Oblivious Transfer Protocol for Selective Secret Access
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing blockchain-based data transfer systems lack a secure mechanism for oblivious transfer, where the sender remains unaware of which files the recipient accesses, compromising data security.
Innovation Solution
A method and system utilizing elliptic curve cryptography to encrypt secrets with public keys, ensuring only the intended recipient can access specific secrets while the sender remains oblivious to the selection, employing a non-interactive Oblivious Transfer protocol.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Adaptability or versatility
If a sender transmits multiple secrets to a recipient in a blockchain system, then the recipient can select and access specific secrets, but the sender loses awareness of which secrets are accessed, compromising data security control
Solution Approach 1:
The system segments secrets into individually addressable units, each associated with a unique identifier. The sender can transmit multiple segmented secrets (e.g., secret1, secret2, secret3) with distinct IDs, allowing the recipient to selectively access only the needed segments while the sender maintains control through the identification system.
Solution Approach 2:
The system introduces an intermediary mechanism (the oblivious transfer protocol and blockchain smart contract) that mediates between the sender and recipient. This intermediary enables selective access without revealing which secrets are accessed to the sender, while still maintaining security controls through the protocol structure and blockchain verification.
2Reliability
If traditional encryption methods are used to protect digital assets, then data security is maintained, but a trusted intermediary is required to manage key distribution and access control
Solution Approach 1:
The system enables self-service through autonomous smart contracts deployed on the blockchain. The smart contract automatically handles key distribution, access control, and secret transmission without requiring a trusted intermediary. The recipient can independently select and access secrets using their private key, while the sender's control is maintained through the programmatic logic embedded in the smart contract.
Solution Approach 2:
The system replaces the mechanical/trust-based intermediary system with a cryptographic and computational system. Instead of relying on a trusted third party to manage keys and access control, the solution uses elliptic curve cryptography, digital signatures, and blockchain smart contracts to automatically enforce security policies and manage access.
3Quantity of substance
If all secrets are transmitted to the recipient, then complete data availability is achieved, but the sender cannot prevent access to unwanted secrets
Solution Approach 1:
By segmenting secrets into individually identifiable units with unique IDs, the system allows the recipient to request and receive only the specific secrets they need. The sender transmits all secrets but the recipient can selectively access only authorized ones through the oblivious transfer mechanism, preventing unauthorized access while maintaining complete data availability in the system.
Solution Approach 2:
The system applies local quality by assigning different access permissions to different secrets based on their unique identifiers. Each secret has its own access control properties, allowing the recipient to access only those secrets for which they have authorization, while other secrets remain inaccessible despite being transmitted to the recipient.
Data Source
AI summary
A method of communicating a secret between a sender and a recipient is disclosed. The method comprises sending information identifying secrets selectable by the recipient and receiving a first public key of an elliptic curve cryptography system, corresponding to a first secret selected for access by the recipient and for which a first private key is accessible to the recipient. A second public key is received, corresponding to a second secret not selected for access by the recipient, wherein a corresponding second private key is not available to the recipient. First and second secrets encrypted by means of the respective first and second public keys are sent to the recipient, wherein the first secret is accessible to the recipient by means of the first private key, the second secret is inaccessible to the recipient, and the sender is unable to distinguish between the first and second secrets.