Device, server and method for providing secret key encryption and restoration

• US 10,020,939 B2
• Filed: 04/28/2016
• Issued: 07/10/2018
• Est. Priority Date: 04/28/2015
• Status: Active Grant

• Current Assignee: Korea University Research and Business Foundation
• Original Assignee: Korea University Research and Business Foundation
• Inventors: Lee, Heejo, Park, Hyundo
• Primary Examiner(s): Li, Meng
• Application Number:
  US15/140,742
• Publication Number:
  US 20160323105A1
• Time in Patent Office: 803 Days
• CPC Class Codes: H04L 9/083 involving central third party, e.g. key distribution center [KDC] or trusted third party [TTP]
• CPC Class Codes: H04L 9/0863 involving passwords or one-time passwords network architectures or network communication protocols for using one-time keys in a packet data network H04L63/067
• CPC Class Codes: H04L 9/0894 Escrow, recovery or storing of secret information, e.g. secret key escrow or cryptographic key storage
• CPC Class Codes: H04L 9/0897 involving additional devices, e.g. trusted platform module [TPM], smartcard or USB

Abstract

The present disclosure includes: a communication module; a memory that stores a secret key encryption and restoration program; and a processor that executes the program, wherein when a request for restoration of a secret key is received from a user, the processor restores the secret key of which restoration is requested on the basis of restoration information received from each of a key management server and one or more trusted devices according to execution of the program, the secret key of the user is generated and encrypted by the processor in response to the request from the user, and the restoration information is generated corresponding to the secret key and then transmitted to each of the key management server and the one or more trusted devices through the communication module.

Claims

1. A secret key encryption and restoration device, comprising:

a communication module;

a memory that stores a secret key encryption and restoration program; and

a processor that executes the program,

wherein when a request for restoration of a secret key is received from a user, the processor restores the secret key of which restoration is requested on the basis of restoration information received from each of a key management server and one or more trusted devices according to execution of the program,

the secret key of the user is generated and encrypted by the processor in response to the request from the user, and

the restoration information is generated corresponding to the secret key and then transmitted to each of the key management server and the one or more trusted devices through the communication module,

wherein the restoration information includes one or more restoration coordinate information and parameters generated on the basis of the secret key, and

the processor transmits the one or more restoration coordinate information to the trusted devices and transmits the parameters to the key management server,

wherein a number of the trusted devices is equal to or higher than a minimum number of the one or more restoration coordinate information,

wherein the parameters include a prime number (p) used in a restoration coordinate generation process, a number (n) of coordinates (x, f(x)) for restoration, a number (k) of the trusted devices, and a coefficient (i) that has the same value as the secret key in a secret key restoration polynomial, and the one or more restoration coordinate information are k number of coordinates (x, f′

(x), m) selected among n number coordinates and defined by the equation below;

(x₀,f′

(x₀),m₀),(x₁,f′

(x₁),m₁), . . . ,(x<sub>k−

1</sub>,f′

(x<sub>k−

1</sub>),m<sub>k−

1</sub>),

wherein (m) is a quotient added to each of the coordinates for restoration, and

f′

(x) is derived from the equation f′

(x)=f(x)(mod p).

2. The secret key encryption and restoration device of claim 1,

wherein the processor generates a password when generating the secret key, and

when the restoration is requested, the processor decrypts the encrypted secret key on the basis of the generated password.

3. The secret key encryption and restoration device of claim 2,

wherein after the secret key is restored, the processor generates the encrypted secret key on the basis of the password.

4. The secret key encryption and restoration device of claim 2,

wherein after the secret key is restored, the processor generates a local key, and

the processor generates the encrypted secret key on the basis of the password and the generated local key.

5. The secret key encryption and restoration device of claim 2,

wherein when the secret key is generated, the processor generates a local key and transmit the generated local key to the key management server, and

when a request for resetting of the password is made, the processor transmits the resetting request to the key management server, receives the local key from the key management server, and decrypts the encrypted secret key on the basis of the received local key and regenerates the encrypted secrete key and the password on the basis of the decrypted secret key.

6. The secret key encryption and restoration device of claim 5, further comprising:

an input module,

wherein the processor performs decryption of the encrypted secret key on the basis of the local key and a temporary key input by the user through the input module, and

the temporary key is generated by the key management server and then transmitted to the user by the key management server.

