Identity-Based Key Generation for Cluster Data Encryption
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current data encryption methods in cluster organization information networks face challenges such as irregular public keys leading to decryption errors, heavy loads on public key generators for key distribution, and inefficiencies in mobile cloud computing due to high computational requirements for fine-grained access control.
Innovation Solution
A method and system for generating private keys and encrypting data using system parameters and identification vectors, allowing for secure and efficient data transmission by reducing the load on public key generators and improving decryption times through hierarchical encryption and fine-grained access control.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If traditional public key encryption is used, then data transmission security is improved, but the public key format becomes irregular and difficult to verify
Solution Approach 1:
The patent changes the parameter format of the public key from an irregular binary string to a structured format containing verification information. Specifically, the public key is transformed to include a hash value of the recipient's identity, allowing senders to verify the public key's authenticity by comparing the hash with the known identity, thus resolving the verification difficulty while maintaining security.
2Device complexity
If a public key generator distributes private keys to all cluster members, then key management is simplified, but the PKG bears heavy computational load and becomes a single point of failure
Solution Approach 1:
The patent segments the key generation process into two parts: the PKG generates only the system parameters and master public key, while each user independently generates their own private key using the master public key and their identity information. This segmentation eliminates the need for the PKG to distribute private keys to each user, reducing the PKG's computational load and eliminating it as a single point of failure, while maintaining simplified key management through the use of identity-based keys.
3Reliability
If fine-grained access control is implemented in mobile cloud computing, then data access security is improved, but computational requirements and decryption time increase significantly
Solution Approach 1:
The patent implements preliminary action by pre-computing and storing auxiliary information in the ciphertext that enables efficient decryption. The encryption process pre-processes the data according to access control policies and embeds necessary decryption components directly in the ciphertext. This allows authorized users to decrypt data quickly using their private keys without requiring complex real-time computations, thus reducing decryption time while maintaining fine-grained access control security.
Data Source
AI summary
A method for decrypting an encrypted message in a cluster may be provided. The method may include generating, by a first private key generator, one or more system parameters and a master key using a security parameter of the cluster and a depth of the maximum of a unit vector, the cluster including a first member and a second member. The method may also include generating, by the first private key generator, a private key of the first member; The method may further include generating, by a second private key generator, a private key of the second member based on the one or more system parameters, the identification vector of the first member, the private key of the first member, and an identification vector of the second member; The method may still further include decrypting the encrypted message the private key of the first member or the second member.