Certificate-less Key Distribution via Pre-computed Ciphertext
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing key distribution systems require computation between the server apparatus and user terminals that have already joined a session during the join phase, which is inefficient.
Innovation Solution
A key distribution system utilizing Certificate-less Encryption, where a key generation apparatus generates public parameters and a master secret key, and user terminals use these to create partial and complete secret keys, allowing for pre-computation and storage of ciphertext, enabling efficient key distribution without direct computation between the server and existing user terminals during the join phase.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Productivity
If conventional key distribution protocols are used, then security is maintained, but computation between server and existing user terminals is required during join phase, reducing efficiency
Solution Approach 1:
The system performs preliminary key generation and ciphertext creation during setup phase, storing pre-computed ciphertext in the server. When a new user joins, the server simply retrieves and transmits the pre-computed ciphertext without performing computation with existing users, thus eliminating computation during join phase while maintaining security.
2Reliability
If key distribution requires computation with all existing user terminals, then security is ensured through direct involvement, but system complexity increases
Solution Approach 1:
The key distribution process is segmented into setup phase (key generation, ciphertext creation) and join phase (ciphertext transmission). The computationally intensive operations are separated from the join phase and performed beforehand, simplifying the join phase protocol while maintaining security through the pre-computed cryptographic materials.
Data Source
Figure 1
Figure 2
AI summary
A key distribution system includes a representative user terminal 2p, a server apparatus 3, and an (n+1)-th user terminal 2n+1. The representative user terminal 2p uses a public key for the (n+1)-th user terminal 2n+1 and information for identifying the (n+1)-th user terminal 2n+1 to encrypt key information with a predetermined encryption function in Certificate-less Encryption to obtain ciphertext. The server apparatus 3 sends the ciphertext to the (n+1)-th user terminal 2n+1 when the (n+1)-th user terminal 2n+1 is added. The (n+1)-th user terminal 2n+1 uses a complete secret key for the (n+1)-th user terminal 2n+1 and the information for identifying the (n+1)-th user terminal 2n+1 to decrypt the ciphertext with a predetermined decryption function to obtain the key information.