Anonymous Broadcast Key Exchange for Multi-Party Metadata Concealment

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Existing key exchange techniques fail to conceal metadata during communication among multiple parties, limiting the implementation of secure key exchange protocols beyond two-party communications.

Innovation Solution

An anonymous broadcast method and key exchange protocol using anonymous ID-based broadcast encryption and ID-based signature schemes, combined with mix-nets, to securely share session keys among multiple communication devices while concealing metadata.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Adaptability or versatility

If probabilistic public key encryption is used for two-party key exchange, then metadata concealment is achieved, but the system cannot support key exchange among N (≥3) parties

Engineering Contradiction:
Improvenumber of parties supportedVSAvoidmetadata concealment
Core Design Contradiction:
Adaptability or versatilityVSLoss of information

Solution Approach 1:

The patent segments the key exchange process into multiple independent stages: (1) initial key generation by each party, (2) anonymous broadcasting of public keys through mix-net, (3) session key derivation. This segmentation allows the system to handle N parties by breaking down the complex N-party problem into manageable two-party interactions that preserve metadata concealment properties.

Inventive Principle:
Principle #1Segmentation

Solution Approach 2:

The patent introduces mix-net servers as intermediaries that receive public keys from all parties, shuffle them anonymously, and redistribute them. This intermediary layer prevents direct correlation between senders and receivers, maintaining metadata concealment while enabling N-party communication. The mix-net acts as a trusted mediator that preserves anonymity.

Inventive Principle:
Principle #24Intermediary (Mediator)

2Reliability

If traditional key exchange protocols are used among multiple parties, then key sharing is achieved, but metadata leakage occurs revealing communication patterns

Engineering Contradiction:
Improvekey sharing securityVSAvoidmetadata leakage
Core Design Contradiction:
ReliabilityVSLoss of information

Solution Approach 1:

The patent performs preliminary key generation and public key distribution through mix-net before the actual secret sharing. Each party generates their public key in advance and broadcasts it anonymously. This preliminary action establishes the cryptographic foundation while concealing metadata about who communicates with whom, preventing information leakage about communication patterns.

Inventive Principle:
Principle #10Preliminary action

Solution Approach 2:

The patent replaces traditional mechanical key exchange mechanisms (direct peer-to-peer protocols) with a cryptographic substitution using broadcast encryption and mix-nets. Instead of direct interactive protocols that reveal communication patterns, the system uses cryptographic primitives that mathematically guarantee anonymity while achieving the same key sharing objective.

Inventive Principle:
Principle #28Mechanics substitution (Replace mechanical system)

Data Source

PatentUS12034862B2Anonymous broadcast method, key exchange method, anonymous broadcast system, key exchange system, communication device, and program
Publication Date: 2024.07.09 NIPPON TELEGRAPH & TELEPHONE CORP
  • US12034862B2 patent drawing
  • US12034862B2 patent drawing
  • US12034862B2 patent drawing

AI summary

A key exchange technique of performing a key exchange among N (≥2) parties, which can conceal metadata on communication, is provided. A key exchange method includes: a first key generation step in which a communication device Ui generates a first key; a first anonymous broadcast step in which the communication device Ui anonymously broadcasts the first key with a set R-{Ui} being designated for i∈{1, . . . , n} and the communication device Ui anonymously broadcasts the first key with φ being designated for i∈{n+1, . . . , N}; a second key generation step in which the communication device Ui generates a second key; a second anonymous broadcast step in which the communication device Ui anonymously broadcasts the second key with the set R-{Ui} being designated for i∈{1, . . . , n} and the communication device Ui anonymously broadcasts the second key with φ being designated for i∈{n+1, . . . , N}; and a session key generation step in which the communication device Ui generates a session key SK for i∈{1, . . . , n} if a predetermined condition is satisfied.