12 results about "ID-based encryption" patented technology

A method for pairing a content provider system and a receiving device, a cryptographic function and a receiving device unique identifier being populated in the receiving device. According to such method, the receiving device executes: obtaining a first key which is a result of a first function taking as arguments an Identity Based Encryption scheme master key owned by an authority server and an output of the cryptographic function applied to the receiving device unique identifier; receiving, from the content provider system, a content provider unique identifier; and computing a secret key which is a result of a second function taking as operands the first key and an output of the cryptographic function applied to the content provider unique identifier, the secret key being known from the content provider system.

The application is suitable for the field of information security technology, and provides a certificate signature scheme based on an SM9 signature algorithm, which comprises the following steps: S100, system initialization calculation, a certificate authority generates a random number as a private key and calculates a public key, then randomly selects a signer private key and performs public key calculation to produce a signer private key pair; S200, certificate authorization, a signer provides identity information to the certificate authority, the certificate authority verifies the information according to the information and the key information, and calculates and generates a certificate after the information passes, and feeds back the certificate to the signer; and S300, signature calculation and the like. The application is based on the signature structure of the SM9 national secret algorithm, combines the advantages of traditional public key cryptography and identity-based encryption technology, and solves the problems of complex certificate management and key escrow. The scheme can resist attacks of Type 1 and Type 2 enemies at the same time.

The application discloses a cross-industry supply chain supervision method based on multi-chain cooperation, a business sub-chain is used for recording internal information of enterprise transaction subjects and business data of various supply processes; a transaction main chain is mainly responsible for transaction implementation and interaction between different businesses, and records circulation states and transaction data of commodities at various links of the supply chain; and a supervision chain is used for supervising and auditing transaction data between different businesses of the supply chain. The application combines an identity-based encryption mechanism based on fine-grained privacy protection, protects the privacy of multi-party cooperative transaction data in the supply chain process, and solves the contradiction between the privacy of supply chain transaction data and the implementation of supervision. The application designs two verification methods of transaction types based on an aggregated signature protocol, so as to realize aggregated verification of on-chain transactions and rapid tracking of abnormal transactions, and effectively improves the performance of system supervision and traceability.

It provides a method to perform identity-based encryption using Pedersen Commit. In a method for performing identity-based encryption using Pedersen Commit, an encryptor receives public parameters and a public key (S310) and randomly determines cryptographic constants (S320), parses a plurality of parameters and a parameter vector from the public parameters (S330), determines a first ciphertext and a second ciphertext (S340) using the plurality of parameters, the cryptographic constants, and a message, parses an ID value including a plurality of bits (S350) from the public key, and calculates a third ciphertext (S360) using the ID value, and outputs the determined first ciphertext, second ciphertext, and third ciphertext (S370).

This invention discloses the design and construction of a novel relationship-based identity-based encryption scheme. In identity-based encryption mechanisms, a user's identity information can be used as a public key, and a key generation center generates the user's decryption key. In scenarios where only users with specific relationships can decrypt, traditional identity encryption requires adding the relationship to the user's identity and regenerating the user's key. Furthermore, hierarchical identity encryption leads to upper-level users knowing the keys of lower-level users, resulting in the leakage of lower-level user information. To address this scenario where only users with specific relationships can decrypt, this invention provides a relationship-based identity encryption scheme that decomposes a user's decryption capability into two parts: one related to the user's identity information and the other related to the user's relationship information. Only users possessing both parts of the key can successfully decrypt, thus solving the problems of users regenerating keys and the issue of lower-level user keys being known to upper-level users in hierarchical identity-based encryption.

The present disclosure is directed to managing the operation of devices using identity-based cryptography. These techniques may include provisioning a master public key to each system that will communicate with a medical device using device-identifier specific cryptography. A master secret key is provisioned in a trusted processor of the medical device, and the medical device provisions its own device identifier-specific secret key using the master secret key. This setup facilitates several management features, including automatic initial configuration, signed logging, signed backup files, and secure binding of medication containers to the medical device.

