Group Key Distribution via Encrypted Private Identifiers
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing communication systems for one-to-many (1:N) communication require bidirectional secure channels for key management, which is inefficient and inconvenient, especially when the number of receivers is large, limiting their application range.
Innovation Solution
A method and system where each terminal submits a private identifier encrypted by a public key to a server, allowing the server to transmit encrypted information and key-deriving parameters through open channels, enabling secure information distribution without the need for bidirectional secure channels.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If bidirectional secure channels are used for key management in one-to-many communication, then security is improved, but device complexity and resource requirements increase significantly
Solution Approach 1:
The patent extracts the reverse secure channel requirement from the key management process. Instead of requiring bidirectional secure channels, the system only requires forward secure channels from server to terminals. The reverse channel is eliminated by using public key encryption where terminals can securely submit encrypted private identifiers through open channels, resolving the contradiction between security and channel complexity.
Solution Approach 2:
The patent makes the forward secure channel serve multiple functions: it establishes initial security, enables key distribution, and allows secure identifier submission. This multi-functionality eliminates the need for separate reverse secure channels, reducing overall system complexity while maintaining security through the group shared key mechanism.
2Reliability
If bidirectional secure channels are established for each terminal, then key management security is improved, but productivity and efficiency deteriorate when the number of receivers is large
Solution Approach 1:
The patent merges individual key management into group-level key management. Instead of establishing separate secure channels and managing individual keys for each terminal, the system creates a single group shared key that serves all terminals. This consolidation maintains security through cryptographic mechanisms while dramatically improving efficiency by eliminating repetitive key management operations for each terminal.
Solution Approach 2:
The patent performs preliminary key derivation setup where the server pre-generates group shared keys and key-deriving parameters before information distribution. Terminals receive these parameters through open channels and can independently derive the group shared key using their private identifiers. This preliminary action eliminates the need for interactive key exchange during actual information distribution, improving productivity.
3Reliability
If individual keys are generated for each terminal, then security is improved, but ease of operation and management deteriorate when N is large
Solution Approach 1:
The group shared key serves multiple terminals simultaneously, providing universal access control for the group. The server manages a single group key rather than individual keys for each terminal, dramatically simplifying key distribution and management operations while maintaining security through the cryptographic group key derivation mechanism.
4Reliability
If resource-rich terminals are used for secure channel establishment, then security is improved, but adaptability to resource-constrained environments deteriorates
Solution Approach 1:
The patent extracts the reverse secure channel requirement from the system, eliminating the need for resource-intensive bidirectional secure channel establishment. Terminals only need to perform public key encryption of their private identifiers and receive key-deriving parameters through open channels, making the system adaptable to resource-constrained environments while maintaining security through group shared key mechanisms.
Data Source
AI summary
Disclosed is a system and a method for information distribution. The system comprises: a server for generating a group key and its corresponding key deriving parameter, wherein the server encrypts sensitive contents by using the group key to obtain encrypted information; and terminals configured to receive the encrypted information through an open channel, extract the group key, then decrypt the encrypted information by using the group key to obtain the original content. In the group forming process, each terminal encrypts its private identifier using the public key and submits the ciphertext to the server. In information distribution process, the server transmits the ciphertext of sensitive contents and the key deriving parameter to the terminals via open channel Because private information available only to respective group members is required for calculating the group key, this mechanism ensures that the sensitive content can be transmitted securely on the open channel.