Threshold Signature Key Exchange Across Blockchain Networks
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing blockchain-based networks face challenges in facilitating secure and concurrent exchanges of cryptographic keys or tokens between different networks without relying on trusted third parties or specialized environments like TEEs or smart contracts, leading to potential partial transaction failures.
Innovation Solution
A method for cryptographic key distribution across multiple blockchain networks using a server-mediated threshold signature protocol, where each party and the server jointly control portions of cryptographic keys, enabling secure and fair exchanges through incremental, confidential share exchanges.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If a trusted third party is introduced to hold goods in escrow and enforce protocol fairness, then transaction reliability is improved, but device complexity and loss of trust increase
Solution Approach 1:
The cryptographic key is segmented into multiple portions (first portion controlled by the first computing device, second portion controlled by the server). This segmentation eliminates the need for a single trusted third party holding complete control, while still enabling reliable atomic swaps through distributed key management.
Solution Approach 2:
The server acts as an intermediary that facilitates key exchange and transaction validation without requiring full trust. The server mediates the exchange of cryptographic key portions and validates transactions, providing reliability without concentrating control in a single trusted entity.
2Device complexity
If cryptographic keys are exchanged directly between parties without intermediaries, then device complexity is reduced, but transaction reliability deteriorates due to potential partial failures
Solution Approach 1:
The first computing device shares the first portion of the cryptographic key with the second computing device before the actual token exchange occurs. This preliminary key exchange enables both parties to prepare their signatures in advance, ensuring that when the exchange happens, both transactions can be completed atomically without partial failures.
Solution Approach 2:
The server validates transaction details and provides feedback to ensure both parties have completed their obligations before allowing the exchange to proceed. This feedback mechanism ensures transaction reliability by verifying that all conditions are met before finalizing the atomic swap.
3Reliability
If centralized exchanges are used to enforce trade fairness, then transaction reliability is improved, but loss of autonomy and trust in third parties increase
Solution Approach 1:
The system enables parties to perform atomic swaps themselves using distributed threshold signatures without relying on centralized exchanges. The first and second computing devices can independently sign transactions using their respective key portions, with the server providing minimal validation, thus eliminating trust risk while maintaining trade fairness.
4Object-generated harmful factors
If distributed key generation is implemented across multiple parties, then trust in third parties is reduced, but device complexity and communication requirements increase
Solution Approach 1:
The cryptographic key is divided into segments distributed among different parties (first computing device and server), reducing trust risk. The segmentation is implemented through a simplified protocol where each party generates and shares only their portion, avoiding the complexity of full distributed key generation while achieving the same security benefits.
Data Source
Figure 1
Figure 2A
Figure 2B
AI summary
Systems and methods of cryptographic key distribution in a plurality of networks, including: sharing, by a first device, a first portion of a first cryptographic key controlled by a server with a second device, sharing, by the second device, a first portion of a second cryptographic key with the first device, signing a first transaction on a first network with data exchange from a first threshold signature address controlled by the first device, to a third address when one or more details of the first transaction are validated by the server; and signing a second transaction on a second network with data exchange from the second threshold signature address controlled by the second device to a fourth address when one or more details of the second transaction are validated by the server.