Distributed Network Subnet Key Redistribution for Stable Verification
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Distributed networks face challenges in providing computational results, such as state information, to external users in a secure, efficient, and user-friendly manner.
Innovation Solution
A distributed network with a plurality of subnets, each having a static verification key and redistributing secret key shares using a distributed key generation and secret-redistribution protocol, ensuring constant verification keys while adapting to network changes for security and flexibility.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If secret key shares are redistributed to adapt to network changes, then security and flexibility are improved, but verification key management complexity increases
Solution Approach 1:
The system segments the secret key into multiple secret key shares distributed across different nodes. This segmentation allows the secret key to be redistributed among changing node configurations while maintaining security. The verification key remains unified and unchanged, simplifying verification operations while enabling flexible key management through share redistribution.
Solution Approach 2:
The verification key acts as an intermediary that remains constant while the secret key shares change. This intermediary element allows the system to adapt to network changes by redistributing shares without requiring changes to the verification key, thus improving security and flexibility while avoiding increased verification key management complexity.
2Productivity
If static verification keys are maintained for all nodes, then verification efficiency is improved, but adaptability to node changes deteriorates
Solution Approach 1:
The secret key is segmented into multiple shares that can be independently redistributed when nodes join or leave the network. The verification key remains unified and static, maintaining verification efficiency. This segmentation enables the system to adapt to node changes by regenerating only the secret shares while keeping the verification key unchanged.
Solution Approach 2:
The system implements dynamics in the secret key share distribution while maintaining static verification keys. When network topology changes, secret shares are dynamically redistributed among current nodes through a secret redistribution protocol, while the verification key remains static to ensure efficient and simple verification operations.
3Reliability
If distributed key generation is implemented, then security is improved, but key generation time increases
Solution Approach 1:
The system performs preliminary distributed key generation when nodes are initially established or when security updates are required. The verification key is generated in advance and remains static, while secret shares are distributed to nodes. This preliminary action ensures security without requiring time-consuming key generation during routine verification operations.
Solution Approach 2:
Distributed key generation and secret share redistribution are performed periodically or event-driven (when nodes join/leave) rather than continuously. This periodic action maintains security through regular key refreshment while minimizing time loss by avoiding unnecessary key generation during stable network operation.
Data Source
AI summary
According to an embodiment of a first aspect of the invention, there is provided a distributed network comprising a plurality of subnets. Each of the plurality of subnets comprises a changeable set of nodes. The network is configured to generate for each of the plurality of subnets, by a distributed key generation protocol, an individual static verification key of a public-key signature scheme and a first set of corresponding secret key shares for a first set of nodes of the respective subnet. The network is further configured to redistribute, for each of the plurality of subnets, by a secret-redistribution protocol, the secret key shares of the respective first set of secret key shares to a second set of nodes of the respective subnet, thereby creating a second set of secret key shares corresponding to the same static verification key of the respective subnet.Further aspects of the invention relate to a corresponding computer-implemented method, a node, a computer program product and a software architecture.