Session Data Processing with Collaborative Private-Key Decryption
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
The security and reliability of session service data are compromised due to the single-point storage of private keys, making them vulnerable to unauthorized leakage during decryption.
Innovation Solution
Implement a collaborative decryption method where private key components are stored on different service terminals, generating a collaborative public key for encryption and requiring joint decryption by multiple terminals to restore session service data.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If the private key is stored in single-point mode on one terminal, then the decryption process is simple and fast, but the security and reliability are compromised due to vulnerability of private key leakage
Solution Approach 1:
The private key is divided into multiple private key components, with each component stored on different service terminals. The complete private key is formed by combining these segmented components during collaborative decryption, eliminating single-point storage vulnerability while maintaining decryption functionality.
Solution Approach 2:
Multiple service terminals collaborate by merging their respective private key components to generate the complete private key for decryption. This combining process enables secure distributed storage while achieving successful decryption through cooperative operation of multiple terminals.
2Object-affected harmful factors
If the private key is stored in single-point mode, then the storage structure is simple, but unauthorized leakage of complete private key occurs easily
Solution Approach 1:
The private key storage structure is segmented across multiple service terminals, with each terminal storing only a portion of the private key. This segmentation eliminates the risk of complete private key leakage while introducing distributed storage complexity.
Solution Approach 2:
A collaborative decryption mechanism acts as an intermediary that coordinates the combination of private key components from multiple terminals. This intermediary process ensures secure key assembly while managing the complexity of distributed storage and retrieval operations.
3Reliability
If collaborative decryption with multiple terminals is implemented, then private key security is improved, but the decryption process becomes more complex and time-consuming
Solution Approach 1:
By segmenting the private key into components distributed across multiple terminals, the system achieves enhanced security without requiring all terminals to perform full decryption operations independently. The segmented approach enables coordinated decryption that balances security with time efficiency.
Solution Approach 2:
Private key components are pre-generated and stored on different service terminals before actual decryption is needed. This preliminary preparation eliminates the need for complex real-time key generation during decryption, reducing the time required for the actual decryption operation while maintaining collaborative security.
Data Source
AI summary
This application provides a data processing method and apparatus, a device, and a medium. The method includes receiving encrypted session data transmitted by a data encryption terminal corresponding to an encryption service object; obtaining a first encrypted data component from the encrypted session data, and generating a random mask configured for masking the first encrypted data component; masking the first encrypted data component by using the random mask to obtain mask data corresponding to the first encrypted data component, and obtaining, based on the first private key component and the mask data, a first decrypted data component corresponding to the first encrypted data component; transmitting the first decrypted data component to the second service terminal; and obtaining the session service data through decryption based on the second decrypted data component and the first encrypted data component.