Certificateless Public Key Infrastructure for Secure Client-Server Communication
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing certificate-based public key cryptography methods face costly and complex key management issues, as well as the key escrow problem, and are performance-intensive due to the use of bilinear pairings, which are not effectively addressed in real-life deployments.
Innovation Solution
A system and method for secure client-server communication using certificateless public key infrastructure (CL-PKI) that generates and manages keys without bilinear pairings, employing elliptic curve cryptography and primitives like the Diffie-Hellman method and digital signature systems to establish secure connections without digital certificates, using a server as a Key Generation Center (KGC) to distribute and manage keys.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If certificate-based public key cryptography is used, then security is provided, but key management becomes costly and complex
Solution Approach 1:
The patent extracts and removes the certificate authority and digital certificate components from the traditional public key infrastructure. By using certificateless public key cryptography, the system eliminates the need for certificates while maintaining security through direct key pairs and identity-based encryption, thereby simplifying key management without compromising security
Solution Approach 2:
The patent implements a unified key management approach where the same cryptographic primitives serve multiple functions: key generation, authentication, and secure communication establishment. This multi-functional design eliminates the need for separate certificate issuance, validation, and revocation processes, reducing overall system complexity
2Reliability
If bilinear pairings are used in certificate-based cryptography, then security is enhanced, but system performance becomes intensive and slow
Solution Approach 1:
The patent replaces computationally expensive bilinear pairing operations with more efficient cryptographic primitives such as elliptic curve cryptography and hash-based signatures. These lighter-weight algorithms provide comparable security with significantly reduced computational overhead, making the system faster and more suitable for real-time deployments
Solution Approach 2:
The patent changes the cryptographic parameters and algorithms from traditional certificate-based systems with bilinear pairings to certificateless systems using elliptic curves and hash functions. This parameter change maintains security levels while dramatically improving performance by reducing the computational complexity of cryptographic operations
3Reliability
If digital certificates are used for authentication, then identity verification is provided, but key distribution and management overhead increases
Solution Approach 1:
The patent performs key generation and distribution preliminarily through a trusted key generation center that creates key pairs for users before actual communication occurs. The public keys are distributed in advance and stored, eliminating the need for real-time certificate issuance and validation during communication setup, thus reducing key distribution time
Solution Approach 2:
The patent introduces a key generation center as a trusted intermediary that facilitates secure key distribution without requiring ongoing certificate management. The KGC generates key pairs and distributes public keys securely, acting as a mediator that simplifies the authentication process by eliminating complex certificate chains and validation protocols
Data Source
AI summary
A system and method for facilitating secure client server communication using elliptical curve cryptography and certificateless public key infrastructure has been disclosed. The system includes a secret key generation means which generates a secret key of m-bits based on the elliptic curve diffie hellman algorithm. The system further includes a session key generation means which makes use of said secret key and elliptic curve diffie hellman algorithm to generate a session key. The session key is used to facilitate secured communication between the client and the server.