Deterministic Identifier Encryption for Low-Memory Peer Communication

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Existing secure communication methods, such as those using public key infrastructure (PKI) and identity-based encryption (IBE), require significant memory storage for public keys and rely on a centralized trusted authority, which is a security risk.

Innovation Solution

A secure communication method using a hierarchical deterministic wallet with asymmetric master keys, where an external actor configures peers with deterministically derived identifiers and encryption/decryption keys, allowing secure communication with minimal memory storage and reducing reliance on a centralized authority.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If public key infrastructure (PKI) is used to secure communications, then communication security is achieved, but memory storage requirements increase due to the need to distribute and store numerous public keys for each device

Engineering Contradiction:
Improvecommunication securityVSAvoidmemory storage volume
Core Design Contradiction:
ReliabilityVSQuantity of substance

Solution Approach 1:

The patent extracts the public key dependency from traditional PKI by using a centralized master public key Kmaster that is shared among all devices. Each device only needs to store this single master public key instead of multiple individual public keys, thereby reducing memory storage requirements while maintaining communication security through the hierarchical deterministic key derivation system

Inventive Principle:
Principle #2Taking out (Extraction)

Solution Approach 2:

The master public key Kmaster serves multiple functions: it is used to derive child public keys for different devices, verify identities, and enable secure communication. This universal key structure eliminates the need for each device to store and manage multiple separate public keys, addressing the memory storage issue while preserving security

Inventive Principle:
Principle #6Universality (Multi-functionality)

2Quantity of substance

If identity-based encryption (IBE) is used to simplify key management, then memory storage is reduced, but security is compromised due to reliance on a centralized trusted authority that can decipher communications and spoof identity

Engineering Contradiction:
Improvememory storage volumeVSAvoidsecurity
Core Design Contradiction:
Quantity of substanceVSReliability

Solution Approach 1:

The patent segments the centralized IBE model by introducing a hierarchical deterministic structure where a master private key kmaster generates child private keys kmaster, j through a deterministic derivation function. This segmentation allows distributed key generation without requiring a centralized authority to manage individual device keys, thereby maintaining security while reducing memory requirements

Inventive Principle:
Principle #1Segmentation

Solution Approach 2:

The system enables self-service key generation where child private keys are deterministically derived from the master private key using a shared seed and derivation function. Each device can independently generate its own child key pair without requiring a centralized trusted authority to issue keys, eliminating the security compromise while maintaining the memory storage benefit

Inventive Principle:
Principle #25Self-service

3Ease of operation

If hierarchical deterministic wallets are used to generate numerous addresses from a single seed, then key management is simplified, but the system becomes incompatible with traditional identity-based cryptography approaches

Engineering Contradiction:
Improvekey managementVSAvoidcompatibility with IBE
Core Design Contradiction:
Ease of operationVSAdaptability or versatility

Solution Approach 1:

The patent merges the hierarchical deterministic wallet approach with identity-based encryption by using the deterministic derivation function to generate child public keys that serve as IBE identifiers. This combination allows the system to benefit from both HDW key management simplicity and IBE identity-based encryption, resolving the incompatibility issue while maintaining ease of operation

Inventive Principle:
Principle #5Merging (Combining)

Data Source

PatentUS20250317276A1Secure communication method and device using a deterministically derived identifier
Publication Date: 2025.10.09 COMMISSARIAT A LENERGIE ATOMIQUE ET AUX ENERGIES ALTERNATIVES
  • US20250317276A1 patent drawing
  • US20250317276A1 patent drawing
  • US20250317276A1 patent drawing

AI summary

The invention relates to a secure communication method between a transmitting peer (3) and a receiving peer (4) and involving an external actor (2) having a hierarchical deterministic wallet (1) including a pair of master keys kmaster and Kmaster. The external actor (2) configures (104) the receiving peer (4) by saving an IBE decryption key aDKey[Idj,kmaster] in its electronic memory. The external actor (2) configures (105) the transmitting peer (3) by saving an index j of the receiving peer and the master public key Kmaster in its electronic memory. The transmitting peer (3) deterministically determines (106) an identifier Idj of the receiving peer, then calculates (107) an IBE encryption key aCKey[Idj,Kmaster]. The transmitting peer (3) encrypts (108) a message (60) using the key aCKey[Idj, Kmaster] and sends (109) the encrypted message (61) to the receiving peer (4). The receiving peer (4) deciphers (110) the message using the key aDKey[Idj, kmaster].