Quantum-Resistant Key Exchange via Distributed Non-Trusted Server Shares
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Public key encryption systems are vulnerable to decryption by quantum computers using algorithms like Shor's, posing a significant risk for secure communication protocols such as SSL/TLS, especially for banks and other sensitive data handlers.
Innovation Solution
A key exchange system that utilizes a generation stage to create and divide cryptographic keys into multiple parts, a sending stage to distribute these parts among non-trusted third-party servers, and a compilation stage to reassemble the keys for secure communication without requiring collaboration or communication between servers.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If public key encryption is used for secure communication, then communication security is maintained against classical computers, but the system becomes vulnerable to quantum computer decryption using algorithms like Shor's
Solution Approach 1:
The patent segments a single cryptographic key into multiple key shares distributed across different non-trusted third-party servers. Instead of relying on one vulnerable public key system, the secret is divided into N-1 shares stored on separate servers, requiring collaboration of threshold number of servers to reconstruct. This segmentation prevents quantum computers from cracking a single key while maintaining communication security.
2Object-affected harmful factors
If a key exchange system uses non-trusted third-party servers to store key shares, then quantum security is improved, but the system complexity increases due to multiple servers and coordination requirements
Solution Approach 1:
The patent introduces non-trusted third-party servers as intermediaries that hold key shares without needing to communicate or collaborate with each other. These intermediary servers simplify the system architecture by eliminating the need for complex multi-server coordination protocols, while still providing quantum-resistant security through distributed key sharing.
Solution Approach 2:
Each non-trusted third-party server independently stores and manages its own key share without requiring communication or synchronization with other servers. The servers operate autonomously, and the key reconstruction process is handled by the client device that collects shares from multiple servers. This self-service approach reduces system complexity while maintaining security.
3Object-affected harmful factors
If traditional public key encryption is replaced with a multi-server key share system, then quantum resistance is achieved, but the ease of operation decreases due to multiple distribution and collection steps
Solution Approach 1:
The patent performs preliminary key share distribution during an initial setup phase, where the cryptographic key is segmented and distributed to non-trusted third-party servers before actual communication begins. This preliminary action stores the key shares in advance, so that during subsequent communications, the key reconstruction process is simplified and requires minimal operational steps, maintaining ease of use while providing quantum resistance.
Data Source
AI summary
A method of exchanging cryptographic keys capable of providing users with a keyed encryption mechanism for secure communication that bypasses the vulnerabilities of a commonly known public key. In response to concerns about the ability of quantum computing to trivialize the once secure public key encryption methods, the present invention uses non-trusted third parties to exchange grouped encryption keys instead of reliance on a public key. The present invention operates by generating an ordered set of keys and storing them on common authentication servers which function as intermediaries. The recipient is able to retrieve the keys by leveraging the common servers' authentication. The key is unique to each transaction and no parties other than the sender and receiver will generally be able to access the entirety of the necessary keys to decrypt the underlying information.