Certificate-less Authentication Encryption Key Verification
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Public Key Cryptosystems (PKCs) face challenges in securely distributing and managing public keys, particularly in large dynamic systems, where the reliance on a trusted center for key generation and distribution can lead to latency and vulnerability to tampering and fraud, compromising the security of asymmetric-key encryption.
Innovation Solution
A certificate-less authenticated encryption (CLAE) method using identity-based encryption, where public keys are generated and verified locally by entities within the system, eliminating the need for a trusted center to distribute certificates and allowing users to self-generate public keys based on recipient identities, ensuring only the true recipient can decrypt sensitive data.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If public keys are generated and distributed by a trusted center, then security and authenticity of public keys are improved, but system latency and complexity increase due to remote retrieval and certificate management
Solution Approach 1:
The patent enables entities to self-generate public keys locally using their own private keys and recipient identities without needing to contact a trusted center. This self-service approach eliminates remote certificate retrieval, reducing latency while maintaining security through local verification mechanisms.
Solution Approach 2:
The patent extracts the trusted center from the key generation and distribution process, allowing entities to independently generate public keys locally. This removes the bottleneck of remote certificate management while security is maintained through identity-based verification and local trust establishment.
2Productivity
If public keys are generated locally without a trusted center, then latency is reduced and flexibility is improved, but security and verification reliability deteriorate
Solution Approach 1:
The patent introduces identity strings as an intermediary element that mediates between local key generation and security verification. Public keys are generated locally from recipient identities, and verification is achieved through identity-based cryptographic mechanisms, eliminating the need for remote trusted centers while maintaining security.
Solution Approach 2:
The patent changes the fundamental parameter of key generation from trusted-center-dependent to identity-based local generation. By using recipient identities as the basis for public key generation, the system achieves both local autonomy and security verification without requiring external trusted centers.
3Reliability
If a trusted center distributes public key certificates, then authenticity is verified, but device complexity and management overhead increase
Solution Approach 1:
The patent eliminates certificate management complexity by enabling entities to self-generate public keys locally from their private keys and recipient identities. Authenticity is verified through identity-based cryptographic mechanisms rather than through complex certificate distribution and management systems.
Solution Approach 2:
The patent extracts the trusted center and certificate management infrastructure from the system, replacing them with local identity-based key generation and verification. This removes the complexity of certificate distribution, storage, and validation while maintaining authenticity through cryptographic identity verification.
4Adaptability or versatility
If public keys are constantly issued and revoked in dynamic systems, then adaptability is improved, but security management and verification complexity increase
Solution Approach 1:
The patent enables dynamic key management where entities independently generate and manage their own public keys locally based on recipient identities. This self-service approach allows constant adaptation to dynamic system changes without requiring complex centralized key issuance and revocation mechanisms.
Solution Approach 2:
The patent creates a universal local key generation mechanism that works for all entities in the system regardless of dynamic changes. The identity-based approach provides a multi-functional solution that handles key generation, verification, and adaptation uniformly across the system without requiring separate management procedures for different scenarios.
Data Source
Figure 1
Figure 2
Figure 3
AI summary
A method of verifying a plurality of public parameters from a trusted center in an identity-based encryption system prior to encrypting a plaintext message by a sender having a sender identity string is described. The method includes identifying the trusted center by a TC identity string, the trusted center having an identity-based public encryption key of the trusted center based on the TC identity string; determining if the sender has a sender private key and the public parameters for the trusted center including the public encryption key of the trusted center and a bilinear map; and verifying the public parameters using the TC identity string prior to encrypting the plaintext message into a ciphertext by comparing values of the bilinear map calculated with variables comprising the sender private key and the public encryption key. The ciphertext may include an authentication component for authenticating the sender once the ciphertext is received and decrypted by the recipient using the identity string of the sender and the private key of the recipient.