Threshold Key Exchange Through Segmented Secret Sharing
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
The Diffie-Hellman key exchange method is vulnerable to a single point of failure if one party's private key is compromised, posing a security risk for sensitive data.
Innovation Solution
A method for generating a shared cryptographic key based on a shared secret, where each participant has a share of a secret with a threshold requirement, ensuring no single party has access to the complete key, and the key is reconstructed only with a threshold number of shares.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of manufacture
If Diffie-Hellman key exchange is used, then key generation is simple and efficient, but security is compromised if one party's private key is leaked
Solution Approach 1:
The patent applies segmentation by dividing the private key into multiple shares distributed among different parties. Instead of relying on a single private key, the system uses threshold secret sharing where no single party holds the complete private key. This resolves the contradiction by maintaining simple key generation while eliminating the single point of failure that compromises security when one key is leaked.
Solution Approach 2:
The patent implements local quality by assigning different levels of access and responsibility to different parties. Each party holds a specific share of the private key with varying weights or importance, allowing the system to maintain security even if some shares are compromised. This differentiated access structure resolves the contradiction by ensuring that local compromises do not compromise overall system security.
2Ease of operation
If a single private key is used for key exchange, then the system is simple to operate, but any compromise of that key compromises all communications
Solution Approach 1:
The patent segments the private key into multiple shares held by different parties, so that compromise of one share does not compromise the entire key. This maintains operational simplicity for the end user while significantly reducing the impact of key compromise, as the system can continue operating with remaining shares.
Solution Approach 2:
The patent implements beforehand cushioning by pre-distributing key shares and establishing threshold requirements before any communication occurs. This preparatory structure ensures that if a key compromise happens, the system already has redundant shares in place to maintain security, cushioning against the harmful effects of compromise.
3Reliability
If threshold secret sharing is implemented, then security is improved by requiring multiple shares, but system complexity increases
Solution Approach 1:
The patent introduces a coordinator or intermediary component that manages the threshold secret sharing protocol. This intermediary handles the complexity of coordinating share collection, verifying thresholds, and reconstructing keys, thereby reducing the operational complexity for participating parties while maintaining high security through threshold requirements.
Solution Approach 2:
The patent implements universality by designing a multi-functional system where the same threshold sharing mechanism serves multiple purposes: key generation, key reconstruction, and security verification. This universal approach reduces overall system complexity by consolidating functions into a single robust framework rather than requiring separate mechanisms for each function.
Data Source
AI summary
A computer-implemented method of generating a shared cryptographic key based on at least one shared secret, wherein each participant belonging to a first group has a respective share of a first secret, the first secret having a first threshold and a corresponding first public key, wherein a second coordinator has a second public key corresponding to a second secret, wherein the second coordinator is configured to generate the same shared cryptographic key.