Identity Based Encryption Integration with SSL/TLS
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
The existing SSL/TLS protocol has limitations in generating and managing PreMasterSecret keys, which restricts its use scope and increases overhead in certificate management and maintenance.
Innovation Solution
The integration of Identity-Based Encryption (IBE) technology with SSL/TLS allows for secure communication handshake by encrypting and decrypting the PreMasterSecret key using public parameters and a private key, eliminating the need for traditional certificate authorities and diversifying key encryption modes.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Adaptability or versatility
If traditional SSL/TLS protocol uses unitary form to generate PreMasterSecret key, then the protocol structure is simple, but the use scope is restricted and certificate management overhead increases
Solution Approach 1:
The patent changes the parameter of key generation method from traditional RSA-based PreMasterSecret generation to Identity-Based Encryption (IBE) based generation. By using IBE, the system can generate keys directly from identity information without requiring complex certificate chains, thus expanding the use scope while simplifying management.
Solution Approach 2:
The patent introduces a key generation center as an intermediary authority that issues private keys to users based on their identities. This intermediary eliminates the need for complex certificate authority hierarchies and simplifies the trust model, allowing the SSL/TLS protocol to work with simpler certificate management.
2Ease of operation
If IBE technology is integrated with SSL/TLS, then certificate management is simplified, but the system complexity increases
Solution Approach 1:
The patent merges IBE technology with the existing SSL/TLS protocol structure. By combining these two technologies, the system achieves simplified certificate management while maintaining compatibility with existing SSL/TLS infrastructure, thus not significantly increasing overall system complexity.
Solution Approach 2:
The patent makes the SSL/TLS protocol more universal by enabling it to work with IBE-based key generation. This multi-functionality allows the protocol to handle both traditional and IBE-based key pairs, simplifying management while expanding capabilities without requiring complete system redesign.
Data Source
AI summary
A communication system that obtains a key includes: a server that confirms support of Identity Based Encryption (IBE) authentication; the server obtains public parameters and a private key for IBE; and the server receives a PreMasterSecret key encrypted through the IBE, and obtains a plain text of the PreMasterSecret key according to the public parameters and the private key. The system includes a client and a server. The client includes an IBE negotiating module, a public parameter obtaining module, a server identifier obtaining module, and a processing module. The server includes an IBE negotiating module, a public parameter obtaining module, a private key obtaining module, and a processing module. Through combination of the IBE technology and the SSL/TLS technology, the modes of encrypting a PreMasterSecret key in the existing SSL/TLS protocol are diversified, and the use scope of the existing SSL/TLS protocol is extended substantially.