Identity-Based Signcryption System for Secure Messaging
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Conventional cryptographic systems, such as PKI, face challenges in providing secure and verifiable communication while maintaining confidentiality, non-repudiation, and unlinkability, especially in identity-based encryption and digital signature processes.
Innovation Solution
The implementation of an identity-based signcryption system using bilinear maps, specifically the Boneh-Franklin IBE scheme, which allows for secure message transmission by decoupling decryption and verification processes, ensuring confidentiality, non-repudiation, and unlinkability through the use of IBE public keys based on recipient identities and two-step decryption techniques.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If conventional PKI cryptographic systems are used with certificates and key servers, then public key authentication and encryption can be achieved, but system complexity increases due to key management infrastructure requirements
Solution Approach 1:
The patent extracts the key management functionality from the sender's side by introducing a trusted private key generator that centrally manages private key distribution. This removes the need for complex certificate authorities and key servers at distributed locations, centralizing the complexity while simplifying the overall system architecture for most users
Solution Approach 2:
The patent introduces a trusted private key generator as an intermediary between the identity system and the cryptographic operations. This mediator generates private keys based on identities and distributes them securely, eliminating the need for traditional PKI certificate infrastructure while maintaining security
2Reliability
If traditional digital signature and encryption schemes are used separately, then security properties can be achieved, but computational overhead and processing time increase
Solution Approach 1:
The patent merges digital signature and encryption operations into a single signcryption operation. By combining these two separate cryptographic primitives into one unified operation, the system achieves both authentication and confidentiality simultaneously, reducing computational overhead and processing time compared to performing signature and encryption separately
3Reliability
If sender's identity is included in ciphertext for verification, then message authenticity can be confirmed, but unlinkability between sender and message is lost
Solution Approach 1:
The patent segments the verification process into two distinct phases: first, the recipient verifies the signature on the message to confirm authenticity; second, the recipient decrypts the ciphertext to learn the sender's identity. This segmentation ensures that signature verification does not reveal sender identity, maintaining unlinkability while still providing message authenticity
Solution Approach 2:
The patent performs signature verification before decryption, allowing the recipient to confirm message authenticity without yet knowing the sender's identity. This preliminary action ensures that the verification process itself does not compromise unlinkability, as the identity remains hidden until the decryption step
Data Source
AI summary
Systems and methods are provided for performing digital signing and encryption using identity-based techniques. A message may be signed and encrypted in a single operation and may be decrypted and verified in two separate operations. Messages may be sent anonymously and confidentially. The systems and methods support message confidentiality, signature non-repudiation, and ciphertext authentication, ciphertext unlinkability, and anonymity.