Identity-Based Encryption for Secure Message Storage
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Users face challenges in securing their stored messages as message service providers may be compelled to share access to these messages, compromising privacy, especially with laws like PRISM requiring data access for surveillance purposes, and existing encryption techniques like S/MIME, PGP, and identity-based encryption do not adequately protect user privacy.
Innovation Solution
Implementing identity-based encryption where the user generates and retains the master private key, allowing only the client to decrypt messages, thus preventing the message service provider from accessing or sharing encrypted data, and enabling secure message handling and sharing without exposing the decryption key.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If message service providers store and manage user messages, then message accessibility and service functionality are improved, but user privacy and message security deteriorate due to potential compelled access and data sharing
Solution Approach 1:
The encryption key is segmented into two parts: a public key stored with the message service provider for enabling message accessibility, and a private key retained by the user for maintaining security control. This segmentation allows the system to achieve both message accessibility through the provider while preserving user privacy through local key custody.
2Object-affected harmful factors
If existing encryption techniques like S/MIME and PGP are used, then message confidentiality is improved, but ease of operation deteriorates due to key management complexity
Solution Approach 1:
The complex key management burden is extracted from the user and transferred to the message service provider. The provider handles public key distribution, certificate management, and encryption/decryption operations, while users simply retain their private keys. This extraction maintains strong confidentiality through cryptographic techniques while dramatically simplifying user operations.
3Reliability
If identity-based encryption is implemented with user-retained private keys, then message security is improved by preventing provider access, but device complexity increases due to cryptographic operations
Solution Approach 1:
The message service provider acts as an intermediary that handles the cryptographic complexity. The provider implements the identity-based encryption infrastructure, manages public key generation from user identifiers, and performs encryption/decryption operations. This intermediary approach maximizes message security through robust cryptography while shielding users from the underlying system complexity.
Data Source
AI summary
A method, system, and computer program product for securing access to stored messages using identity-base encryption are disclosed. The method includes generating a master private key and generating a corresponding master public key. The master private key and the master public key are both generated at a messaging client. The method also includes transmitting the master private key from the messaging client to a messaging server. The transmittal of the master private key to the messaging server is performed without transmitting the master private key.