Identity-Based Proxy Encryption for Secure Digital Content Delivery
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing solutions for securely delivering digital content, such as video on demand, fail to allow users to access encrypted services without pre-registration, require secure channels, and do not enable users to unlock services independently of service providers, while also lacking transparency in transaction validation without access to private information.
Innovation Solution
An Identity-Based Proxy Encryption (IBPE) scheme that uses an IBE scheme and a Proxy Encryption scheme to generate transcription keys, allowing users to decrypt content with approval from a financial institution, enabling secure delivery and validation of transactions without pre-registration or secure channels, and allowing users to unlock services independently.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If users download encrypted content without pre-registration, then service accessibility and user convenience are improved, but secure delivery and transaction validation become more difficult
Solution Approach 1:
The system performs preliminary key preparation by generating a public key for the user before the actual content download occurs. The service provider obtains the user's public key in advance (without requiring pre-registration), encrypts the content with this public key, and stores it. When the user downloads the content, they simply need to provide their identity information to retrieve the pre-prepared encrypted content, eliminating both pre-registration requirements and the need for secure channels during download.
Solution Approach 2:
The patent introduces a trusted third party (TTP) as an intermediary that holds the user's public key and assists in the key exchange process. The TTP mediates between the user and service provider, enabling the service provider to obtain the user's public key without direct interaction or pre-registration with the user. This intermediary mechanism ensures secure key distribution while maintaining user convenience and service accessibility.
2Adaptability or versatility
If users can unlock services independently without service provider involvement, then user autonomy and service flexibility are improved, but transaction security and validation become more complex
Solution Approach 1:
The patent segments the service access process into distinct phases: content acquisition phase (where user autonomy is maximized and users can download content independently using their public key) and validation phase (where the service provider verifies the transaction using the user's public key and the TTP's signatures). This segmentation allows users to independently unlock and access services without service provider involvement during the actual access, while the service provider retains validation capability through cryptographic verification of the TTP's signatures on the transaction records.
3Productivity
If pre-registration is eliminated, then service accessibility and user convenience are improved, but service provider control and security management deteriorate
Solution Approach 1:
The system enables users to self-serve by allowing them to independently download encrypted content using their own public key without requiring service provider registration or approval. The user's public key acts as their own authentication credential, eliminating the need for pre-registration processes. The service provider simply needs to verify the TTP's signature on the transaction, which is a simple cryptographic operation that maintains security while dramatically improving service delivery efficiency.
Data Source
AI summary
The present invention is a method to ensure a secure exchange of crypted numeric data between two entities, where their decryption depends to the approval of a third entity. The solution uses a combination of Identity Based Encryption scheme, and transcription trap use.