Secure Key Replacement for Devices After Private Key Loss
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing systems fail to effectively replace a public key in devices when the corresponding private key becomes unavailable, rendering the devices useless and disrupting authentication capabilities.
Innovation Solution
A system and method for generating a new key pair and distributing replacement commands signed by the active signing server to replace the original public key with a new one, using secure storage and processing units to authenticate and implement the replacement securely.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If the private key is stored securely and cannot be backed up, then security is improved, but the system becomes unreliable when the private key is lost or corrupted
Solution Approach 1:
The system performs preliminary actions by having the active signing server sign replacement commands in advance before the private key is lost. These signed replacement commands are stored securely and can be executed later to replace public keys if the private key becomes unavailable, thus preparing the system ahead of time for potential key loss scenarios
Solution Approach 2:
The patent introduces an intermediary mechanism where replacement commands are signed by the active signing server using the current private key, but these commands can be executed by any party later. This intermediary signed command acts as a trusted mediator that bridges the gap between the lost private key and the need for key replacement, allowing public key replacement without requiring the original private key
2Reliability
If backup copies of the private key are stored, then reliability is improved, but security is compromised
Solution Approach 1:
The patent extracts the replacement capability from the private key itself. Instead of backing up the private key (which would compromise security), the system extracts and stores only the signed replacement commands that were created by the active signing server. These commands contain the necessary information to replace public keys without requiring access to the private key, thus separating the backup function from the private key
3Adaptability or versatility
If devices can overwrite public keys freely, then adaptability is improved, but security is worsened due to spoofing attacks
Solution Approach 1:
The system applies preliminary anti-action by having the active signing server sign the replacement commands in advance using the current private key. This pre-signing creates a cryptographic guarantee that the replacement command is authentic, preventing attackers from spoofing replacement commands. The devices can then freely execute these pre-approved signed commands without fear of spoofing attacks
Data Source
AI summary
A system includes an active signing server including a secure storage and processing unit and an interface. The secure storage and processing unit is configured to store a first private key, generate signatures using the first private key for authentication by devices storing a first public key forming a key pair with the first private key and sign a replacement command using the first private key, the replacement command being configured to be used to instruct the devices to replace the first public key with a second public key forming a key pair with a second private key. The interface is configured to provide the signatures to the devices and the replacement command to at least one entity, which is remote to the active signing server and the devices for storage, the at least one entity including an orchestration server and/or at least one other signing server.