Implicit Certificates Using RLWE for Quantum-Resistant Authentication

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Current cryptographic techniques, particularly those relying on asymmetric mathematical problems, may become vulnerable to advances in technology, necessitating the development of stronger cryptographic methods to maintain data security, especially in protecting sensitive information like financial and medical data.

Innovation Solution

The implementation of implicit certificates using Ring Learning With Errors (RLWE) public keys, which are resistant to quantum-based computing attacks, enables secure communication by generating and verifying cryptographic key pairs through a certificate authority, ensuring the authenticity of public keys and verified access to private keys.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If traditional asymmetric cryptographic techniques are used, then current data security requirements are met, but vulnerability to quantum computing attacks increases

Engineering Contradiction:
ImprovesecurityVSAvoidquantum computing vulnerability
Core Design Contradiction:
ReliabilityVSObject-affected harmful factors

Solution Approach 1:

The patent changes the fundamental mathematical parameters underlying cryptographic security from traditional asymmetric problems (factoring, discrete logarithm) to lattice-based problems (Learning With Errors). This parameter transformation provides quantum resistance while maintaining security requirements, directly resolving the contradiction between current security adequacy and quantum vulnerability

Inventive Principle:
Principle #35Parameter changes

2Object-affected harmful factors

If stronger cryptographic techniques are implemented, then quantum resistance is achieved, but computational resource requirements increase

Engineering Contradiction:
Improvequantum resistanceVSAvoidcomputational resources
Core Design Contradiction:
Object-affected harmful factorsVSUse of energy by moving object

Solution Approach 1:

The patent extracts and eliminates unnecessary computational overhead from traditional certificate structures by using implicit certificates. Instead of full explicit certificates with multiple signature components, the system uses compact implicit certificates that embed only essential verification information, reducing computational and storage resources while maintaining quantum resistance

Inventive Principle:
Principle #2Taking out (Extraction)

Solution Approach 2:

The patent inverts the traditional certificate verification approach by using implicit certificates where the verifier can derive public keys and verify signatures with reduced computational effort compared to explicit certificate validation, thereby achieving quantum resistance with lower resource consumption

Inventive Principle:
Principle #13The other way round (Inversion)

3Speed

If certificate verification complexity is reduced, then processing speed increases, but security verification thoroughness may decrease

Engineering Contradiction:
Improveverification speedVSAvoidverification thoroughness
Core Design Contradiction:
SpeedVSReliability

Solution Approach 1:

The patent extracts only the essential verification elements needed for security validation, removing redundant certificate components. The implicit certificate structure contains minimal necessary information for public key derivation and signature verification, enabling fast verification while maintaining thorough security checks through the mathematical properties of lattice-based cryptography

Inventive Principle:
Principle #2Taking out (Extraction)

Data Source

PatentUS10516543B2Communication protocol using implicit certificates
Publication Date: 2019.12.24 AMAZON TECH INC
  • US10516543B2 patent drawing
  • US10516543B2 patent drawing
  • US10516543B2 patent drawing

AI summary

A first entity and a second entity establish a protected authenticated communication channel using an implicit certificate issued by a certificate authority. In some examples, the implicit certificate is generated based at least in part on the ring learning with errors (“RLWE”) problem. Using the implicit certificate, the first entity and the second entity exchange information that enables the entities to negotiate a shared secret. The shared secret may be used to establish a cryptographically protected communication channel. Successful use of the shared secret authenticates the identity of the first entity and the second entity.