Proof-of-Work Key Wrapping for Time-Restricted Data Access

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Current cryptographic systems for controlling access to data rely solely on key possession, which is insufficient for advanced access control mechanisms that require consideration of time, computing resources, and device attributes, and often necessitate a separate trusted third party for verification, making the system complex and vulnerable.

Innovation Solution

Integration of a proof-of-work key wrapping mechanism that encrypts cryptographic keys, allowing recipient devices to derive the key without an unwrapping key, by configuring the encryption strength and hints as a computational puzzle that consumes specific computing resources, thereby eliminating the need for a third-party verification.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Adaptability or versatility

If traditional cryptographic key possession is used for access control, then access simplicity is maintained, but advanced access control mechanisms (time, computing resources, device attributes) cannot be implemented

Engineering Contradiction:
Improveaccess control mechanismsVSAvoidsystem complexity
Core Design Contradiction:
Adaptability or versatilityVSDevice complexity

Solution Approach 1:

The patent transforms the static key possession model into a dynamic proof-of-work model where access control parameters (time, computing resources, device attributes) are embedded in the cryptographic challenge. The wrapped key mechanism allows the access conditions to be parameterized without requiring complex external verification infrastructure.

Inventive Principle:
Principle #35Parameter changes

2Reliability

If a separate trusted third party is added for verification, then access control reliability is improved, but system complexity and vulnerability increase

Engineering Contradiction:
Improveaccess control verificationVSAvoidsystem structure
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

The patent enables the recipient device to perform self-verification by embedding the verification logic directly in the proof-of-work challenge. The device independently verifies its own eligibility to access the content by solving the cryptographic puzzle, eliminating the need for external trusted third parties while maintaining reliability.

Inventive Principle:
Principle #25Self-service

Solution Approach 2:

The patent merges the verification function with the key wrapping mechanism. The same cryptographic structure that protects the key also embeds the verification logic, combining multiple functions into a unified system that reduces complexity while maintaining reliability.

Inventive Principle:
Principle #5Merging (Combining)

3Adaptability or versatility

If proof-of-work key wrapping is implemented, then access control versatility is improved, but computational resource consumption increases

Engineering Contradiction:
Improveaccess control capabilitiesVSAvoidcomputing resource consumption
Core Design Contradiction:
Adaptability or versatilityVSUse of energy by moving object

Solution Approach 1:

The patent implements proof-of-work with configurable difficulty levels that require partial computational effort rather than exhaustive search. The wrapped key mechanism allows tuning the amount of computational work required to match the security needs and resource constraints, avoiding excessive energy consumption while maintaining access control versatility.

Inventive Principle:
Principle #16Partial or excessive action

Data Source

PatentUS11316839B2Proof-of-work key wrapping for temporally restricting data access
Publication Date: 2022.04.26 RED HAT INC
  • US11316839B2 patent drawing
  • US11316839B2 patent drawing
  • US11316839B2 patent drawing

AI summary

The technology disclosed herein provides an enhanced access control mechanism that uses a proof-of-work key wrapping system to temporally restrict access to data. An example method may include: determining, by a processing device, characteristics of a computing device; accessing a cryptographic key for accessing content; selecting a set of cryptographic attributes for wrapping the cryptographic key, wherein the set of cryptographic attributes are selected to enable the computing device to derive the cryptographic key from a wrapped key in a predetermined duration of time; and providing the wrapped key and an indication of at least one of the cryptographic attributes to the computing device.