Threshold Signature Scheme for Anonymous Selection Verification

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Existing computer-based selection systems face challenges in verifying individual selections while maintaining anonymity, especially when multiple entities are involved.

Innovation Solution

The implementation of an identity-based threshold signature scheme, where a signing key is split into shares and partial signatures are generated for each entity, allowing for the combination into a threshold signature that can be verified without revealing which entity selected which option, ensuring selection verifiability and anonymity.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If traditional selection verification methods are used, then selection verifiability is improved, but entity anonymity deteriorates

Engineering Contradiction:
Improveselection verifiabilityVSAvoidentity anonymity
Core Design Contradiction:
ReliabilityVSLoss of information

Solution Approach 1:

The selection system segments the verification process by using separate cryptographic components: each entity receives a unique share of the signing key, and each selection is verified through individual partial signatures. This segmentation allows verification of selection validity without revealing which entity made which selection, resolving the contradiction between verifiability and anonymity.

Inventive Principle:
Principle #1Segmentation

Solution Approach 2:

The patent introduces cryptographic intermediaries (threshold signature scheme, partial signatures, and key shares) that mediate between the need for verification and the need for anonymity. These intermediaries enable verification of selection authenticity while preventing traceability to specific entities, thus resolving the technical contradiction.

Inventive Principle:
Principle #24Intermediary (Mediator)

2Reliability

If selection verification is implemented for multiple entities, then selection reliability is improved, but system complexity worsens

Engineering Contradiction:
Improveselection verificationVSAvoidsystem complexity
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

The threshold signature scheme serves multiple functions simultaneously: it provides selection verification, maintains entity anonymity, enables threshold-based decision making, and prevents individual entity control. This multi-functionality reduces overall system complexity by consolidating multiple requirements into a single cryptographic framework.

Inventive Principle:
Principle #6Universality (Multi-functionality)

3Reliability

If threshold signature combination is required, then selection security is improved, but processing time worsens

Engineering Contradiction:
Improveselection securityVSAvoidprocessing time
Core Design Contradiction:
ReliabilityVSLoss of time

Solution Approach 1:

The system performs preliminary actions by pre-distributing key shares to entities before the selection process begins. This preliminary key distribution enables efficient real-time signature generation and verification during the actual selection process, reducing processing time while maintaining security requirements.

Inventive Principle:
Principle #10Preliminary action

Data Source

PatentUS11621854B2Anonymous and verifiable computer-implemented selection system
Publication Date: 2023.04.04 SAP SE
  • US11621854B2 patent drawing
  • US11621854B2 patent drawing
  • US11621854B2 patent drawing

AI summary

User-generated messages encapsulating selections from each of a plurality of entities for a selection task having a selection option are received via one or more interfaces presented by a selection processing system. For each selection, a different share of a signing key is obtained that has an identity associated with the selection task. For each selection, a different partial signature is generated by signing the messages using the associated share of the signing key. The partial signatures are combined into a threshold signature if a number of entities for a selection option specified by the task exceeds a pre-defined threshold. Data characterizing the results of the selection task can then be provided.