Utilization of a proxy technique in escrow encryption key usage
In one or more embodiments, an encryption key of a device may be split into multiple segments. One of the segments may be retained by an owner of the device, and some of the segments may be distributed to multiple entities. For example, one of the segments may be provided to a service provider, and one of the segments may be provided to an escrow agent. The escrow agent may process its segment, provide information based on its segment to a public ledger, and destroy its segment. A proxy agent may retrieve, from the public ledger, the information based on the segment provided to the escrow agent and obtain compensation. When the proxy agent obtains the compensation, the public ledger exhibits information utilizable to obtain the segment provided to the escrow agent. With the segments provided to the escrow agent and the service provider, the encryption key may be obtained.
1. A method, comprising:
obtaining, via a network, a single key segment of a plurality of key segments utilizable to produce a master symmetric encryption key utilized to encrypt and decrypt data of a mobile computing device;
encrypting the single key segment, utilizing a result of a cryptographic hash process, to produce first encrypted data;
producing a first private encryption key and a first public encryption key, wherein the first public encryption key is produced from the first private encryption key, wherein each of the first private encryption key and the first public encryption key is for utilization in an asymmetric cryptographic process, and wherein each of the first private encryption key and the first public encryption key is different from the master symmetric encryption key;
encrypting, via the asymmetric cryptographic process, the first encrypted data, utilizing the first private encryption key, to produce second encrypted data;
providing, via the network, the second encrypted data to a public ledger;
encrypting the first private encryption key, utilizing the result of the cryptographic hash process, to produce third encrypted data; and
providing, via the network, the third encrypted data to a proxy agent computer system.
2. The method of claim 1 , further comprising:
providing, via the network and to the public ledger, compensation associated with a cryptographic hash of the first public encryption key.
3. The method of claim 2 , wherein the compensation is at least one of a null or zero value.
4. The method of claim 1 , further comprising:
destroying at least one of the single key segment and the first private encryption key.
5. The method of claim 1 , wherein the single key segment was produced via a threshold secret sharing process.
6. The method of claim 1 , further comprising:
encrypting, utilizing a second private key, a contract to produce an encrypted contract, wherein the contract includes one or more terms to satisfy to release information utilizable to obtain the single key segment; and
providing the encrypted contract to the public ledger.
7. The method of claim 1 , further comprising:
providing a contract to the public ledger.
8. The method of claim 1 , wherein the public ledger includes a blockchain.
9. The method of claim 8 , wherein the blockchain is a bitcoin blockchain.
10. One or more computer-readable non-transitory storage media that includes processor-executable instructions, that when executed via a processor of a system, the system:
obtains, via a network, a single key segment of a plurality of key segments utilizable to produce a master symmetric encryption key utilized to encrypt and decrypt data of a mobile computing device;
encrypts the single key segment, utilizing a result of a cryptographic hash process, to produce first encrypted data;
produces a first private encryption key and a first public encryption key, wherein the first public encryption key is produced from the first private encryption key, wherein each of the first private encryption key and the first public encryption key is for utilization in an asymmetric cryptographic process, and wherein each of the first private encryption key and the first public encryption key is different from the master symmetric encryption key;
encrypts, via the asymmetric cryptographic process, the first encrypted data, utilizing the first private encryption key, to produce second encrypted data;
provides, via the network, the second encrypted data to a public ledger;
encrypts the first private encryption key, utilizing the result of the cryptographic hash process, to produce third encrypted data; and
provides, via the network, the third encrypted data to a proxy agent computer system.
11. The one or more computer-readable non-transitory storage media of claim 10 , wherein the one or more computer-readable non-transitory storage media further stores processor-executable instructions that when executed via the processor, the system:
provides, via the network and to the public ledger, compensation associated with a cryptographic hash of the first public encryption key.
12. The one or more computer-readable non-transitory storage media of claim 11 , wherein the compensation is at least one of a null or zero value.
13. The one or more computer-readable non-transitory storage media of claim 10 , wherein the one or more computer-readable non-transitory storage media further stores processor-executable instructions that when executed via the processor, the system:
destroys at least one of the single key segment and the first private encryption key.
14. The one or more computer-readable non-transitory storage media of claim 10 , wherein the single key segment was produced via a threshold secret sharing process.
15. The one or more computer-readable non-transitory storage media of claim 10 , wherein the one or more computer-readable non-transitory storage media further stores processor-executable instructions that when executed via the processor, the system:
encrypts, utilizing a second private key, a contract to produce an encrypted contract, wherein the contract includes one or more terms to satisfy to release information utilizable to obtain the single key segment; and
provides the encrypted contract to the public ledger.
16. The one or more computer-readable non-transitory storage media of claim 10 , wherein the one or more computer-readable non-transitory storage media further stores processor-executable instructions that when executed via the processor, the system:
provides a contract to the public ledger.
17. The one or more computer-readable non-transitory storage media of claim 10 , wherein the public ledger includes a blockchain.
