Functional Encryption Key Management via Metadata Search
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing encryption systems, particularly public-key and symmetric key systems, face challenges in managing multiple decryption keys for Functional Encryption schemes, leading to inefficiencies in decrypting ciphertexts due to the need to select the appropriate key from multiple possible keys, which can result in high computational costs and resource intensiveness.
Innovation Solution
A system and method for identifying and retrieving Functional Encryption keys by storing key metadata, searching for matching keys based on ciphertext attributes and policies, and selecting the optimal key for decryption, which includes caching keys for efficient retrieval and handling scenarios where no current key is appropriate.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Adaptability or versatility
If multiple decryption keys are stored for Functional Encryption schemes, then the ability to decrypt various ciphertexts is improved, but the computational cost and resource usage for selecting the appropriate key increases
Solution Approach 1:
The patent applies preliminary action by pre-computing and storing metadata about each decryption key (such as key identifiers, associated policies, and attribute information) before the decryption process. This metadata is organized in advance in a key store, allowing the system to quickly search and identify the appropriate key without performing computationally expensive operations during the actual key selection phase.
Solution Approach 2:
The patent introduces an intermediary mechanism in the form of a key management system that mediates between the ciphertext and the multiple decryption keys. This intermediary maintains a structured key store with metadata, performs the search and matching operations, and returns the appropriate key to the decryption process, thereby isolating the computational complexity from the core decryption operation.
2Adaptability or versatility
If multiple decryption keys are stored for Functional Encryption schemes, then the ability to decrypt various ciphertexts is improved, but the resource intensiveness for managing and selecting keys increases
Solution Approach 1:
The patent applies segmentation by dividing the key management functionality into distinct components: a key store for storing keys and their metadata, a search mechanism for querying the key store, and a decryption module for processing ciphertexts. This segmentation allows each component to be optimized independently and manages the overall complexity through modular design.
Solution Approach 2:
The system performs preliminary organization of keys and their metadata in a structured key store, pre-establishing the relationships between keys, policies, and attributes. This preliminary structuring reduces the complexity during runtime by having the search mechanism simply query pre-organized data rather than analyzing key relationships on-the-fly.
3Ease of operation
If traditional key management methods are used, then simplicity of key selection is maintained, but efficiency in decrypting ciphertexts with multiple possible keys deteriorates
Solution Approach 1:
The patent introduces a key management intermediary that handles the complexity of selecting from multiple keys, allowing the decryption operation itself to remain simple. The intermediary searches the key store using metadata and returns the appropriate key, so the decryption process doesn't need to implement complex selection logic while still achieving high efficiency.
Solution Approach 2:
The patent replaces the traditional mechanical approach of manually or sequentially testing keys with a智能化 search mechanism that uses metadata and policy matching to directly identify the appropriate key. This substitution transforms the key selection process from a brute-force mechanical search to an efficient information-retrieval operation.
Data Source
AI summary
Functional encryption keys can be selected based on a set of criteria that facilitates efficient decryption of ciphertexts. The method includes electronically storing one or more decryption key metadata parameters for a plurality of candidate decryption keys for a functional encryption ciphertext, storing a functional encryption ciphertext, extracting a scheme type of functional input from the ciphertext, extracting a functional input from the ciphertext, searching the metadata parameters to identify a set of candidate keys matching the scheme type of the ciphertext, searching the set of candidate keys to identify a key matching the extracted functional input, and selecting one of the identified candidate keys matching the scheme type and the extracted functional input as a decryption key for the functional encryption ciphertext.