Secret Sharing Fragment Generation Using Error Correction
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing secret sharing methods are slow to generate fragments, especially with complex techniques, leading to delays in encrypting data, and require access to all fragments for reconstruction, which is inefficient.
Innovation Solution
The method utilizes error correction codes (ECC) to compute and store encrypted key fragments across storage servers, allowing decryption with a threshold number of servers, reducing delays and improving efficiency.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If complex secret sharing techniques are used, then security is improved, but the time to generate fragments increases
Solution Approach 1:
The secret is divided into multiple fragments using error correction codes, where each fragment can be independently stored. This segmentation allows the system to achieve both security (through distribution) and efficiency (through parallel processing and threshold-based reconstruction), resolving the contradiction between complex security requirements and fragment generation time.
2Reliability
If all fragments are required for reconstruction, then security is improved, but the complexity of the system increases
Solution Approach 1:
The patent implements a threshold mechanism where only a subset of fragments (k out of n) is required for reconstruction, rather than requiring all fragments. This partial action approach maintains security while reducing system complexity and operational overhead, as fewer fragments need to be collected and processed for key recovery.
Data Source
AI summary
Utilizing error correction (ECC) for secure secret sharing includes computing an encrypted key using a key and a number of random values, computing, based on a first ECC scheme, a key ECC for the encrypted key and the random values, and storing a number of key fragments on a number of storage servers, the number of key fragments includes the encrypted key, the random values, and the key ECC.