18. The one or more computer-readable non-transitory storage media of claim 17 , wherein the blockchain is a bitcoin blockchain.
19. A method, comprising:
receiving, via a network, first encrypted data, encrypted from first data via a symmetric cryptographic process, wherein the first data includes a private encryption key associated with a first asymmetric encryption process;
receiving, via the network and a public ledger, second encrypted data, encrypted from second data via a second asymmetric cryptographic process corresponding to an identification of a computing device;
decrypting, via the second asymmetric cryptographic process, the second encrypted data to obtain the second data;
decrypting, via the symmetric cryptographic process utilizing a cryptographic hash of the second data, the first encrypted data to obtain the private encryption key;
providing, via the network, the private encryption key to the public ledger;
after the providing the private encryption key to the public ledger, receiving, via the network and the public ledger, a public encryption key associated with the private encryption key and associated with the first asymmetric encryption process;
decrypting, via the first asymmetric encryption process utilizing the public encryption key, third encrypted data to obtain third data that includes fourth encrypted data, which was encrypted from fourth data that includes a key segment of a plurality of key segments utilizable to produce a master symmetric encryption key utilized to encrypt and decrypt data of the computing device; and
decrypting, via the symmetric encryption process, the fourth encrypted data to obtain the key segment.
20. The method of claim 19 , further comprising:
monitoring the public ledger for the compensation corresponding to the identification of the computing device.
21. The method of claim 19 , further comprising:
receiving, via the public ledger, the compensation in response to the providing, via the network, the private encryption key to the public ledger.
22. The method of claim 19 , wherein the compensation is at least one of a null or zero value.
23. The method of claim 19 , further comprising:
determining the cryptographic hash of the second data.
24. The method of claim 19 , wherein the second encrypted data was encrypted via the second asymmetric cryptographic process utilizing a first encryption key.
25. The method of claim 19 , wherein the identification of the computing device is an account identification of an account of the public ledger.
26. The method of claim 19 , wherein the receiving, via the network, the first encrypted data, encrypted from the first data includes receiving the first encrypted data from an escrow agent computer system.
27. The method of claim 19 , wherein the public ledger includes a blockchain.
28. The method of claim 27 , wherein the blockchain is a bitcoin blockchain.
29. One or more computer-readable non-transitory storage media that includes processor-executable instructions, that when executed via a processor of a system, the system:
receives, via a network, first encrypted data, encrypted from first data via a symmetric cryptographic process, wherein the first data includes a private encryption key associated with a first asymmetric encryption process;
receives, via the network and a public ledger, second encrypted data, encrypted from second data via a second asymmetric cryptographic process, corresponding to an identification of the computing device;
decrypts, via the asymmetric cryptographic process, the second encrypted data to obtain the second data;
decrypts, via the symmetric cryptographic process utilizing a cryptographic hash of the second data, the first encrypted data to obtain the private encryption key;
provides, via the network, the first data to the public ledger;
after providing the private encryption key to the public ledger, receives, via the network and the public ledger, a public encryption key associated with the private encryption key and associated with the first asymmetric encryption process;
decrypts, via the first asymmetric encryption process utilizing the public encryption key, third encrypted data to obtain third data that includes fourth encrypted data, which was encrypted from fourth data that includes a key segment of a plurality of key segments utilizable to produce a master symmetric encryption key utilized to encrypt and decrypt data of the computing device; and
decrypts, via the symmetric encryption process, the fourth encrypted data to obtain the key segment.
30. The one or more computer-readable non-transitory storage media of claim 29 , wherein the one or more computer-readable non-transitory storage media further stores processor-executable instructions that when executed via the processor, the system:
monitors the public ledger for the compensation corresponding to the identification of the computing device.
31. The one or more computer-readable non-transitory storage media of claim 29 , wherein the one or more computer-readable non-transitory storage media further stores processor-executable instructions that when executed via the processor, the system:
receives, via the public ledger, the compensation in response to the providing, via the network, the private encryption key to the public ledger.
32. The one or more computer-readable non-transitory storage media of claim 29 , wherein the compensation is at least one of a null or zero value.
33. The one or more computer-readable non-transitory storage media of claim 29 , wherein the one or more computer-readable non-transitory storage media further stores processor-executable instructions that when executed via the processor, the system:
determines the cryptographic hash of the second data.
34. The one or more computer-readable non-transitory storage media of claim 29 , wherein the second encrypted data was encrypted via the second asymmetric cryptographic process utilizing a first encryption key.
35. The one or more computer-readable non-transitory storage media of claim 29 , wherein when the system receives, via the network, the first encrypted data, encrypted from the first data, the system receives the first encrypted data from an escrow agent computer system.
36. The one or more computer-readable non-transitory storage media of claim 29 , wherein the public ledger includes a blockchain.
37. The one or more computer-readable non-transitory storage media of claim 36 , wherein the blockchain is a bitcoin blockchain.