Multi-source entropy randomness aggregation and distribution network
Systems and methods are presented herein which are configured to provide access to high quality, verifiable random numbers from entropy sources including quantum entropy sources on-demand through application program interfaces (APIs) and other interfaces. A Randomness as a Service (RaaS) provider system can be configured to host an API offering random numbers from a predetermined selection of entropy types and may offer other selections and/or data such as specific entropy source, health check data associated with the random number, source verification data, etc. A RaaS management system can be configured to make requests to one or more RaaS provider systems for random numbers of specific entropy type(s) and then perform cryptographic functions on random numbers and/or pass random numbers to an end user system.
1 . A Randomness as a Service (RaaS) provider system comprising:
one or more processors; and
non-transitory computer-readable medium in communication with the one or more processors with instructions thereon, that when executed by the processor, are configured to cause the RaaS provider system to:
receive, via an Application Program Interface (API), a request for a random number sequence of an entropy type from a predetermined selection of entropy types,
provide, via the API, a response comprising the random number sequence of the entropy type; and
provide, via the API, health check data comprising an indicator of a health check test and a test result of the health check test such that the test result indicates randomness of the random number.
2 . The RaaS provider system of claim 1 , wherein the health check data comprises an indication of internal consistency at a physical hardware level at a point of generation.
3 . The RaaS provider system of claim 1 , wherein the health check data comprises an expected error rate due to noise on a transmission channel over which the random number sequence is transmitted.
4 . The RaaS provider system of claim 1 , wherein the health check data comprises a time stamp.
5 . The RaaS provider system of claim 1 , further comprising:
a quantum entropy appliance, wherein the predetermined selection of entropy types comprises a quantum entropy type associated with the quantum entropy appliance; and
a non-quantum entropy appliance wherein the predetermined selection of entropy types comprises a non-quantum entropy type associated with the non-quantum entropy appliance.
6 . The RaaS provider system of claim 1 , wherein the random number sequence is raw.
7 . The RaaS provider system of claim 1 , wherein the non-transitory computer-readable medium comprises instructions thereon, that when executed by the one or more processors, are configured to cause the RaaS provider system to:
generate the random number sequence by aggregating a plurality of random number sequences from a plurality of sources, wherein the predetermined selection of entropy types comprises an aggregated entropy type.
8 . The RaaS provider system of claim 1 , wherein the non-transitory computer-readable medium comprises instructions thereon, that when executed by the one or more processors, are configured to cause the RaaS provider system to:
generate the random number sequence by tagging a raw random number sequence with a source identification parameter such that the source identification parameter is indicative of a specific entropy source,
wherein receiving, via the API, the request for the random number sequence of an entropy type, comprises receiving, via the API a request for the random number sequence of the entropy type and including the source identification parameter, and
wherein providing, via the API, the random number sequence of the entropy type comprises providing the random number sequence such that the random number sequence includes the source identification parameter.
9 . The RaaS provider system of claim 1 , wherein the non-transitory computer-readable medium comprises instructions thereon, that when executed by the one or more processors, are configured to cause the RaaS provider system to:
provide, via the API, a source verification parameter comprising data that can be cross-compared with the random number sequence to detect tampering and/or degradation of the random number sequence.
10 . A Randomness as a Service (RaaS) management system comprising:
one or more processors; and
non-transitory computer-readable medium in communication with the one or more processors with instructions thereon, that when executed by the processor, are configured to cause the RaaS management system to:
request, from a first RaaS provider system, a first random number sequence and a first entropy type from a predetermined selection of entropy types;
receive, from the first RaaS provider system, the first random number of the first entropy type;
request a health check test from the first RaaS system; and
receive, from the first RaaS system, health check data comprising an indicator of the health check test and a test result of the health check test such that the test result indicates randomness of the first random number.
11 . The RaaS management system of claim 10 , wherein the non-transitory computer-readable medium comprises instructions thereon, that when executed by the one or more processors, are configured to cause the RaaS management system to:
request, from a second RaaS provider system, a second random number sequence and a second entropy type from the predetermined selection of entropy types, wherein the first entropy type is the same as, or different than the second entropy type, and
generate an aggregated random number sequence by aggregating the first random number sequence and the second random number sequence.
12 . The RaaS management system of claim 10 , wherein the non-transitory computer-readable medium comprises instructions thereon, that when executed by the one or more processors, are configured to cause the RaaS management system to:
generate a tagged random number sequence such that the tagged random number sequence comprises the first random number and a source quality parameter such that the source quality parameter is based at least in part on the health check data, and
provide the tagged random number sequence to an external client system.
13 . The RaaS management system of claim 10 , wherein the non-transitory computer-readable medium comprises instructions thereon, that when executed by the one or more processors, are configured to cause the RaaS management system to:
generate a tagged random number sequence such that the tagged random number sequence comprises the first random number sequence and a source identification parameter such that the source identification parameter is indicative of the first RaaS provider system, and
provide the tagged random number sequence to an external client system.
14 . The RaaS management system of claim 10 , wherein the non-transitory computer-readable medium comprises instructions thereon, that when executed by the one or more processors, are configured to cause the RaaS management system to:
generate a tagged random number sequence such that the tagged random number sequence comprises the first random number sequence and an indication of the entropy type, and
provide the tagged random number sequence to an external client system.
15 . The RaaS management system of claim 10 , wherein the non-transitory computer-readable medium comprises instructions thereon, that when executed by the one or more processors, are configured to cause the RaaS management system to:
generate a cryptographic key based on the first random number.
16 . The RaaS management system of claim 10 , comprising:
a firewall configured to communicate with an external network such that the RaaS management system is configured to receive the first random number sequence via the firewall; and
a random distribution service configured to export the first random number sequence to one or more services.
17 . The RaaS management system of claim 10 , wherein the non-transitory computer-readable medium comprises instructions thereon, that when executed by the one or more processors, are configured to cause the RaaS management system to:
generate a tagged random number sequence such that the tagged random number sequence comprises the first random number and a source verification parameter comprising data that can be cross-compared with the random number sequence to detect tampering and/or degradation of the random number sequence, and
provide the tagged random number sequence to an external client system.