Virtual Private Key Generation via Credential Factory
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current cloud data security systems face limitations in encrypting large amounts of data due to the size of public and private keys, requiring shared symmetric keys that need secure transportation and are vulnerable to key revocation issues, especially in establishing trust relationships between parties for secure data exchange.
Innovation Solution
A system generates virtual private keys using a credential factory and generator, which creates anonymous user credentials, derives mnemonic words, and uses Elliptic curves to produce secure keys without exposing user information, allowing for secure key regeneration and storage only on the user device, eliminating the need for third-party infrastructure and Certificate Authorities.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If asymmetric keys (public and private key pairs) are used for encryption, then security and trust relationship establishment are improved, but the amount of data that can be encrypted is limited by the key size
Solution Approach 1:
The system segments the encryption function by using asymmetric keys only for key exchange and symmetric keys for actual data encryption. This allows the system to leverage the security of asymmetric encryption while overcoming its limitation on data size through symmetric encryption's ability to handle large volumes of data efficiently.
Solution Approach 2:
The patent introduces symmetric keys as an intermediary between asymmetric key pairs. The asymmetric keys facilitate secure exchange of the symmetric key, which then serves as the mediator for actual data encryption, combining the advantages of both key types.
2Quantity of substance
If symmetric keys are used for encryption, then large amounts of data can be encrypted, but secure transportation of the shared key between parties is required
Solution Approach 1:
Asymmetric key pairs serve as intermediaries to securely transport symmetric keys. The public key encrypts the symmetric key during transmission, and the private key decrypts it at the receiving end, eliminating the need for secure physical key transportation while maintaining symmetric encryption's large data capacity.
Solution Approach 2:
The patent replaces the mechanical/security-physical key transportation system with cryptographic substitution. Instead of physically securing key transport, the system uses mathematical cryptography (asymmetric encryption) to protect key exchange, simplifying the overall security infrastructure.
3Reliability
If a lost PKI private key requires revocation of the public key, then security is maintained, but web transactions and trust relationships are disrupted
Solution Approach 1:
The system changes the parameter of key regeneration by using deterministic derivation from seed phrases. Instead of requiring complete key revocation and re-establishment of trust, the system can regenerate the same private key from the original seed, maintaining both security and transaction continuity.
Solution Approach 2:
The patent performs preliminary action by securely storing the seed phrase that can regenerate private keys. This pre-established recovery mechanism allows for key restoration without disrupting trust relationships, preventing the need for complete system revocation.
4Reliability
If Certificate Authorities and Revocation Lists are used in traditional security systems, then trust verification is established, but system complexity and third-party dependency increase
Solution Approach 1:
The patent extracts and removes the dependency on Certificate Authorities and Revocation Lists from the security system. By using deterministic key derivation from user-controlled seed phrases, the system eliminates the need for third-party trust verification infrastructure while maintaining security through cryptographic principles.
Solution Approach 2:
The system implements self-service security where users generate and control their own cryptographic keys through seed phrases. This eliminates the need for external Certificate Authorities to verify and manage trust relationships, allowing the system to be self-sufficient in establishing security.
Applied Scientific Principles
This section explains which scientific principles are used to turn an abstract innovation direction into a practical engineering solution.
Function Achieved in This Case
This system enables secure data exchange between multiple entities without establishing a trusted relationship, providing persistent and easily regenerable keys, enhancing security by maintaining key secrecy and preventing unauthorized access, while reducing the risk of key revocation and data breaches.
Implementation Method 1
uses Elliptic curves to produce secure keys without exposing user information
Data Source
AI summary
A system for generating a virtual private key using personal credentials, comprising: personal knowledge and a suite of algorithms and methodologies integrated, without using third party information, in such a manner that the private key can be securely generated without exposing the credentials entity.