Group Certificate Revocation via Elliptic Curve Keys
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing C2X communication systems face challenges in efficiently revoking groups of certificates while minimizing data volume, as individual certificate revocation is cumbersome and data-intensive, especially in car-to-car and car-to-X communication scenarios.
Innovation Solution
A method using elliptic curve cryptography to generate a first key and a revocation value, allowing the calculation of remaining keys, which are then used to mark certificates as revoked, reducing the need for transmitting all keys and minimizing data overhead by only embedding one key per certificate, with an intermediary handling the revocation process.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If individual certificate revocation is performed, then each certificate can be revoked, but significant amounts of data are generated and transmission overhead increases
Solution Approach 1:
The patent merges multiple individual certificate revocations into a single group revocation operation. By introducing a revocation value that represents an entire group of certificates, the system combines what would otherwise require multiple separate revocation messages into one unified revocation mechanism, thereby reducing data transmission volume while maintaining comprehensive revocation capability
Solution Approach 2:
The patent uses a revocation value as a representative copy that stands in for multiple individual certificates. Instead of transmitting each certificate's revocation information separately, a single revocation value is transmitted that effectively revokes all certificates in the group, reducing the quantity of data while preserving the revocation function
2Ease of operation
If linkage values are stored in each certificate, then group revocation becomes possible, but the volume of data in C2X communication increases significantly
Solution Approach 1:
The patent extracts the revocation information from individual certificates and places it in a separate revocation value structure. Instead of embedding linkage values within each certificate (which increases certificate size and communication overhead), the revocation value is maintained separately and referenced as needed, thereby enabling group revocation without increasing the volume of communication data
Solution Approach 2:
The patent introduces a revocation value as an intermediary element that mediates between the group of certificates and the revocation process. This intermediary structure allows certificates to remain compact while still enabling efficient group revocation, as the revocation value serves as a centralized reference point that doesn't need to be embedded in each certificate
3Object-affected harmful factors
If a large set of certificates is provided for anonymity, then traceability is reduced, but revocation becomes difficult and cumbersome
Solution Approach 1:
The patent merges the revocation of multiple anonymous certificates into a single group revocation operation. By organizing certificates into groups managed by a single revocation value, the system maintains the anonymity benefits of having multiple certificates while simplifying the revocation process from managing individual revocations to managing a single group revocation
Data Source
AI summary
A method is described for revoking a group of certificates, each of which includes a key, for an authenticated communication between one first subscriber and at least one second subscriber, one first key and one revocation value, with the aid of which the keys of the group of certificates may be calculated from the first key, being transmitted for the purpose of revocation to the at least one second subscriber.