TEE Key Generation and Sharding for Non-Custodial Wallet Security
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing non-custodial digital wallets lack secure management systems for private key data, necessitating improved security measures.
Innovation Solution
Utilizing a trusted execution environment (TEE) for secure key generation, sharding, and management of private keys, combined with a key management system (KMS) to enhance security and user control.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If non-custodial digital wallets are used to give users full control over their funds, then user autonomy and control are improved, but security vulnerabilities and lack of secure management systems for private key data worsen
Solution Approach 1:
The patent segments the private key into multiple shards using secret sharing schemes, distributing them across different secure storage locations including TEEs and hardware security modules. This segmentation allows user control while mitigating security risks by eliminating single points of failure.
Solution Approach 2:
The patent introduces trusted execution environments (TEE) and key management systems as intermediaries between the user and their private keys. These intermediaries provide secure key management operations while maintaining user control, resolving the contradiction between autonomy and security.
2Ease of operation
If traditional wallet storage methods are used, then ease of access and usability are improved, but security against hacking and unauthorized access worsens
Solution Approach 1:
The patent implements nested security structures where TEEs contain key management operations, which in turn contain sharded key segments, which are stored in secure locations. This nested architecture provides layered security while maintaining user accessibility through controlled interfaces.
Solution Approach 2:
The patent combines multiple security technologies (TEE, secret sharing, secure storage) into a composite security system that maintains usability while providing enhanced protection against hacking and unauthorized access.
3Reliability
If private keys are stored in secure locations, then security and protection against loss are improved, but complexity of key management systems worsens
Solution Approach 1:
The patent designs the key management system with universal components that perform multiple functions - TEEs provide both secure key generation and key protection, while the sharding mechanism enables both security and recovery capabilities. This multi-functionality reduces overall system complexity.
Data Source
AI summary
A key management system uses a trusted execution environment (TEE) to generate a private key for a user. The key management system is used to provide network users with a non-custodial wallet, or self-custody wallet, in a safe and secure manner. The key management system provides services to network users including creation of a user's digital wallet, processing of transactions conducted by the user's digital wallet, and recovery process steps to recover the user's digital wallet. Secure applications are provided by the key management system within the TEE. The TEE may be accessible via cloud services as a separate virtual machine being an isolated partition and/or execution environment. All services provided by the key management system are performed within the TEE to ensure data privacy and security. The TEE uses sharding algorithms on private keys generated by users and distributes shards of the private keys on the key management system.