Split Encryption Key Reconstruction for Secure Access
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing cryptographic systems face challenges in securely managing and accessing cryptographic keys, particularly in scenarios where multiple individuals need to collaborate to reconstruct encrypted keys, while minimizing the risk of malicious reconstruction and ensuring key accessibility when needed.
Innovation Solution
The system generates and splits encryption keys into multiple components, using an additional layer of encryption with an encryption key to encrypt the key itself, allowing only a subset of these components to reconstruct both the encrypted key and the encryption key, which are then distributed securely to various users, requiring collaboration for unauthorized access.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If cryptographic keys are stored and managed in traditional centralized systems, then key accessibility is improved, but security against malicious access and unauthorized reconstruction deteriorates
Solution Approach 1:
The patent divides cryptographic keys into multiple key components and distributes them to different users or systems. No single entity possesses the complete key, requiring collaboration among multiple parties to reconstruct and access the encrypted data. This segmentation resolves the contradiction by making key accessibility dependent on authorized collaboration while preventing unauthorized access by any single malicious actor.
Solution Approach 2:
The patent implements nested encryption where an encryption key is used to encrypt the actual cryptographic key, creating layers of protection. The encryption key itself is split into components, and the encrypted key is stored separately. This nested structure ensures that even if one layer is compromised, multiple additional layers remain to protect the underlying cryptographic key and data.
2Adaptability or versatility
If multiple individuals are given access to reconstruct cryptographic keys, then key availability is improved, but the risk of malicious reconstruction increases
Solution Approach 1:
By splitting the encryption key into multiple components and distributing them to different individuals, the system requires a threshold number of participants to reconstruct the key. This segmentation allows key availability through authorized collaboration while preventing malicious reconstruction by any single individual or small unauthorized group.
Solution Approach 2:
The patent implements preliminary security measures by encrypting the cryptographic key with an encryption key before distribution, and by designing the key component distribution scheme to require authorized collaboration. These preliminary anti-actions prevent malicious reconstruction before it can occur by making unauthorized reconstruction computationally infeasible or requiring impossible conditions.
3Reliability
If cryptographic keys are encrypted with an additional encryption key, then security against unauthorized access is improved, but system complexity increases
Solution Approach 1:
The patent applies nested encryption where an encryption key encrypts the cryptographic key, creating protected layers. While this increases structural complexity, the modular design and automated key management processes reduce operational complexity. The nested structure significantly enhances security by adding layers of protection that must all be breached to access the underlying key.
Solution Approach 2:
The encryption key acts as an intermediary between the cryptographic key and potential attackers. This intermediary layer provides an additional security barrier, forcing attackers to compromise the encryption key first before accessing the cryptographic key. The intermediary structure manages complexity by providing a clear, organized approach to key protection.
4Reliability
If key components are distributed to multiple users, then security through collusion requirement is improved, but key management complexity increases
Solution Approach 1:
The patent segments the encryption key into multiple components and distributes them to different users or systems. This segmentation creates a security model where a threshold number of participants must collude to reconstruct the key. While this increases management complexity, it provides robust security by preventing any single point of failure or compromise.
Solution Approach 2:
The key component distribution system is designed to be universal, working with various cryptographic algorithms and key types. The same segmentation and distribution mechanism can protect different cryptographic keys across multiple applications and systems, reducing overall management complexity through standardized procedures and reusable security patterns.
Data Source
AI summary
A system includes processor(s) and memory(s). When encryption key(s) need to be generated to encrypt a key, processor(s): generate encryption key(s); encrypt key using encryption key(s) to generate encrypted key; split encrypted key and encryption key(s) into set(s) of key components, wherein subset of key components can be used to reconstruct encrypted key and encryption key(s); and erase key from memory(s). When encryption key(s) need to be used, processor(s): receive set(s) of key components from subset(s) of users that can be used to reconstruct encrypted key and encryption key(s) used to decrypt key from encrypted key; when set(s) of key components is received from subset(s) of users that can be used to reconstruct encrypted key and encrypted key(s), reconstruct encrypted key and encryption key(s); and when the encrypted key and the encryption key(s) have both been reconstructed, decrypt encrypted key into key using encryption key(s).