Virtual Currency Staking for Secure Key Distribution

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Conventional distributed database systems face security issues due to data interception and false node attachment, which encryption alone cannot effectively address, especially in cloud environments where managing node trust and key distribution is challenging.

Innovation Solution

A system that uses virtual currency to secure encryption key distribution between nodes, where nodes must pay with virtual currency to obtain encryption keys, ensuring only trusted nodes receive keys, and employing asymmetric encryption to protect key distribution, while using symmetric encryption for data transfer to maintain speed and security.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If encryption is used to secure communication between nodes, then security against data interception is improved, but the ability to verify node trustworthiness before key distribution remains unresolved

Engineering Contradiction:
ImprovesecurityVSAvoidnode verification complexity
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

The patent introduces a staking mechanism as an intermediary verification layer between nodes. Before receiving encryption keys, nodes must deposit virtual currency as stake, which serves as a credibility guarantee. This staking intermediary resolves the trust verification problem by providing a economic incentive structure that prevents malicious behavior without requiring complex cryptographic proof-of-trust mechanisms.

Inventive Principle:
Principle #24Intermediary (Mediator)

Solution Approach 2:

The patent changes the verification parameter from cryptographic trust proofs to economic stake amount. By requiring nodes to lock up virtual currency as collateral, the system transforms the trust verification problem into a simple parameter check (stake threshold) that is easy to implement and enforce, while maintaining security through economic incentives.

Inventive Principle:
Principle #35Parameter changes

2Reliability

If asymmetric encryption is used for key distribution, then security against key theft is improved, but processing speed deteriorates

Engineering Contradiction:
Improvekey distribution securityVSAvoidprocessing speed
Core Design Contradiction:
ReliabilityVSProductivity

Solution Approach 1:

The patent segments the encryption process into two distinct phases: key distribution phase using asymmetric encryption for security, and data transfer phase using symmetric encryption for speed. This segmentation allows each encryption type to be used where it is most effective, resolving the speed-security tradeoff by applying the right encryption method at the right stage.

Inventive Principle:
Principle #1Segmentation

Solution Approach 2:

The patent performs key exchange using asymmetric encryption as a preliminary action before the main data transfer operation. The secure key distribution happens first in advance, establishing encrypted channels that can then be used for fast symmetric encryption during the actual data transfer, separating the security-critical key exchange from the performance-critical data transmission.

Inventive Principle:
Principle #10Preliminary action

3Productivity

If symmetric encryption is used for data transfer, then processing speed is improved, but key distribution security deteriorates

Engineering Contradiction:
Improvedata transfer speedVSAvoidkey distribution security
Core Design Contradiction:
ProductivityVSReliability

Solution Approach 1:

The patent segments the encryption process into two distinct phases: key distribution phase using asymmetric encryption for security, and data transfer phase using symmetric encryption for speed. This segmentation allows each encryption type to be used where it is most effective, resolving the speed-security tradeoff by applying the right encryption method at the right stage.

Inventive Principle:
Principle #1Segmentation

4Reliability

If firewall restrictions are implemented to control node access, then security against false nodes is improved, but management overhead increases

Engineering Contradiction:
Improvenode access securityVSAvoidmanagement overhead
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

The patent changes the access control parameter from network-level firewall rules to economic stake requirements. Instead of maintaining complex firewall configurations and node whitelists, the system simply checks whether a node has deposited the required virtual currency stake, transforming complex administrative management into a simple automated parameter verification.

Inventive Principle:
Principle #35Parameter changes

Solution Approach 2:

The staking mechanism enables nodes to self-verify their own eligibility for joining the network by checking their own stake balance, eliminating the need for administrators to manually approve or restrict node access through firewalls. The system serves itself by automatically preventing untrusted nodes from joining through the economic barrier.

Inventive Principle:
Principle #25Self-service

Data Source

PatentUS9967091B2Method for enhancing security in distributed systems
Publication Date: 2018.05.08 XEROX CORP
  • US9967091B2 patent drawing
  • US9967091B2 patent drawing
  • US9967091B2 patent drawing

AI summary

A method and system secures an encryption key for utilization on a secured network by receiving, at a trusted node, an encryption key request from a requesting node, the encryption key request including a public encryption key of a public/private encryption key pair associated with the requesting node; determining, at the trusted node, if the requesting node has previously supplied enough virtual currency to support the request; choosing an encryption key for distributing to the requesting node when it is determined the requesting node has enough virtual currency; encrypting the chosen encryption key with the public encryption key of a public/private encryption key pair associated with the requesting node; and sending the encrypted encryption key to the requesting node.