One aspect provides a system and method for provisioning an access point (AP) in a wireless mesh network. During operation, a controller can obtain a set of published global encryption parameters comprising a master public key, apply an identity-based encryption (IBE) scheme to encrypt a configuration message based at least on the master public key, and transmit the encrypted configuration message to a proxy device, which forwards the encrypted configuration message to the AP. The proxy device is coupled to the controller via a previously established secure communication channel and coupled to the AP via an open communication channel. The AP can decrypt the encrypted configuration message using an AP-specific secret key generated based on a unique identifier of the AP and a master private key corresponding to the master public key, thereby facilitating provisioning of the AP based on the configuration message.

The present invention provides a PMU power system communication method based on a national secret algorithm. An information sending device and an information receiving device, as two communicating parties, apply to a key management service of the PMU power system for a national secret SM2 private key; a national secret SM2 complete public-private key is generated; the information sending device queries from the key management service whether a session key exists between the information sending device and the information receiving device. If not, the information sending device sends the encrypted session key, signature result, public key and ID information to the information receiving device; after the information receiving device passes the verification, the session key is negotiated or the session key is inquired at the key management service and decrypted; the present invention can not only avoid the management of certificates, but also solve the problem of key escrow in an identity-based encryption system, and at the same time, the national secret algorithm is combined for signing, verification and encryption, so that the authentication communication of the PMU power system can be both lightweight and secure.

The present invention proposes an end-to-end data encryption processing method, which aims to use the advantages of edge computing to solve the encryption performance bottleneck problem caused by resource constraints of IoT devices. The method adopts a hybrid mechanism combining identity-based encryption (IBE) and traditional public key encryption (such as RSA) to build multi-level end-to-end secure communication between devices, edge nodes and the cloud. The device generates a session key and uses IBE to encrypt sensitive data. The edge node uses proxy re-encryption to convert the session key and undertakes some complex asymmetric key calculations, while the cloud uses the traditional public key to decrypt the session key. Key negotiation based on elliptic curve cryptography (ECC) is used between resource-constrained devices and the edge to ensure forward security. The present invention also introduces a key management mechanism based on threshold signatures to improve the availability of the system. Theoretical analysis and simulation experiments show that compared with traditional schemes, the hybrid method can significantly reduce the computing and communication overhead of the device side while ensuring end-to-end security, providing an efficient and flexible encryption scheme for IoT applications.

System and techniques for decentralized key generation and management are described herein. An information centric network (ICN) node receives a first ICN interest packet for public encryption parameters of an identity based encryption (IBE) key generation center (KGC). Public encryption parameters for the KGC are received in a first ICN data packet in response to the first ICN interest packet. The public encryption parameters are cached and used to respond a second ICN interest packet for the public parameters. A third ICN data packet may be received from the KGC in response to a key generation request. Here, the third data packet includes an indication that the third ICN data packet is part of a one-time session. Then, the third ICN data packet is transmitted without caching the third ICN data packet content based on the indication.

The disclosure relates to a 5G or 6G communication system for supporting a higher data transmission rate. Embodiments herein disclose systems and methods to support identity-based Cryptography for signalling message protection in wireless communication networks, by splitting / fragmenting the digital signature into two or more fragments and making at least one of the fragmented value applicable to more than a cell, so that frequency / rate of transmission can be reduced for that fragmented part. Further, embodiments herein disclose systems and methods to broadcast the fragmented values at different intervals to reduce the over-the-air overhead and at the same time verifier able to acquire the required security parameter to verify the authenticity of the cell.

A calculation device is disclosed. The calculation device includes: a memory storing at least one instruction and identity information; and a processor performing the at least one instruction, wherein the processor may randomly sample small elements, generate a function-processed output value by function-processing the stored identity information, and generate an encrypted text for a message by using a master public key computed using a ring having a dimension (d) represented by a power of 2 and an integer multiplication of 3 or more, the sampled small elements and the function-processed output value.