Randomizing Cryptographic Key Distribution Across Secure Storage Devices

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Existing cryptographic systems are vulnerable to malicious attacks due to preconfigured secure key storage devices, which can be easily identified and hacked, leading to security threats.

Innovation Solution

A method and system that randomize the distribution of cryptographic keys across multiple secure key storage devices by generating random storage identities (RSIDs) based on user identity, public key, network ID, and key creation date, using a processor-implemented algorithm to create crypto addresses and regenerate new RSIDs, ensuring randomness and opacity to external adversaries.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Ease of operation

If cryptographic keys are stored in preconfigured secure key storage devices, then key management is simplified and deterministic, but the system becomes vulnerable to hacking as storage locations can be easily identified

Engineering Contradiction:
Improvekey management simplicityVSAvoidsecurity against hacking
Core Design Contradiction:
Ease of operationVSReliability

Solution Approach 1:

The patent implements dynamic key distribution by randomly selecting storage devices from the portfolio for each cryptographic operation. Instead of static preconfiguration, the system dynamically determines which storage device holds the key by generating random storage identities (RSIDs) based on operational parameters, making the key location unpredictable and preventing targeted attacks while maintaining operational simplicity through automated random selection

Inventive Principle:
Principle #15Dynamics

Solution Approach 2:

The system changes the parameter of storage device selection from fixed/deterministic to random/variable. By generating RSIDs using randomization based on user identity, public key, network ID, and key creation date, the patent transforms the storage location from a static configuration to a dynamically variable parameter, thereby enhancing security without compromising ease of operation

Inventive Principle:
Principle #35Parameter changes

2Device complexity

If keys are stored in static storage medium, then storage structure is simple and deterministic, but security threats increase as targets are easily identified

Engineering Contradiction:
Improvestorage structure simplicityVSAvoidvulnerability to hacking
Core Design Contradiction:
Device complexityVSObject-affected harmful factors

Solution Approach 1:

The patent introduces dynamics into the storage structure by randomly distributing cryptographic keys across multiple storage devices in the portfolio. The key location is no longer static but dynamically determined through random selection based on operational parameters, transforming the storage structure from a simple fixed configuration to a more complex but secure dynamic distribution system that resists identification and targeting

Inventive Principle:
Principle #15Dynamics

Solution Approach 2:

The system segments the cryptographic key storage across multiple storage devices in the portfolio rather than concentrating it in a single static location. By dividing the key distribution function across multiple devices and using random selection to determine which device holds the key for a given operation, the patent increases structural complexity in a way that enhances security by preventing single-point failures and targeted attacks

Inventive Principle:
Principle #1Segmentation

Data Source

PatentUS12081659B2System and method to randomize distribution of cryptographic keys across multiple secure key storage devices
Publication Date: 2024.09.03 TATA CONSULTANCY SERVICES LTD
  • US12081659B2 patent drawing
  • US12081659B2 patent drawing

AI summary

Existing systems enable secure storage of encryption keys in the form of digital wallets, however, since the keys are preconfigured, they can be prone to malicious attacks. The embodiments herein provide a method and system for randomizing distribution of cryptographic keys across multiple secure key storage devices. The system generates random storage identities (RSIDs) for secure key storage devices by selecting a random storage device from a device portfolio, assigns the RSIDs randomly to create crypto addresses based on random access and partition the devices by deriving crypto addresses. Further, the system generates a user hash function and maps the user hash function to find an associated RSID hash function. The system identifies a device ID, a partition ID and a business date from a device mapper associated with the RSIDs to regenerate new RSIDs and recommends the regenerated new RSIDs randomly to each of the plurality of devices.