Key Management Reference Identifier for Decryption Efficiency
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
In existing public key encryption systems, the inability to determine which public-private key pair is used for encryption and decryption leads to reduced data decryption efficiency, as the Authentication Unit Function (AUSF) device cannot identify the correct key pair, resulting in inefficient processing of user identity information.
Innovation Solution
A key management method that includes encrypting user identity information using a first public key and sending a user identity message with an indication identifier and a reference identifier to a network device, allowing the device to determine the corresponding private key for decryption through a pre-stored mapping table, thereby improving decryption efficiency.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If multiple public-private key pairs are allowed in the public key encryption system, then the system can support key lifecycle management and security requirements, but the AUSF device cannot determine which key pair to use for decryption, reducing data decryption efficiency
Solution Approach 1:
The patent segments the key identification process by introducing a reference identifier that uniquely indexes each public-private key pair. This allows the system to manage multiple key pairs efficiently by dividing the key selection process into: (1) encryption side generates a reference identifier for the used public key, (2) transmission side includes this reference identifier in the message, and (3) decryption side uses the reference identifier to quickly locate the corresponding private key through a pre-stored mapping table, thus resolving the contradiction between supporting multiple keys and maintaining decryption efficiency
Solution Approach 2:
The patent introduces a reference identifier as an intermediary element that mediates between the public key used for encryption and the private key used for decryption. This reference identifier acts as a pointer or index that connects the encryption operation to the corresponding decryption operation without requiring the decryption device to search through multiple key pairs, thus solving the key identification problem while maintaining high decryption efficiency
2Productivity
If a reference identifier is added to the user identity message to index the public key, then the decryption efficiency is improved, but the message size and processing complexity increase
Solution Approach 1:
The patent applies local quality by making the reference identifier compact and localized in the message structure. Rather than transmitting the entire public key or complex key identification data, only a concise reference identifier is included in the user identity message. This reference identifier is then used to locally index into a pre-stored mapping table at the decryption side, minimizing the additional message overhead while maintaining efficient key identification
Data Source
AI summary
A key management method/apparatus (user equipment) are described. The key management includes encrypting user identity information based on a first public key. The user equipment sends a first user identity message to a first network device. The first user identity message includes the user identity information, an indication identifier that indicates whether the user identity information is encrypted, and a reference identifier for indexing the first public key. The first network device sends, to a second network device, a third user identity message including the user identity information and the reference identifier that indexes the first public key. Thus, when receiving the third user identity message, the second network device can determine the encrypted user identity information, according to a pre-stored mapping table including the first private key.