PKI Gateway Session-Key Generation for Power-Loss Erasure
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing cryptographic key systems, such as RSA and Multi-Prime RSA, face privacy concerns due to long-term storage of public and private keys, which can be compromised, revealing user affiliations and enabling unauthorized access.
Innovation Solution
A method and apparatus for generating temporary cryptographic keys using a PKI gateway, where keys are created and stored temporarily on a device, and erased when disconnected or powered off, ensuring privacy and security by limiting exposure.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If public and private key information is stored on the token for use in cryptographic operations, then the device can perform digital signature and authentication interactions, but the stored key information can be compromised by non-intended entities, revealing user affiliations and enabling unauthorized access
Solution Approach 1:
The patent implements temporary cryptographic keys that are generated for each session and automatically deleted when the session ends. Instead of storing persistent private keys on the token, the system creates ephemeral key pairs that exist only during the cryptographic operation, thereby eliminating the risk of long-term key compromise while maintaining full cryptographic functionality.
Solution Approach 2:
The patent extracts the private key from the token entirely, storing it only in volatile memory during active sessions. The token retains only public key information and identification data, removing the vulnerable element (private key) from persistent storage while preserving the ability to perform cryptographic operations through temporary key generation.
2Ease of operation
If key information is stored on the token to associate the user with entities, then the user can maintain authenticated interactions, but the association information persists on the token and can be determined by non-intended entities who obtain the token
Solution Approach 1:
The patent uses temporary session keys that are discarded after each authentication interaction. The token does not retain persistent associations with specific entities beyond what is necessary for the current session, preventing privacy leakage when the token is obtained by unauthorized parties while maintaining seamless authentication during legitimate use.
Solution Approach 2:
The patent segments the authentication process into discrete sessions, each with its own temporary key pair. Instead of a single persistent key association, the system creates multiple isolated authentication contexts that cannot be combined to reveal overall user affiliations, thereby protecting privacy while enabling repeated authentication operations.
3Productivity
If cryptographic keys are stored in computers, portable devices and the cloud for long term use, then the keys can be readily available for cryptographic operations, but the long term storage is subject to compromise creating cyber security concerns
Solution Approach 1:
The patent transitions from static, persistent key storage to dynamic, ephemeral key generation. Keys are created in volatile memory when needed and automatically deleted when no longer required, making the system adaptive to security requirements while maintaining continuous availability for cryptographic operations through on-demand key generation.
Data Source
AI summary
Temporal key generation devices and methods are described. One such device of a first domain receives a “seed” to generate a private key associated with a public key for use in a second domain. The device uses the private key in cryptographic operations with the second domain. When the device loses power or is no longer connected to the second domain, the private key may be erased or no longer stored on the device.