Hierarchical Private Key Generation for Client Speed

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Conventional ID-based encryption systems face inefficiencies in private key generation and issuance at the client end, particularly in terms of processing speed and key issuance, which are exacerbated by the slow performance of Trapdoor Discrete Logarithm-based systems.

Innovation Solution

A hierarchical private key generation apparatus and method where a root private key generation unit sets a root master key and parameters to generate a sub-master key set, which is then shared with a sub-private key generation unit to produce private keys for users, allowing for efficient key generation and issuance while ensuring authentication and secure key management.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Ease of operation

If a conventional ID-based encryption system is used, then private keys can be generated based on user IDs, but the processing speed at the client end becomes slow

Engineering Contradiction:
Improveprivate key generation operationVSAvoidprocessing speed at client end
Core Design Contradiction:
Ease of operationVSSpeed

Solution Approach 1:

The patent divides the private key generation system into a hierarchical structure with a root private key generation unit and multiple sub-private key generation units. The root unit generates sub-master key sets that are distributed to sub-units, which then generate individual private keys. This segmentation reduces the computational burden on client ends by having pre-generated key material stored at sub-units, enabling faster key derivation without requiring complex real-time computations.

Inventive Principle:
Principle #1Segmentation

2Productivity

If a Trapdoor Discrete Logarithm-based system is used, then key issuance can be performed, but the key issuance speed becomes slow

Engineering Contradiction:
Improvekey issuance efficiencyVSAvoidtime for key issuance
Core Design Contradiction:
ProductivityVSLoss of time

Solution Approach 1:

The root private key generation unit performs preliminary actions by generating sub-master key sets in advance and distributing them to sub-private key generation units. These pre-generated key materials are stored and can be quickly retrieved and used for subsequent private key issuance operations, eliminating the need for time-consuming real-time computations during key issuance requests.

Inventive Principle:
Principle #10Preliminary action

3Productivity

If a hierarchical private key generation system is implemented, then key generation efficiency is improved, but the system complexity increases

Engineering Contradiction:
Improveprivate key generation efficiencyVSAvoidsystem structure complexity
Core Design Contradiction:
ProductivityVSDevice complexity

Solution Approach 1:

The hierarchical private key generation system is designed with universal sub-private key generation units that can serve multiple functions: generating private keys for users, managing key distribution, and providing authentication services. This multi-functionality reduces the need for separate specialized components, thereby managing system complexity while maintaining high efficiency in private key generation operations.

Inventive Principle:
Principle #6Universality (Multi-functionality)

Data Source

PatentUS9036818B2Private key generation apparatus and method, and storage media storing programs for executing the methods
Publication Date: 2015.05.19 SAMSUNG SDS CO LTD
  • US9036818B2 patent drawing
  • US9036818B2 patent drawing
  • US9036818B2 patent drawing

AI summary

Disclosed herein are a private key generation apparatus and method, and storage media storing programs for executing the methods on a computer. The private key generation apparatus includes a root private key generation unit and a sub-private key generation unit. The root private key generation unit sets a root master key and predetermined parameters capable of generating private keys, and generates a first sub-master key set capable of generating a number of private keys equal to or smaller than a preset limited number. The sub-private key generation unit generates private keys with the root private key generation unit by receiving the first sub-master key set from the root private key generation unit, to generate a private key corresponding to a user ID using the first sub-master key set, and issues the private key to a user.