their respective groups. These intermediaries aggregate and relay cryptographic information, allowing secure multiparty key establishment without requiring direct key exchange between all participant pairs, thus reducing the overall key size requirements.
2Ease of operation
If centralized authorities are used for key management, then key distribution is simplified, but single points of failure and vulnerability to attacks are created
Solution Approach 1:
The patent extracts the centralized authority function and distributes it across multiple group representatives and participants. Instead of relying on a single trusted third party, the system distributes key management responsibilities to multiple entities that collectively perform the key exchange, eliminating the single point of failure while maintaining operational simplicity through the organized group structure.
Solution Approach 2:
The patent enables participants to perform their own key exchange operations through the standardized protocol, with group representatives automatically managing their group's key establishment. This self-service approach eliminates the need for centralized key distribution authorities while maintaining ease of operation through the structured protocol that guides participants through the process.
3Reliability
If quantum-resistant cryptography is implemented, then future security is ensured, but computational complexity and key sizes increase
Solution Approach 1:
The patent segments the quantum-resistant key exchange into hierarchical groups, reducing the computational burden on each individual participant. By organizing participants into groups with representative entities, the system achieves quantum resistance through standardized protocols while reducing overall computational complexity from O(n²) operations to O(g²) operations, making quantum-resistant cryptography practical for large-scale deployment.
Data Source
AI summary
This invention pertains to secure communications between multiple parties and/or secure computation or data transmission between multiple computers or multiple vehicles. This invention provides a secure method for three or more parties to establish one or more shared secrets between all parties. In some embodiments, there are less than 40 parties and in other embodiments there are more than 1 million parties that establish a shared secret. In some embodiments, establishing a shared secret among multiple parties provides a method for a secure conference call. In some embodiments, a shared secret is established with multiple computer nodes across the whole earth to help provide a secure Internet infrastructure that can reliably and securely route Internet traffic. In some embodiments, a shared secret is established so that self-driving vehicles may securely communicate and securely coordinate their motion to avoid collisions. In some embodiments, a shared secret is established with multiple computer nodes that participate as a network, performing blockchain computations.