Transformed Password Key Management for Secure Automation
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
In multilayer systems, ensuring secure and automated message transmission is challenging due to the vulnerability of storing cleartext private keys, which can be exploited by hackers, and the economic and time-consuming nature of certificate-based HTTPS protocols.
Innovation Solution
A method where a transformed password is used to acquire and decrypt encrypted messages, allowing for secure message processing without exposing cleartext private keys, and generating transformed passwords for each node to maintain security and automation across the system.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Extent of automation
If cleartext private key is stored at the node for automatic signing process, then automation is achieved, but security is compromised as hackers can easily obtain the private key
Solution Approach 1:
The private key is pre-encrypted with the transformed password before being stored in the node's memory. This preliminary encryption action ensures that the key material is protected at rest, yet can be quickly decrypted when needed for automatic signing operations, resolving the contradiction between automation and security.
2Reliability
If HTTPS protocol with third CA institution is used for message transfer, then security is improved, but cost and time consumption increase
Solution Approach 1:
The patent extracts the certificate authority function from the external CA institution and implements it locally at each node through the transformed password mechanism. Each node can independently verify signatures using the transformed password without needing to communicate with an external CA, eliminating the time-consuming certificate verification rounds while maintaining security.
3Reliability
If transformed password is used to encrypt private key, then security is enhanced by preventing key exposure, but system complexity increases
Solution Approach 1:
The patent transforms the traditional password into a transformed password through a one-way function, changing the parameter representation. This transformed password serves as both the encryption key for protecting the private key and the verification credential, simplifying the system by eliminating the need for separate certificate authorities while enhancing security through the one-way transformation property.
Data Source
AI summary
A computer-implemented data transmission method and system are provided. A first transformed password (PWD) is acquired from the first node, wherein the first transformed PWD is derived from an original PWD. An encrypted message is acquired from the first node, the encrypted message being encrypted with a public key of the first node. A private key of the first node is recovered according to the first transformed PWD, the private key having been encrypted with the first transformed PWD and stored in the second node in advance. The encrypted message is decrypted with the recovered private key to obtain a decrypted message for processing.