Server-Side Key Generation for Smart Card Recovery
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Smart cards do not allow key extraction, making it difficult for users to regain access to encrypted information if the card is lost or unavailable, requiring substantial administrative efforts for replacement and re-authorization.
Innovation Solution
A method and system for generating credentials that involve encrypting a subject private key with a key transport session key, allowing secure storage and recovery of the key or key password, enabling server-side key generation and archival for tokens, such as smart cards, to ensure continued access.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If key extraction is prevented in smart cards to maintain security, then security is improved, but key recovery becomes difficult requiring substantial administrative procedures
Solution Approach 1:
The system segments the key management function into two parts: the smart card retains the private key for security, while a separate key escrow system stores encrypted copies. This segmentation allows the card to maintain security without extraction capability while enabling recovery through the escrow system.
Solution Approach 2:
A key escrow server acts as an intermediary between the smart card and the user. When keys need to be recovered, the user interacts with the escrow system rather than directly accessing the card, enabling recovery without compromising the card's security model.
2Adaptability or versatility
If keys are generated outside the smart card device, then key archiving becomes possible, but key security and protection are weakened
Solution Approach 1:
The system performs preliminary action by encrypting the private key with a key transport session key before it leaves the secure card environment. This encryption is done in advance during key generation, allowing the key to be archived outside the card while maintaining security through cryptographic protection.
Solution Approach 2:
The system changes the state of the key from plaintext to encrypted form (using key transport session key encryption) when moving it from the card to the escrow system. This parameter change (encryption state) allows the key to be stored outside the secure card while maintaining security.
3Reliability
If substantial administrative procedures are required for key replacement, then security control is maintained, but user convenience and access time are reduced
Solution Approach 1:
The key escrow system enables self-service key recovery where users can retrieve their keys automatically through the escrow system without requiring manual administrative intervention. This reduces both the time required and the complexity of administrative procedures while maintaining security through the escrow's controlled access mechanisms.
Data Source
AI summary
A method and system for generating credentials for a token. A server detects a token, determines that the token is to be enrolled, and generates a subject key pair that includes a subject public key and subject private key. The server encrypts the subject private key with a key transport session key to obtain a wrapped private key and forwards the wrapped private key to the token.