Method for securing a private key
Systems and methods are provided for securing a private key on a mobile device for use with public key cryptography. Specifically, a private key is reduced to two partial keys where the partial keys are stored on separate electronic devices. The partial keys combine to temporarily regenerate the private key for the purposes of notarizing (digitally signing) messages or documents, and decrypting a message or document that was encrypted using the corresponding public key. The partial keys in some embodiments may be a secret key, which can be derived from an account identifier and a password, and an exclusive key, which can be derived from the secret key and the private key. The private key can be regenerated from the secret key and the exclusive key. With the partial keys stored on separate devices, another layer of practical security is provided to public key cryptography.
1. A method for regenerating a private key k, comprising:
providing a mobile device and a wearable device having a button, and pairing the mobile device and the wearable device via a wireless communication protocol;
applying a bit-wise exclusive-or function XOR to a hash of a password value and a hash of an identification value to generate a secret key S, wherein the hash of the password value and the hash of the identification value are each bit strings having the same predetermined length, and the secret key S is stored on the mobile device,
providing a private key k associated with a public key K, wherein the secret key S and the private key k are each bit strings having the same predetermined length;
applying a bit-wise exclusive-or function XOR to the secret key S and the private key k to generate an exclusive key X, wherein the exclusive key X is stored on the wearable device;
entering an input on the mobile device to transmit the secret key S from the mobile device to the wearable device; and
pressing the button on the wearable device to regenerate the private key k on the wearable device by applying a bit-wise exclusive-or function XOR to the secret key S from the mobile device and the exclusive key X from the wearable device.
2. The method of claim 1 , further comprising:
applying a bit-wise exclusive-or function XOR to the secret key S and a new private key k′ associated with a new public key K′ to generate a new exclusive key X′.
3. The method of claim 2 , further comprising:
applying a bit-wise exclusive-or function XOR to the secret key S and the new exclusive key X′ to regenerate the new private key k′.
4. The method of claim 3 , further comprising:
verifying the regenerated new private key k′ using the associated public key K′;
using the regenerated new private key k′ to notarize (digitally sign) a bit string; and
deleting the regenerated private key k′.
5. The method of claim 4 , wherein the notarized (digitally signed) bit string is one of data, a symmetric key, a document, and a message.
6. The method of claim 4 , further comprising:
prompting, after verifying the regenerated new private key k′, an owner of the regenerated new private key k′ to approve the using step on the wearable device, wherein the using step is executed only if the owner responds to the prompt by pressing the button on the wearable device.
7. The method of claim 3 , further comprising:
verifying the regenerated new private key k′ using the associated public key K′;
using the regenerated new private key k′ to decrypt a bit string that was encrypted using the new public key K′ that corresponds to the regenerated new private key k′; and
deleting the regenerated new private key k′.
8. The method of claim 7 , wherein the encrypted bit string is one of data, a symmetric key, a document, and a message.
9. The method of claim 7 , further comprising:
prompting, after verifying the regenerated new private key k′, an owner of the regenerated new private key k′ to approve the using step on the wearable device, wherein the using step is executed only if the owner responds to the prompt by pressing the button on the wearable device.
10. The method of claim 1 , further comprising:
verifying the regenerated private key k using the associated public key K;
using the regenerated private key k to notarize (digitally sign) a bit string; and
deleting the regenerated private key k.
11. The method of claim 3 , wherein the notarized (digitally signed) bit string is one of data, a symmetric key, a document, and a message.
12. The method of claim 10 , further comprising:
prompting, after verifying the regenerated private key k, an owner of the regenerated private key k to approve the using step on the wearable device, wherein the using step is executed only if the owner responds to the prompt by pressing the button on the wearable device.
13. The method of claim 1 , further comprising:
verifying the regenerated private key k using the associated public key K;
using the regenerated private key k to decrypt a bit string that was encrypted using the public key K that corresponds to the regenerated private key k; and
deleting the regenerated private key k.
14. The method of claim 13 , further comprising:
prompting, after verifying the regenerated private key k, an owner of the regenerated private key k to approve the using step on the wearable device, wherein the using step is executed only if the owner responds to the prompt by pressing the button on the wearable device.
15. The method of claim 13 , wherein the encrypted bit string is one of data, a symmetric key, a document, and a message.
16. The method of claim 1 , further comprising:
storing the secret key S in a non-transitory computer-readable storage medium on the mobile device; and
storing the exclusive key X in a non-transitory computer-readable storage medium on the wearable device.
17. The method of claim 16 , wherein the wearable device is a human implantable device.
18. The method of claim 1 , further comprising:
storing the secret key S in a non-transitory computer-readable storage medium on a laptop computer; and
storing the exclusive key X in a non-transitory computer-readable storage medium on the wearable device.
19. The method of claim 18 , wherein the wearable device is a human implantable device.
20. The method of claim 1 , wherein the bit-wise exclusive-or function XOR is part of an advanced encryption standard, a blowfish cipher, a triple DES cipher, and a XOR cipher.
21. The method of claim 1 , wherein pressing the button causes the wearable device to at least one of (i) notarize a bit string, (ii) encrypt a bit string, and (iii) decrypt a bit string using the regenerated private key k.
22. The method of claim 1 , further comprising:
regenerating the secret key S in another instance by applying a bit-wise exclusive-or function XOR to the hash of the password value and the identification value.
23. A system for regenerating a private key k, comprising:
a mobile device having a touchscreen and a non-transitory computer-readable storage medium that is configured to process:
a secret key S that is a bit-wise exclusive-or function XOR of a hash of a password value and a hash of an identification value, wherein the hash of the password value and the hash of the identification value are each bit strings having the same predetermined length;
a wearable device that is paired with the mobile device via a wireless communication protocol, the wearable device having a button and a non-transitory computer-readable storage medium that is configured to process:
a private key k in a first instance and a public key K that verifies the private key k, the private key k is a bit string having the same predetermined length as the secret key S;
an exclusive key X that is a bit-wise exclusive-or function XOR of secret key S provided by the mobile device, upon receiving an input on the touchscreen of the mobile device, and the private key k; and
a regenerated private key k in a second instance, upon pressing the button of the wearable device, that is a bit-wise exclusive-or function XOR of the exclusive key X provided by the wearable device and the secret key S provided by the mobile device.
24. A method for notarizing a message M using a regenerated private key k, comprising:
providing a mobile device and a wearable device having a button, wherein a secret key S is stored on the mobile device and an exclusive key X is stored on the wearable device, wherein the exclusive key X is the result of a bit-wise exclusive-or function XOR to a private key k and the secret key S, the keys are bit strings having the same predetermined length, and a public key K is associated with the private key k;
pairing the mobile device and the wearable device via a wireless communication protocol;
prompting the mobile device to transmit the secret key S and a message M from the mobile device to the wearable device;
regenerating the private key k on the wearable device by applying a bit-wise exclusive-or function XOR to the secret key S from the mobile device and the exclusive key X from the wearable device;
pressing the button on the wearable device to:
(i) notarize the message M on the wearable device using the regenerated private key k to create a notary seal N;
(ii) delete the regenerated private key k on the wearable device;
(iii) transmit the notary seal N from the wearable device to the mobile device; and
verifying that the notary seal N corresponds to the message M using the public key K on the mobile device.
25. The method of claim 24 , wherein the prompting step comprises entering an input on a touchscreen of the mobile device.
26. The method of claim 24 , wherein the secret key S is the bit-wise exclusive-or function XOR of a hash of a password value and a hash of an identification value, wherein the hash of the password value and the hash of the identification value are each bit strings having the same predetermined length.