Threshold OPRF Key Management via Secret Sharing
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing Key Management Systems (KMS) face challenges in ensuring secure and reliable key management, especially in cloud-based technologies, where trust in the cloud provider is required, leading to vulnerabilities and security threats, particularly when dealing with encrypted data and encryption keys.
Innovation Solution
The implementation of a Threshold Oblivious Pseudorandom Function (T-OPRF) system, where a quorum of servers computes a key without any single server knowing the key, ensuring no single point of failure or compromise, and the client combines partial outputs to obtain the final key, maintaining key secrecy and security.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Productivity
If a single centralized server or Hardware Security Module is used to manage encryption keys, then key management operations can be performed efficiently, but the system creates a single point of failure and compromise, requiring complete trust in the provider
Solution Approach 1:
The patent divides the secret key into multiple fragments using secret sharing schemes (e.g., Shamir's Secret Sharing). Each fragment is stored on a different server, and no single server possesses the complete key. This segmentation eliminates the single point of failure while maintaining efficient key management operations through distributed computation.
Solution Approach 2:
The patent introduces oblivious pseudorandom functions (OPRF) as an intermediary mechanism that allows clients to perform key management operations without revealing their inputs to servers, and without servers needing to know the complete secret key. This intermediary protocol enables secure, trustless key management where neither party learns information they shouldn't.
2Adaptability or versatility
If cloud-based Key Management Systems are implemented, then key management services become more accessible and scalable, but security threats increase due to required trust in the cloud provider
Solution Approach 1:
The patent converts the potential harm of cloud providers having access to keys into a benefit by using cryptographic protocols (OPRF and secret sharing) that mathematically guarantee the provider cannot learn the keys. The cloud environment's scalability and accessibility are retained while the security threat is transformed into a secure, trustless architecture where the provider's computational power actually strengthens the system's ability to serve multiple clients efficiently.
3Ease of operation
If traditional KMS architectures are used where providers manage keys, then operational simplicity is maintained, but clients are vulnerable to provider malice or negligence
Solution Approach 1:
The patent enables clients to perform self-service key management operations through oblivious pseudorandom functions. Clients can independently derive encryption keys, perform key rotation, and manage their cryptographic materials without the provider ever seeing their secrets. The system maintains operational simplicity through automated protocols while giving clients full control over their key security, eliminating provider vulnerability to malice or negligence.
Data Source
AI summary
A computing device is configured to divide an Oblivious Pseudorandom Function (OPRF) key to generate a plurality of N partial keys, distribute a respective one of the plurality of N partial keys to a corresponding plurality of N Key Management System (KMS) units. The computing device receives from a threshold number T of KMS units, a plurality T partial blinded keys, wherein the plurality T partial blinded keys are based on processing of a value of a blinded key received by a respective KMS unit and a corresponding stored partial key of the N partial keys, combines the plurality T of partial blinded keys into the blinded key, processes the blinded key based on the blinding key in accordance with an OPRF unblinding operation to generate a key and accesses secure information based on the key.