Deterministic Identifier Encryption for Low-Memory Peer Communication
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing secure communication methods, such as those using public key infrastructure (PKI) and identity-based encryption (IBE), require significant memory storage for public keys and rely on a centralized trusted authority, which is a security risk.
Innovation Solution
A secure communication method using a hierarchical deterministic wallet with asymmetric master keys, where an external actor configures peers with deterministically derived identifiers and encryption/decryption keys, allowing secure communication with minimal memory storage and reducing reliance on a centralized authority.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If public key infrastructure (PKI) is used to secure communications, then communication security is achieved, but memory storage requirements increase due to the need to distribute and store numerous public keys for each device
Solution Approach 1:
The patent extracts the public key dependency from traditional PKI by using a centralized master public key Kmaster that is shared among all devices. Each device only needs to store this single master public key instead of multiple individual public keys, thereby reducing memory storage requirements while maintaining communication security through the hierarchical deterministic key derivation system
Solution Approach 2:
The master public key Kmaster serves multiple functions: it is used to derive child public keys for different devices, verify identities, and enable secure communication. This universal key structure eliminates the need for each device to store and manage multiple separate public keys, addressing the memory storage issue while preserving security
2Quantity of substance
If identity-based encryption (IBE) is used to simplify key management, then memory storage is reduced, but security is compromised due to reliance on a centralized trusted authority that can decipher communications and spoof identity
Solution Approach 1:
The patent segments the centralized IBE model by introducing a hierarchical deterministic structure where a master private key kmaster generates child private keys kmaster, j through a deterministic derivation function. This segmentation allows distributed key generation without requiring a centralized authority to manage individual device keys, thereby maintaining security while reducing memory requirements
Solution Approach 2:
The system enables self-service key generation where child private keys are deterministically derived from the master private key using a shared seed and derivation function. Each device can independently generate its own child key pair without requiring a centralized trusted authority to issue keys, eliminating the security compromise while maintaining the memory storage benefit
3Ease of operation
If hierarchical deterministic wallets are used to generate numerous addresses from a single seed, then key management is simplified, but the system becomes incompatible with traditional identity-based cryptography approaches
Solution Approach 1:
The patent merges the hierarchical deterministic wallet approach with identity-based encryption by using the deterministic derivation function to generate child public keys that serve as IBE identifiers. This combination allows the system to benefit from both HDW key management simplicity and IBE identity-based encryption, resolving the incompatibility issue while maintaining ease of operation
Data Source
AI summary
The invention relates to a secure communication method between a transmitting peer (3) and a receiving peer (4) and involving an external actor (2) having a hierarchical deterministic wallet (1) including a pair of master keys kmaster and Kmaster. The external actor (2) configures (104) the receiving peer (4) by saving an IBE decryption key aDKey[Idj,kmaster] in its electronic memory. The external actor (2) configures (105) the transmitting peer (3) by saving an index j of the receiving peer and the master public key Kmaster in its electronic memory. The transmitting peer (3) deterministically determines (106) an identifier Idj of the receiving peer, then calculates (107) an IBE encryption key aCKey[Idj,Kmaster]. The transmitting peer (3) encrypts (108) a message (60) using the key aCKey[Idj, Kmaster] and sends (109) the encrypted message (61) to the receiving peer (4). The receiving peer (4) deciphers (110) the message using the key aDKey[Idj, kmaster].


