Single Node Multi-Party Encryption for Low Latency Security
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing cryptographic methods, even the most secure ones, suffer from latency issues due to the need for multiple computers to communicate over networks, making them impractical for real-world applications like online banking and e-commerce, and are vulnerable to attacks such as 'cold boot' attacks where hackers can recover cryptographic keys from memory.
Innovation Solution
Implementing multi-party encryption on a single computational node using software modules that split and isolate cryptographic keys, employing garbled circuits and oblivious transfer to secure key portions, and reseeding these keys within noise arrays to prevent key reconstruction, thereby enhancing security and reducing latency.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If multi-party encryption is implemented across multiple computers over a network, then security is improved, but latency and speed deteriorate
Solution Approach 1:
The patent combines multiple software modules that perform multi-party encryption operations within a single computational node, eliminating network communication latency while preserving the security benefits of distributed key management. The modules share memory space and communicate via inter-process communication rather than network protocols.
Solution Approach 2:
The patent introduces a trusted hardware module as an intermediary that securely stores cryptographic keys and provides them to software modules as needed. This mediator enables secure key distribution without requiring continuous network communication between multiple computers, reducing latency while maintaining security.
2Speed
If cryptographic keys are stored in memory for fast access, then speed is improved, but vulnerability to cold boot attacks increases
Solution Approach 1:
The patent segments the cryptographic key into multiple portions and distributes them across different software modules and memory locations. Each module holds only a fragment of the key, making it difficult for attackers to reconstruct the complete key even if they gain access to memory contents through cold boot attacks.
Solution Approach 2:
The patent creates a protected environment for key storage by using trusted hardware modules and secure memory regions that are isolated from general system memory. This inert environment prevents attackers from easily accessing key material even when the system is powered down or reset.
3Reliability
If key portions are distributed across multiple modules, then security is improved, but system complexity increases
Solution Approach 1:
The patent designs software modules with universal interfaces and standardized communication protocols that can handle different cryptographic operations. This multi-functionality reduces the apparent complexity by providing a unified framework that manages key distribution, encryption, and decryption operations across multiple modules.
Data Source
AI summary
A computer node comprising multiple software modules may receive a cryptographic key from a hardware security module. The computer node may use the cryptographic key to produce two key portions, which are distributed to two software modules. These software modules and an optional additional software module may use the key portions in order to encrypt an initial message. The key portions and their locations in memory are periodically updated in order to provide improved cryptographic security.