Secret Sharing Information Management System Signcryption
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current secret sharing schemes lack data integrity, origin authenticity, and confidentiality services for generated shares, making them insecure for storage and distribution, and often require paper-based mechanisms for physical security.
Innovation Solution
The SSIMS system uses tokenization and signcryption to protect shares, providing data integrity, origin authenticity, and confidentiality through cryptographic techniques, allowing secure storage and distribution in a distributed ledger or cloud environment, and reducing the strain on processing power and memory.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If traditional secret sharing schemes are used to divide and distribute shares, then the message can be securely distributed among share-holders, but the shares lack data integrity protection, origin authenticity verification, and confidentiality services
Solution Approach 1:
The patent combines multiple cryptographic operations (tokenization, signing, and encryption) into a unified signcryption process. The dealer tokens the original message, signs the tokenized message with their private key, encrypts the signed message with the share-holder's public key, and transmits the signcrypted share. This merging of operations provides comprehensive security (confidentiality, integrity, and authenticity) while reducing the number of separate cryptographic steps required.
Solution Approach 2:
The patent applies tokenization as a preliminary action before signing and encryption. The dealer first tokenizes the original message using a tokenization service, which transforms the sensitive message into a tokenized form. This preliminary tokenization enhances security by ensuring that even if subsequent cryptographic operations are compromised, the original message remains protected. The tokenized message then becomes the input for the signcryption process.
2Reliability
If paper-based mechanisms are used for physical security of shares, then physical security can be maintained, but the system becomes less efficient and more difficult to manage in distributed environments
Solution Approach 1:
The patent replaces mechanical paper-based share management with electronic cryptographic operations. Instead of physically distributing and securing paper shares, the system uses digital signcryption to create electronic shares that can be securely transmitted and stored in distributed ledgers or cloud environments. The cryptographic signatures provide digital authentication that replaces physical security measures, enabling efficient electronic management while maintaining security.
Solution Approach 2:
The patent creates digital copies of the secret share that can be distributed electronically without physical handling. The signcrypted share is a digital representation that can be copied, transmitted, and stored electronically, eliminating the need for physical paper shares while maintaining security through cryptographic protection. Multiple digital copies can be created and distributed to different share-holders without compromising the security of the original.
3Reliability
If comprehensive cryptographic protection is applied to all shares, then security is enhanced, but processing power and memory requirements increase
Solution Approach 1:
The patent segments the cryptographic protection into targeted applications rather than uniformly applying heavy cryptography to all data. The signcryption is applied specifically to the tokenized message portions that need protection during transmission and storage, while the tokenization service handles the sensitive message conversion separately. This segmentation allows comprehensive security where needed while reducing unnecessary computational overhead in other areas.
Data Source
AI summary
Various embodiments relate to a method of receiving an original message, share-holder list, and threshold amount. The original message is tokenized resulting in a tokenized message. A plurality of shares are generated from the tokenized message using a message sharing algorithm of a secret sharing scheme. Each of the plurality of shares is signcrypted using a public key and a private key associated with the shared secret provider computing system and a public key of a respective one of the share-holders included in the share-holders list, resulting in a plurality of signcrypted shares. The plurality of signcrypted shares is distributed to the respective ones of the share-holders according to the public key used to signcrypt the respective signcrypted share. The authenticity and data integrity of the first share of the plurality of signcrypted shares can be determined by using the public key associated and a public/private key pair associated with the share-holder.