Client authentication using split key signing on a blockchain platform
An approach is disclosed on a blockchain platform for authenticating clients. A public and private key is created at a client device. The private key into is split two or more parts. The split private key part is split into to two or more client devices including a first client device and a remaining client devices. Signing to authenticate a challenge to login using a partial key part occurs at the first client device. The challenge is sent to the remaining client devices wherein the remaining client devices that sequentially sign using short range wireless network connection and respond back to the challenge to login without a password.
1. A method of blockchain platform for authenticating clients at a server without a login password, comprising of:
creating a public and private key at a first client device wherein the first client device is a generator of keys;
splitting the private key into two or more parts in the first client device;
assigning the split private key part to two or more client devices including the first client device and a remaining client devices;
signing to authenticate a challenge using a partial key part at the first client device;
sending the challenge to the remaining client devices wherein the remaining client devices who sequentially sign using short range wireless network connection; and
responding back to the challenge to the first client device to set up the two or more client devices for subsequent transactions to be signed by the first client device and the remaining client devices sign the signed transactions back to the first client where the first client combines the signatures and sends the signed transaction to the server.
2. A system of blockchain platform for authenticating clients at a server without a login password, comprising of:
one or more processors;
a memory coupled to at least one of the processors;
a network interface that connects the local node to one or more remote nodes; and
a set of computer program instructions stored in the memory and executed by at least one of the processors in order to perform actions comprising:
a module to create a public and private key at a first client device wherein the first client device is a generator of keys;
a module to split the private key into two or more parts in the first client device;
a module to assign the split private key part to two or more client devices including the first client device and a remaining client devices;
a module to sign to authenticate a challenge using a partial key part at the first client device;
a module to send the challenge to the remaining client devices wherein the remaining client devices who sequentially sign using short range wireless network connection; and
a module to respond back to the challenge to login to the first client device to set up the two or more client devices for subsequent transactions to be signed by the first client device and the remaining client devices sign the signed transactions back to the first client where the first client combines the signatures and sends the signed transaction to the server.