Private Key Security via Secure Element Authentication
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing cryptographic public-private key security techniques are vulnerable to attacks where imposters obtain private keys through phishing and malware, rendering password-protection schemes ineffective.
Innovation Solution
A method and system that generate and process transaction data to authenticate users before allowing the use of private keys, storing these keys in a secure computer system separate from personal devices, and applying them only after successful authentication, thereby preventing unauthorized access.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If private keys are stored on personal devices trusted by users, then ease of operation is improved, but security is worsened due to malware attacks
Solution Approach 1:
The patent introduces a secure element or hardware security module as an intermediary between the user device and the private key storage. This intermediary securely stores the private key and mediates authentication operations, preventing direct access to the key while enabling convenient user authentication. The secure element acts as a trusted mediator that eliminates the security vulnerability of storing keys on general-purpose devices.
2Reliability
If password-protection schemes are used, then security is improved, but ease of operation is worsened due to additional authentication steps
Solution Approach 1:
The patent implements biometric authentication (fingerprint, facial recognition, iris scanning) that enables the system to automatically verify user identity without requiring manual password entry. The biometric data is captured and compared against stored templates, providing self-service authentication that is both secure and convenient, eliminating the trade-off between security and ease of operation.
3Reliability
If private keys are stored in hardware security modules, then security is improved, but device complexity is worsened
Solution Approach 1:
The patent integrates the secure element directly into the mobile device's processor or system-on-chip, merging the hardware security module functionality with the existing device architecture. This integration approach provides enhanced security against physical attacks and malware while avoiding the added complexity of separate external security modules, as the security functions are combined with the device's core processing units.
Data Source
AI summary
A method for increasing the security of private keys is provided that includes generating transaction data at a device operated by a user and processing the transaction data. Moreover, the method includes determining whether the user permits using a private key that is associated with the user and with a public-private key pair of the user. The private key is stored in a computer system different from the device. Furthermore, the method includes authenticating the user when the user permits using the private key, applying the private key to other data after successfully authenticating the user, and transmitting the other data to the device. The method also includes conducting a transaction with the transaction data.