Hierarchical Cryptographic Accumulator for Efficient Credential Revocation

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Existing cryptographic credential management systems face inefficiencies in revoking credentials, particularly in resource-constrained devices, as they require substantial computational and communication costs for updating witnesses and managing large system parameters, compromising user privacy and anonymity.

Innovation Solution

A method using a cryptographic accumulator based on bilinear pairings, where group elements are generated using a secret value and a group generator, allowing for efficient witness updates with linear complexity, shifting the computational burden from users to a central authority, and enabling secure and anonymous credential verification.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If cryptographic accumulators are used for credential revocation in anonymous credential systems, then credential validity can be verified without revealing user identity, but users need to update their accumulator witnesses which requires substantial computational cost (at least one modular exponentiation for each newly revoked credential)

Engineering Contradiction:
Improvecredential validity verificationVSAvoidcomputational cost for witness update
Core Design Contradiction:
ReliabilityVSUse of energy by moving object

Solution Approach 1:

The patent changes the mathematical parameters and structure of the accumulator system by introducing a hierarchical accumulator architecture with multiple levels. Instead of requiring users to perform modular exponentiations for each revocation, the system uses a tree-structured accumulator where witness updates propagate through hierarchical levels, reducing the computational burden on resource-constrained user devices while maintaining the security and anonymity properties of the credential verification system.

Inventive Principle:
Principle #35Parameter changes

2Adaptability or versatility

If a large number of credentials are revoked, then the revocation system can handle more compromised credentials, but the computational and communication cost increases substantially

Engineering Contradiction:
Improvenumber of revoked credentialsVSAvoidcomputational and communication cost
Core Design Contradiction:
Adaptability or versatilityVSQuantity of substance

Solution Approach 1:

The patent segments the credential revocation system into a hierarchical tree structure with multiple levels. Each level of the tree handles a subset of credentials, allowing the system to efficiently manage a large number of revoked credentials. When credentials are revoked, only the relevant segments of the accumulator and corresponding witnesses need to be updated, rather than requiring system-wide updates for every revocation event.

Inventive Principle:
Principle #1Segmentation

Solution Approach 2:

The patent introduces a hierarchical dimension to the accumulator structure, transforming a flat, single-level accumulator into a multi-level tree structure. This dimensional change allows the system to handle large numbers of credentials by organizing them in a hierarchical manner, where witness updates can be performed incrementally through the tree levels, significantly reducing the computational and communication overhead compared to a flat structure.

Inventive Principle:
Principle #17Another dimension (Dimensionality change)

3Reliability

If traditional accumulator-based revocation systems are used, then credential revocation can be achieved, but resource-constrained devices such as smart cards cannot handle the substantial computational cost

Engineering Contradiction:
Improvecredential revocation capabilityVSAvoidoperational feasibility on resource-constrained devices
Core Design Contradiction:
ReliabilityVSEase of operation

Solution Approach 1:

The patent modifies the computational parameters and algorithmic complexity of the witness update process by implementing a hierarchical accumulator structure. This changes the operational characteristics from requiring expensive modular exponentiations to using simpler, more efficient computations that can be performed on resource-constrained devices like smart cards, while still providing secure credential revocation functionality.

Inventive Principle:
Principle #35Parameter changes

Data Source

PatentEP2384562B1Management of cryptographic credentials in data processing systems
Publication Date: 2013.07.17 INTERNATIONAL BUSINESS MACHINE CORPORATION
  • EP2384562B1 patent drawingFigure 1~4
  • EP2384562B1 patent drawingFigure 2~3
  • EP2384562B1 patent drawingFigure 5

AI summary

Methods and apparatus are provided for managing a dynamic set of cryptographic credentials in a data processing system (1). A mapping is defined between cryptographic credentials in said set and respective group elements of a predefined plurality of group elements. A cryptographic accumulator indicative of the set of credentials is periodically generated. The cryptographic accumulator comprises the product of respective group elements related to the group elements mapped to the credentials in the set. A witness is periodically generated for each credential in the set. Each witness comprises the product of a respective different subset of the group elements, the subset for each witness being dependent on the credentials in said set and the credential for which that witness is generated. The cryptographic accumulator is periodically published in the data processing system (1) so as to be available for use by system components (6, 7) involved in verifying whether cryptographic credentials in use in the system (1) are members of the dynamic set indicated by the accumulator.