Butterfly Key Expansion via Registration Authority Mediation
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing security credential management systems for vehicular communications require modifications to traditional certificate authorities to implement butterfly key expansion schemes, which is not feasible in markets using only traditional certificate authorities.
Innovation Solution
A method and system that allows implementing a butterfly key expansion scheme without altering the traditional certificate authority, by generating certificate signing requests using public cocoon signing keys and encrypting unencrypted signed pseudonym certificates, ensuring compatibility with existing infrastructure.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Loss of information
If a butterfly key expansion scheme is implemented using traditional certificate authorities, then privacy and bandwidth efficiency are improved, but the certificate authority requires modifications that are not feasible in traditional markets
Solution Approach 1:
The patent introduces a registration authority as an intermediary component that bridges between traditional certificate authorities and the butterfly key expansion scheme. The registration authority performs the key expansion operations and prepares certificate signing requests, while the traditional certificate authority only needs to perform its standard signing function without any modifications. This intermediary approach allows the system to achieve both privacy protection through butterfly key expansion and compatibility with traditional certificate authority infrastructure.
2Productivity
If butterfly key expansion is implemented with modified certificate authority handling, then processing efficiency is improved, but device complexity and implementation requirements increase
Solution Approach 1:
The patent segments the certificate provisioning process into distinct functional components: the registration authority handles key expansion and certificate signing request preparation, while the traditional certificate authority handles only the signing operation. This segmentation allows the complex butterfly key expansion scheme to be implemented without increasing the complexity of the traditional certificate authority, as it remains unchanged and performs only its standard function.
Data Source
Figure 1
Figure 2
Figure 3
AI summary
Implementation of a butterfly key expansion scheme The present disclosure is related to methods, computer programs, and registration authority modules for implementing a butterfly key expansion scheme. The present disclosure is further related to a security credential management system using such methods, computer programs, or registration authority modules for implementing a butterfly key expansion scheme. In a first step, a public caterpillar signing key of a private/public caterpillar signing key pair and a first pseudorandom function are received (S1) from a requesting device. The public caterpillar signing key is expanded (S2) into public cocoon signing keys using the first pseudorandom function. Certificate signing requests are then generated (S4) based on the public cocoon signing keys, e.g. by creating (S3) a public butterfly signing key from each public cocoon signing key and inserting each public butterfly signing key into a corresponding certificate signing request. The certificate signing requests are subsequently sent (S5) to a certificate authority module. In response, signed pseudonym certificates are received (S6) from the certificate authority module. The signed pseudonym certificates are then encrypted (S7) to generate response packages. The resulting response packages may further be signed (S8) and provided (S9) for download by the requesting device.