Secure Storage Key Identifier Salt Embedding
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Secure storage areas require substantial additional cost for improved security, necessitating efficient use of space to minimize stored information without compromising security.
Innovation Solution
Embedding a key identifier into a salt value stored in secure storage, reducing the key identifier's size through compression or sampling, and using a single nonce value per device, along with techniques for synchronization and key reset management.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If separate storage of salt values and key identifiers is implemented, then security is improved, but storage space consumption increases
Solution Approach 1:
The patent combines the salt value and key identifier into a single composite data structure stored in secure storage. Instead of maintaining separate entries for salt values and key identifiers, the system merges these two components into one unified storage unit, thereby reducing the total quantity of stored data while preserving the security benefits of having both components available for authentication verification
Solution Approach 2:
The composite storage structure serves multiple functions simultaneously: it stores the salt value for hashing operations, contains the key identifier for key selection, and provides a unified access interface. This multi-functional design eliminates the need for separate dedicated storage areas for each component, optimizing space utilization while maintaining all necessary security functions
2Quantity of substance
If compression or sampling of key identifier is used, then storage space is reduced, but key identification accuracy may be affected
Solution Approach 1:
The patent applies parameter changes by transforming the key identifier through compression or sampling operations that reduce its size while maintaining its essential identifying characteristics. The compression algorithm is designed to preserve the unique identification properties of the key identifier, ensuring that even in compressed form, it can accurately distinguish between different cryptographic keys and maintain sufficient precision for key retrieval operations
Data Source
AI summary
A secured device has a secure storage area and is configured to communicate with an authentication manager of a key server. A salt and a key identifier of a key are received to the secured device from the key server. Information corresponding to the key identifier is embedded into the salt to create a combined identifier-salt value. The combined identifier-salt value is stored in the secure storage area. The combined identifier-salt value is utilized as additional input to a hash function along with a password. The key is identified using the information corresponding to the key identifier embedded into the salt.