Identity-Based Encryption for Secure Data Transmission
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current message service security technologies, such as SSL, are vulnerable to data interception by third parties during transmission and reception, as data is decrypted on servers, compromising security, especially in social and business-oriented messaging services.
Innovation Solution
Implementing an identity-based encryption technique that generates a secret key using a user ID as a public key, allowing data to be encrypted and decrypted without server intervention, ensuring secure communication between terminals without relying on additional network security techniques.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If SSL encryption is used for data transmission, then data security during transmission is improved, but data can still be accessed by third parties at intermediate stages
Solution Approach 1:
The patent extracts the decryption operation from the server-side to the client-side by implementing identity-based encryption where each user holds their own private key. This removes the server's ability to decrypt data, eliminating third-party access at intermediate stages while maintaining transmission security.
Solution Approach 2:
Each user performs their own encryption and decryption operations using their personal identity-based key pairs. The system eliminates the need for server intervention in the cryptographic operations, allowing users to securely communicate directly without exposing data to intermediate servers.
2Productivity
If server-based encryption is used, then data can be transmitted over networks, but separate network security measures are required
Solution Approach 1:
The patent merges the encryption function directly into the data transmission process itself through identity-based encryption. Instead of requiring separate network security layers (SSL/TLS), the encryption is built into the communication protocol, eliminating redundant security measures and simplifying the overall system architecture.
Solution Approach 2:
The identity-based encryption scheme serves multiple functions simultaneously: it provides authentication, encryption, and key management all through a single unified mechanism based on user identities, replacing the need for multiple separate network security protocols.
3Reliability
If traditional encryption systems are used, then data security is maintained, but system complexity and operational overhead increase
Solution Approach 1:
The patent changes the fundamental parameter of key management from server-controlled to user-controlled identity-based keys. This parameter change simplifies the system by eliminating complex certificate validation, trust chains, and server-side cryptographic operations, while maintaining strong security through mathematical hardness assumptions.
Data Source
AI summary
Disclosed are a data transmission/reception apparatus and method. A secret key generation unit uses a user ID as a public key to generate a secret key corresponding to the user ID. An encryption/decryption unit sets a user ID intended to receive data as an input value to encrypt the data using a certain method and decrypt the encrypted data using a certain method on the basis of a secret key corresponding to a user ID of a receiver generated by the secret key generation unit. The transmission apparatus and method according to the present invention allow for secure communication between terminals without server intervention by encrypting data using an ID-based encryption technique for safe data communication and then communicating the encrypted data.