Method for providing security using secure computation

• US 9,960,919 B2
• Filed: 01/08/2014
• Issued: 05/01/2018
• Est. Priority Date: 01/08/2013
• Status: Active Grant

• Current Assignee: Coinbase IL RD Limited
• Original Assignee: BAR ILAN University
• Inventors: Lindell, Yehuda
• Primary Examiner(s): Herzog, Madhuri
• Application Number:
  US14/652,454
• Publication Number:
  US 20150349958A1
• Time in Patent Office: 1,574 Days
• CPC Class Codes: G06F 21/31 User authentication
• CPC Class Codes: G06F 21/62 Protecting access to data via a platform, e.g. using keys or access control rules
• CPC Class Codes: G06F 2221/2103 Challenge-response
• CPC Class Codes: H04L 2209/46 Secure multiparty computation, e.g. millionaire problem
• CPC Class Codes: H04L 63/06 for supporting key management in a packet data network cryptographic mechanisms or cryptographic arrangements for key management H04L9/08
• CPC Class Codes: H04L 63/0838 using one-time-passwords
• CPC Class Codes: H04L 63/0861 using biometrical features, e.g. fingerprint, retina-scan cryptographic mechanisms or cryptographic arrangements for entity authentication using biological data H04L9/3231
• CPC Class Codes: H04L 9/085 Secret sharing or secret splitting, e.g. threshold schemes
• CPC Class Codes: H04L 9/3226 using a predetermined code, e.g. password, passphrase or PIN network architectures or network communication protocols for supporting authentication of entities using passwords in a packet data network H04L63/083
• CPC Class Codes: H04L 9/3228 One-time or temporary data, i.e. information which is sent for every authentication or authorization, e.g. one-time-password, one-time-token or one-time-key
• CPC Class Codes: H04L 9/3231 Biological data, e.g. fingerprint, voice or retina network architectures or network communication protocols for supporting authentication of entities using biometrical features in a packet data network H04L63/0861
• CPC Class Codes: H04L 9/3271 using challenge-response

Abstract

A method of securing data, the method comprising: dividing a secret key into a plurality of secret key shares; storing each of the plurality of secret key shares in a different server of a plurality of servers so that none of the servers has access to the secret key and to the secret key share stored in another of the servers; using a server of the plurality of servers to execute a secure computation protocol to determine a value of a function responsive to all of the plurality of secret key shares without providing any of the plurality of servers with access to the secret key and to the secret key share stored in another of the servers; and using the calculated value of the function to secure the data.

Claims

1. A method of authenticating a party for participation in an activity, the method comprising:

dividing a first secret key into a plurality of secret key shares;

storing each of the plurality of the first secret key shares in a different server of a plurality of servers so that none of the servers has access to the secret key share stored in another of the servers;

transmitting a challenge to the party and requesting that the party encrypt the challenge using a second key;

after the party encrypts the challenge using the second key, receiving the encrypted challenge from the party;

executing at the plurality of servers a secure computation protocol to generate encryption of the challenge using the plurality of secret key shares without providing any of the plurality of servers with access to the first secret key and to the secret key share stored in another of the servers;

comparing the encrypted challenge received from the party and the encrypted challenge generated by the plurality of servers to determine whether the second key is equal to the first key; and

enabling the party to participate in the activity if and only if it was determined that the first and second keys are equal.

2. The method according to claim 1 wherein the activity comprises establishing a virtual private network communication channel.

3. The method according to claim 1 wherein the party comprises a communication device.

4. The method of securing data according to claim 1 wherein the first secret key comprises a key used in a Kerberos protocol and the challenge comprises an encryption of a ticket granting ticket (TGT) used by the secure computation protocol.

5. The method of securing data according to claim 1 wherein the first secret key comprises a key used in a Kerberos protocol and the challenge comprises an encryption of a service ticket (ST) used by the secure computation protocol.

6. The method of securing data according to claim 1 wherein the first secret key comprises a feature vector representing a biometric feature.