Identity-Based Encryption Using Bilinear Map Segmentation
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Identity-based-encryption (IBE) systems, such as the Boneh-Franklin scheme, face inefficiencies in encryption and decryption operations compared to conventional public key infrastructure (PKI) systems, particularly in terms of time and bandwidth.
Innovation Solution
IBE cryptosystems that utilize bilinear groups and group multiplication operations for encapsulation and encryption, while reserving bilinear maps for unencapsulation and decryption, enhancing efficiency by eliminating the need for bilinear maps in these processes and employing a distributed key arrangement for private key construction from multiple shares.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If bilinear maps are used in both encryption and decryption operations as in the Boneh-Franklin scheme, then security is maintained, but computational efficiency deteriorates
Solution Approach 1:
The patent segments the cryptographic operations by applying different computational methods to encryption versus decryption. Encryption uses only group multiplication operations which are computationally efficient, while decryption uses bilinear maps which provide security. This segmentation resolves the contradiction by allowing each operation type to use the most appropriate method for its specific requirements.
Solution Approach 2:
The patent applies different computational qualities to different parts of the system: group multiplication for encryption (where speed is prioritized) and bilinear maps for decryption (where security is prioritized). This local differentiation allows the system to optimize for both efficiency and security in their respective domains without compromising overall performance.
2Productivity
If traditional PKI systems are used, then encryption efficiency is improved, but key management complexity increases
Solution Approach 1:
The patent extracts the public key generation process from the traditional PKI model, allowing any user to independently generate public keys from their identity information without requiring certificate authorities. This eliminates the complex key management infrastructure of PKI while maintaining encryption efficiency, as users can directly use their identity-based public keys for encryption operations.
Solution Approach 2:
The system enables self-service key generation where users independently create their own public keys from their identity information without external intervention. This eliminates the need for centralized key management and certificate distribution, reducing complexity while maintaining security and efficiency.
Data Source
AI summary
Systems and methods for supporting symmetric-bilinear-map and asymmetric-bilinear-map identity-based-encryption (IBE) key exchange and encryption schemes are provided. IBE key exchange schemes use an IBE encapsulation engine to produce a secret key and an encapsulated version of the secret key. An IBE unencapsulation engine is used to unencapsulate the encapsulated key. IBE encryption schemes use an IBE encryption engine to produce ciphertext from plaintext. An IBE decryption engine is used to decrypt the ciphertext to reveal the plaintext. The IBE unencapsulation engine and decryption engines use bilinear maps. The IBE encapsulation and encryption engines perform group multiplication operations without using bilinear maps, improving efficiency. IBE private keys for use in decryption and unencapsulation operations may be generated using a distributed key arrangement in which each IBE private key is assembled from private key shares.