Secure Data Transfer via Untrusted Intermediary
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
There is a need for a secure method to transfer secret data from a primary trusted storage device to a secondary trusted storage device using an untrusted intermediary device, as existing methods are insecure due to the risk of data interception and unauthorized access.
Innovation Solution
The method involves establishing a connection between the primary and secondary authentication devices through an untrusted intermediary device, verifying the authenticity of the secondary device using attestation signatures and certificates, and then encrypting the secret information using a unique transfer key before transmission.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Adaptability or versatility
If secret information is transferred through an untrusted intermediary device, then data transfer capability is improved, but security against data interception deteriorates
Solution Approach 1:
The patent introduces a trusted intermediary (the secure element device) that mediates the key exchange process between two devices. This trusted intermediary holds the secret information and facilitates secure communication without exposing the secret to the untrusted intermediary device, thus resolving the contradiction between transfer capability and security.
Solution Approach 2:
The patent extracts the secret information from the untrusted intermediary device by implementing a protocol where the secret never resides in the untrusted device. Instead, the untrusted device only handles public keys and encrypted data, while the secret information is extracted and stored only in trusted secure elements, eliminating the security vulnerability.
2Ease of operation
If seed phrase is used for wallet restoration, then accessibility is improved, but security against unauthorized access deteriorates
Solution Approach 1:
The patent replaces the mechanical/system-based seed phrase approach with a hardware-based secure element system. Instead of using human-readable words that can be copied or lost, the system uses cryptographic keys stored in secure hardware devices with controlled interfaces, providing both accessibility through device connectivity and security through hardware protection.
Solution Approach 2:
The patent creates a composite security system combining multiple trusted devices (secure elements) that work together to protect the secret information. This composite approach distributes trust across multiple hardware components rather than relying on a single vulnerable seed phrase, enhancing both accessibility and security.
Data Source
AI summary
Techniques described herein relate to a method for transmitting secret information to a trusted device via an untrusted intermediary device, the method comprising: establishing, by a primary authentication device, a connection with a secondary authentication device via an untrusted intermediary device; receiving, from the secondary authentication device, a secondary public transfer key, a secondary public device key, a secondary attestation signature, and a secondary certificate; in response to verifying that the secondary certificate confirms the secondary public device key and that the secondary attestation signature confirms the primary public transfer key and the secondary public transfer key, calculating a transfer key unique to a transfer of the secret information; encrypting the secret information with the transfer key; and transmitting, to the secondary authentication device via the untrusted intermediary device, the encrypted secret information, wherein the secondary authentication device is configured to decrypt the encrypted secret information.