7. A secret key encryption and restoration method in a

device, comprising:

receiving, by the device, each restoration information from a key management server and one or more trusted devices in response to a request for restoration of a secret key of a user; and

performing, by the device, restoration of the secret key of which restoration is requested on the basis of the received restoration information,

wherein the secret key is generated by the device and then encrypted, and

the restoration information is generated corresponding to the secret key and then transmitted to the key management server and the one or more trusted devices,

wherein the restoration information includes one or more restoration coordinate information and parameters generated on the basis of the secret key,

the one or more restoration coordinate information is transmitted to the trusted devices and the parameters are transmitted to the key management server,

wherein a number of the trusted devices is equal to or higher than a minimum number of the one or more restoration coordinate information,

wherein the parameters include a prime number (p) used in a restoration coordinate generation process, a number (n) of coordinates (x, f(x)) for restoration, a number (k) of the trusted devices and a coefficient (i) that has the same value as the secret key in a secret key restoration polynomial, a quotient (m) added to each of the coordinates for restoration, and the one or more restoration coordinate information are k number of coordinates selected among n number coordinates (x, f′

(x), m) and defined by the equation below;

(x₀,f′

(x₀),m₀),(x₁,f′

(x₁),m₁), . . . ,(x<sub>k−

1</sub>,f′

(x<sub>k−

1</sub>),m<sub>k−

1</sub>),

wherein (m) is a quotient added to each of the coordinates for restoration, and

f′

(x) is derived from the equation f′

(x)=f(x)(mod p).

8. The secret key encryption and restoration method of claim 7, further comprising:

prior to the receiving of each restoration information,

generating, by the device, a password when the device generates the secret key;

encrypting, by the device, the secret key on the basis of the password; and

decrypting, by the device, the encrypted secret key on the basis of the password.

9. The secret key encryption and restoration method of claim 8, further comprising:

after the performing of restoration of the secret key,

generating, by the device, the encrypted secret key on the basis of the restored secret key and the password.

10. The secret key encryption and restoration method of claim 8, further comprising:

after the performing of restoration of the secret key,

generating, by the device, a local key; and

generating, by the device, the encrypted secret key on the basis of the password and the generated local key.

11. The secret key encryption and restoration method of claim 8, further comprising:

after the encrypting of the secret key on the basis of the password,

transmitting, by the device, a request for resetting of the password to the key management server when the resetting request is made;

receiving, by the device, a local key from the key management server;

decrypting, by the device, the encrypted secret key on the basis of the received local key; and

regenerating, by the device, the encrypted secret key and the password on the basis of the decrypted secret key,

wherein the local key is generated by the device when the secret key is generated, and then transmitted to the key management server.

12. A non-transitory computer-readable storage medium having stored therein a program causing a computer to execute a secret key encryption and restoration process comprising:

receiving, by the computer, each restoration information from a key management server and one or more trusted devices in response to a request for restoration of a secret key of a user; and

performing, by the computer, restoration of the secret key of which restoration is requested on the basis of the received restoration information,

wherein the secret key is generated by the computer and then encrypted, and

the restoration information is generated corresponding to the secret key and then transmitted to the key management server and the one or more trusted devices,

wherein the restoration information includes one or more restoration coordinate information and parameters generated on the basis of the secret key,

the one or more restoration coordinate information is transmitted to the trusted devices and the parameters are transmitted to the key management server,

wherein a number of the trusted devices is equal to or higher than a minimum number of the one or more restoration coordinate information,

wherein the parameters include a prime number (p) used in a restoration coordinate generation process, a number (n) of coordinates (x, f(x)) for restoration, a number (k) of the trusted devices and a coefficient (i) that has the same value as the secret key in a secret key restoration polynomial, and a quotient (m) added to each of the coordinates for restoration, and the one or more restoration coordinate information are k number of coordinates (x, f′

(x), m) selected among n number coordinates and defined by the equation below;

(x₀,f′

(x₀),m₀),(x₁,f′

(x₁),m₁), . . . ,(x<sub>k−

1</sub>,f′

(x<sub>k−

1</sub>),m<sub>k−

1</sub>),

wherein (m) is a quotient added to each of the coordinates for restoration, and

f′

(x) is derived from the equation f′

(x)=f(x)(mod p).