Method for secure key management using multi-threshold secret sharing
A method and apparatus are disclosed for managing components of a secret key according to a secret sharing scheme. The disclosed secret sharing scheme divides a secret value, R, into n secret components (R 1 , R 2 , . . . , R n ) and one super component, S, in such a way that R can be computed from (i) any k or more R 1 components (k<n); or (ii) S and any one component of R l . The secret components (R 1 ,R 2 , . . . , R n ) are distributed to a number of authorized users. A multiple threshold secret sharing scheme assigns various users in a group into one of a number of classes. Each user class has a corresponding threshold level that indicates the number of users that must come together with their assigned components to obtain access to the shared secret. The multiple threshold scheme divides the secret into n components each having an assigned threshold level (i.e., the number of such components that are required to obtain the secret). Any component having a lower threshold level can satisfy the role of a component having a higher threshold level. The multiple threshold scheme provides a hierarchical scheme that allows the secret, R, to be shared among different groups of people with different thresholds.
1. A method comprising:
communicating, using at least one processor, a plurality of components of a secret key to a plurality of users, each of the plurality of components having an assigned weight; and
communicating the secret key when the assigned weights associated with the plurality of components satisfies a predefined condition.
2. The method of claim 1 , wherein the plurality of components of a given weight, k, are assigned using points on a k-1 dimensional surface defined using the secret key.
3. The method of claim 2 , wherein the k-1 dimensional surface is defined as follows:
( x 1 −a 1 ) 2 +( x 2 −a 2 ) 2 + . . . +( x k−1 −a k−1 ) 2 =R.
4. A method comprising:
communicating, using a processor, a plurality of components of a secret key and one super-component of the secret key to a plurality of users, each of the plurality of components having an assigned weight; and
communicating the secret key when at least one component of the plurality of components of the secret key is received and the super-component is received.
5. The method of claim 4 , wherein the super-component uniquely defines a surface defined using the secret key.
6. The method of claim 4 , wherein the super-component is a center of a surface defined using the secret key.
7. The method of claim 4 , wherein the super-component is an offset from a center of a surface defined using the secret key.
8. A method comprising:
communicating, using a processor, to a plurality of users a plurality of components of a shared secret, R and a super-component of R, S, where each of the plurality of components have an assigned weight; and
upon receiving from the plurality of users at least one of (i) any one component of the plurality of components of R and the super-component of R, S, and (ii) components having a combined assigned weight above a predefined condition, communicating R to the plurality of users.
9. The method of claim 8 wherein the predefined condition
does not require every component of the plurality of components to meet the predefined condition.