公开(公告)号：US09049011B1

公开(公告)日：2015-06-02

申请号：US13967029

申请日：2013-08-14

Applicant: Washington State University Research Foundation

Inventor： Punit Agrawal

IPC: H04L29/00 ,  H04L9/08

CPC classification number: H04L9/085 ,  H04L9/0825 ,  H04L9/0894

Abstract: This disclosure describes a distributed, fault-tolerant security system that enables the secure storage and distribution of private keys. In one implementation, the security system includes a plurality of computing resources that independently store private keys provided by publishers and encrypted using a single security system public key. To protect against malicious activity, the security system private key necessary to decrypt the publication private keys is not stored at any of the computing resources. Rather portions, or shares of the security system private key are stored at each of the computing resources within the security system and multiple security systems must communicate and share partial decryptions in order to decrypt the stored private key.

Abstract translation: 本公开描述了分布式，容错的安全系统，其实现私钥的安全存储和分发。 在一个实现中，安全系统包括多个计算资源，其独立地存储由发布者提供并且使用单个安全系统公钥加密的私钥。 为了防止恶意活动，解密发布私钥所需的安全系统私钥不会存储在任何计算资源上。 相反，安全系统私钥的部分或共享存储在安全系统内的每个计算资源上，并且多个安全系统必须通信和共享部分解密以便解密存储的私钥。