Invention Grant
- Patent Title: System and method for secure electronic communications through security hardware based on threshold cryptography
-
Application No.: US16067307Application Date: 2016-12-30
-
Publication No.: US10735188B2Publication Date: 2020-08-04
- Inventor: Alejandro Hevia Angulo , Javier Alejandro Bustos Jimenez , Francisco Jose Cifuentes Quijada
- Applicant: UNIVERSIDAD DE CHILE
- Applicant Address: CL Santiago
- Assignee: UNIVERSIDAD DE CHILE
- Current Assignee: UNIVERSIDAD DE CHILE
- Current Assignee Address: CL Santiago
- Agency: Lucas & Mercanti, LLP
- Priority: com.zzzhc.datahub.patent.etl.us.BibliographicData$PriorityClaim@7f8528ea
- International Application: PCT/IB2016/058122 WO 20161230
- International Announcement: WO2017/115338 WO 20170706
- Main IPC: H04L9/08
- IPC: H04L9/08 ; H04L29/06 ; H04L9/32

Abstract:
The present application is directed to a method and system for secure electronic communications using physically distributed security hardware and capable of operating by simulating a common or unitary HSM device. This is achieved by implementing the internal operations of the HSM using threshold cryptography on a set of internal nodes. In order to provide the necessary functionality, the keys and the required operations (such as the digital signature) are distributed among these nodes. In particular, the system provides digital signature capabilities through an efficient and modular application of Victor Shoup's schema referred to in the background. The digital signature process involves the steps of: 1) the signing agent receives a document to be signed and the alias of the key with which the document will be signed; 2) the signing agent place the document in the request queue; 3) the active nodes retrieve the request from the queue; 4) each node signs the request with its piece of key; 5) each node puts its partial signature in the response queue; 6) the signing agent receives the partial signatures and verifies them; 7) if at least k>n/2 valid partial signatures are received, the signature is validated and delivered to the client. Otherwise, an error message is generated.
Public/Granted literature
Information query