Multiparty Signing System With Split Key And Secure Computation
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current digital signing systems lack control and structure in ensuring the authenticity and approval of digital signatures, particularly in multi-signature algorithms, where a single authority's failure or cheating can elevate risks, and existing methods do not provide adequate security for authorization processes in the modern internet context.
Innovation Solution
A multiparty signing system is introduced that splits a private signing key into shares held by multiple servers, employing secure multiparty computation and authentication processes using quorums and threshold cryptosystems to ensure approval and authenticity of digital signatures, generating a signed version of digital content that includes a hash value and associated public key for verification.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If a single authority is used for digital signing, then the signing process is simple and fast, but the security and reliability are reduced due to failure or cheating risks
Solution Approach 1:
The private signing key is segmented into multiple key shares distributed to different servers. No single server holds the complete private key, eliminating the single point of failure while maintaining signing capability through distributed key management.
Solution Approach 2:
An approval process acts as an intermediary between content request and digital signing. This mediator verifies the necessity and authenticity of signing requests, preventing unauthorized or malicious signing operations while maintaining system security.
2Reliability
If multiple participants are required for authorization, then the security is improved, but the signing process becomes more complex and slower
Solution Approach 1:
Key shares are pre-distributed to multiple servers before the signing operation. When signing is needed, the pre-configured key shares can be quickly combined with approval verification, avoiding time-consuming key distribution and setup during the actual signing process.
Solution Approach 2:
The system automatically manages key share distribution, approval verification, and signature generation without requiring manual intervention from participants. This automation reduces the time overhead of multi-party authorization while maintaining security.
3Productivity
If a private key is used for signing, then the signing operation is efficient, but control and structure for proving authenticity are lost
Solution Approach 1:
The approval process provides feedback verification before signing by checking whether the signing operation is necessary and authorized. This feedback mechanism ensures authenticity control by validating the signing request against predefined authorization rules and policies.
Solution Approach 2:
The private key is segmented into key shares held by different servers, and the signing process is segmented into approval verification and actual signing phases. This segmentation preserves signing efficiency while adding structured authenticity control through distributed verification.
Data Source
AI summary
The present invention disclosed a method operable on a multiparty signing system for performing a multiparty signing act on a digital content. The multiparty signing system disclosed in the present invention comprises at least two multiparty signing servers configured with methods to perform the multiparty signing act of a digital content to sign. The multiparty signing system can be configured to perform the multiparty signing act by a private signing key split to at least two key shares, wherein each key share is held by each of the at least two multiparty signing servers. The multiparty signing system is also configured to communicate with at least one computerized node employed to conduct an approval process for approving the multiparty signing act. The approval process can be configured to conduct the approval process by employing a secure multiparty computation, wherein the approval process is configured to utilize secret shares held by the at least one computerized node. In such cases, the multiparty signing act is approved in case the approval process ended successfully.