Threshold Key Wallet Access for Secure Multi-Approval Recovery
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing cryptographic key management systems face challenges in securely distributing and accessing keys while maintaining accessibility, as they are often vulnerable to malicious attacks when limited to a single entity.
Innovation Solution
Implementing a multi-approval system using multiple signature (multi-sig) and key splitting methodologies, where M/N keys are distributed across customer devices, currency conversion systems, and trusted third parties, ensuring secure access and recovery through M of N key components.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If a single key is used to access the wallet application, then the ease of operation is improved, but the security and reliability are compromised
Solution Approach 1:
The patent divides the authentication mechanism into multiple independent keys (first key, second key, third key) where no single key can access the wallet application alone. Each key represents a separate authentication factor or user permission, and the system segments the access control into discrete units that must be combined to achieve full access.
Solution Approach 2:
The system requires a threshold number of keys (e.g., 2 out of 3) to be present and authenticated before allowing access to the wallet application. This partial action principle ensures that while full access requires multiple keys, the system can still function with a subset of keys for certain operations, balancing security with operational flexibility.
2Reliability
If multiple keys are required to access the wallet application, then the security is improved, but the device complexity increases
Solution Approach 1:
The patent merges multiple key authentication mechanisms into a unified wallet application access control system. The first key, second key, and third key all authenticate to the same application, and their combined effect is integrated into a single access decision process managed by the computing device, reducing the need for separate complex systems for each key.
Solution Approach 2:
The wallet application serves multiple functions: it can be accessed by different combinations of keys, support various authentication methods (biometric, PIN, hardware token), and provide different levels of access based on which keys are present. This multi-functionality reduces the need for separate applications or systems for different authentication scenarios.
3Reliability
If biometric authentication is used, then the reliability is improved, but the ease of operation may be reduced due to additional steps
Solution Approach 1:
The system dynamically adjusts the authentication process based on which keys are present and the context of the access request. Biometric authentication may be required for certain keys or certain operations, while other keys might use simpler authentication methods. The system adapts the authentication flow in real-time based on the configured key combinations and the specific access request being made.
Data Source
Figure 1
Figure 2A
Figure 2B
AI summary
A computing system that includes at least one processor and at least one memory communicatively coupled to the at least one processor is disclosed. The computing system also includes at least one network interface communicatively coupled to the at least one processor and configured to communicate with at least one vault system, each of the at least one vault system storing a respective one of N private keys or key components associated with a customer. The at least one processor is configured to receive, from each of at least one vault system, a respective private key or key component. The at least one processor is also configured to perform at least one action based on at least M of the N private keys or key components.