Gestión de llaves criptográficas orientado a un respaldo seguro y su recuperación en redes distribuidas

Abstract

Identity management (IDM) models have been shifting in focus as new approaches become more widespread in the digital world. The first model has a traditional centralised approach, charged with the control and privacy of personal data in identity management, whereas the more recent model has a self-governed or self-sovereign identity approach, as a result of an increased awareness of the importance of personal data. The quest for autonomy proposed in the newer model brings with it the management of passwords, which brings with it a number of features that are positive for the user, such as privacy and security of credentials. However, such control also brings with it an added responsibility, since human error has a higher level of impact on the management of autonomous keys, since the loss of the key can result in the impossibility of accessing the digital wallet, and consequently, the information stored in it. To solve this problem, a strategy and the development of a functional prototype, supported by distributed logging techniques, are proposed. The design and implementation of a functional prototype for the management and recovery of cryptographic keys through smart contracts in distributed networks is described. A Shamir secret sharing scheme is identified as suitable for splitting user keys and distribution is facilitated through transactions specified by smart contracts in the Ganache blockchain network. The restoration process reads the distributed segments using a function specified in the smart contract and reconstructs the segments by selecting Newton's polynomial interpolation method.