Pseudonym Generation via Cryptographic Hashing for Privacy
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing computer-implemented schemes for providing access keys to databases often compromise user privacy, as they require third-party involvement to establish a binding between the user's identity and pseudonym, and may not securely store sensitive data like medical information.
Innovation Solution
A method using a user-selected secret, combined with a public parameter through an embedding and randomizing function, generates a pseudonym that is stored as an asymmetric cryptographic key pair, allowing secure access to a database without revealing the user's identity, even if the system is confiscated.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Loss of information
If a pseudonym is provided for user privacy protection, then user anonymity is improved, but the system requires third-party involvement to establish identity binding which compromises privacy
Solution Approach 1:
The patent extracts the third-party authority from the pseudonym generation process. Instead of requiring a trusted authority to bind identities, the system allows users to self-generate pseudonyms using their own secret values through cryptographic hashing, eliminating the need for external intermediaries while maintaining privacy guarantees
Solution Approach 2:
The system enables users to independently generate and manage their own pseudonyms without external assistance. Each user computes their pseudonym by applying a cryptographic hash function to their secret value, allowing them to self-service the entire identity management process while maintaining strong privacy protection
2Ease of operation
If sensitive data is stored in a publicly accessible database, then data accessibility is improved, but security and confidentiality are compromised
Solution Approach 1:
The patent introduces cryptographic hash functions as intermediaries between sensitive data and public storage. The hash of the secret value serves as a pseudonym that can be publicly stored and used for database access, while the actual sensitive data remains protected. This intermediary layer allows public accessibility without compromising security
Solution Approach 2:
The system creates a cryptographic copy (hash) of the secret value that can be safely stored in public databases. This copy serves as the access key while the original secret remains private and unprotected. The copy can be freely distributed and stored without compromising the security of the underlying sensitive information
3Loss of information
If an access key system is implemented without third-party involvement, then user privacy is improved, but the system complexity increases
Solution Approach 1:
The patent replaces complex mechanical or organizational systems (third-party authorities, identity management infrastructure) with a simple cryptographic mechanism. A single hash function computation generates a secure pseudonym, substituting elaborate identity management systems with a mathematically sound but computationally simple operation
Data Source
Figure 1
Figure 2
Figure 3
AI summary
A computer readable storage medium (108, 812, 900) having stored therein instructions, which when executed by a computing device (100, 700, 802, 900) cause the computing device to perform a method of generating an access key (118), the method comprising the steps of: - accessing (500, 600) an input value (116, 714); - calculating (206, 502, 602) an asymmetric cryptographic key pair by applying a cryptographic one-way function (128, 718) to the input value, wherein the cryptographic key pair comprises a public key (118) and a private key (116, 818), wherein the cryptographic one-way function is an injective function; and - outputting (208, 316, 504, 604) the public key for providing the access key.