Electronic Signature Token Private Key Backup via Primary-Standby Encryption
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing electronic signature tokens lack an efficient method for backing up private keys, leading to increased maintenance costs and inconvenience when tokens are lost, as the original private key cannot be retrieved.
Innovation Solution
A method and system for backing up a private key of an electronic signature token, involving a primary-backup relationship between two tokens, where one token encrypts and sends the private key to another upon verification of signatures and relationships, allowing secure decryption and backup.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If the private key is stored securely in the electronic signature token making it unreadable by any methods, then the security of user authentication is ensured, but once the token is lost the original private key cannot be obtained requiring application for a new token and re-distribution of key information increasing maintenance cost
Solution Approach 1:
The patent implements preliminary action by establishing a backup mechanism before token loss occurs. The system pre-configures a primary-backup relationship between tokens and enables the backup token to store encrypted private key data, so that when the original token is lost, the backup can immediately restore service without requiring new token application and key re-distribution.
Solution Approach 2:
The patent uses an intermediary approach by introducing a backup electronic signature token as a mediator between the lost original token and the system requiring authentication. The backup token contains encrypted private key information that can be decrypted and used to restore authentication capabilities, serving as an intermediate solution that avoids the need for complete re-issuance of cryptographic keys.
2Reliability
If the private key is made completely secure and unreadable by any external methods, then authentication security is maintained, but the inability to retrieve the key upon token loss increases maintenance cost and time
Solution Approach 1:
The system performs preliminary action by pre-establishing the backup relationship and storing encrypted private key information in advance. This preparation ensures that when token loss occurs, the recovery process can immediately proceed without time-consuming key re-generation and distribution, thus reducing loss of time while maintaining security through the encrypted storage mechanism.
Solution Approach 2:
The patent applies parameter changes by transforming the private key from an unrecoverable state to a recoverable state through encryption with a backup-specific key. The private key remains secure in its original form but can be restored by changing its state through decryption using the backup token's stored encryption key, thus balancing security with recoverability.
3Reliability
If the electronic signature token uses strong encryption to protect the private key, then security is improved, but the complexity of key management and backup procedures increases
Solution Approach 1:
The patent applies segmentation by dividing the key management system into distinct functional components: the primary electronic signature token holding the original private key, the backup electronic signature token storing encrypted copies, and the associated metadata about primary-backup relationships. This segmentation allows each component to have specialized, simplified functions while collectively providing secure key management with backup capabilities.
Solution Approach 2:
The system uses an intermediary approach by introducing structured metadata as a mediator between the cryptographic keys and the backup mechanism. The metadata records primary-backup relationships and guides the decryption process, simplifying the overall complexity by providing clear instructions for key recovery without requiring complex cryptographic protocols.
Data Source
Figure 1
Figure 2
AI summary
Provided are a method and system for backing up the private key of an electronic signature token, the method comprising: a first electronic signature token transmits a private key backup request data packet comprising a fist signature; a second electronic signature token authenticates the first signature in the private key backup request data packet; if the first signature passes authentication, then determining whether the first electronic signature token has a backup relationship with the second electronic signature token; if yes, then encrypting the private key of the second electronic signature token, and transmitting a private key backup response data packet comprising a second signature and the encrypted private key; the first electronic signature token authenticates the second signature in the private key backup response data packet; if the second signature passes authentication, then determining whether the second electronic signature token has a primary-standby relationship with the first electronic signature token; and if yes, then decrypting the encrypted private key.