Lattice-Based Attribute Encryption for Quantum Resistance

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Current encryption systems are vulnerable to quantum computers, which can potentially break existing encryption systems, compromising security as quantum computing becomes more prevalent.

Innovation Solution

A lattice-based attribute-based encryption system is developed, where a master public key and secret key are generated using a set of attributes, allowing users to decrypt information only if their attributes match the encryption criteria, using trap door lattices and secret sharing schemes to ensure secure decryption.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If current encryption systems are used, then ease of operation is maintained, but security is compromised due to quantum computer vulnerability

Engineering Contradiction:
ImprovesecurityVSAvoidencryption system complexity
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

The patent changes the fundamental mathematical parameters underlying encryption from traditional number-theoretic problems (factoring, discrete logarithms) to lattice-based problems (shortest vector problem, closest vector problem). This parameter change provides quantum resistance while maintaining operational functionality through attribute-based encryption mechanisms.

Inventive Principle:
Principle #35Parameter changes

Solution Approach 2:

The patent substitutes traditional cryptographic mechanisms with lattice-based cryptographic mechanisms. Specifically, it replaces RSA or ECC-based encryption with encryption schemes based on learning with errors (LWE) or learning with rounding (LWR) problems in lattice structures, providing quantum security.

Inventive Principle:
Principle #28Mechanics substitution (Replace mechanical system)

2Reliability

If attribute-based encryption is implemented, then security and access control are improved, but device complexity increases

Engineering Contradiction:
Improveaccess control securityVSAvoidkey management complexity
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

The patent segments the encryption system into distinct components: master key generation, user key generation based on attribute sets, ciphertext generation with attribute labels, and decryption based on attribute matching. This segmentation simplifies key management by allowing users to be identified through attribute sets rather than individual keys.

Inventive Principle:
Principle #1Segmentation

Solution Approach 2:

The patent creates a universal encryption framework where a single encryption scheme can handle multiple access control policies through different attribute sets. The same lattice-based cryptographic primitives serve multiple functions including key generation, encryption, and access control enforcement across different data and user scenarios.

Inventive Principle:
Principle #6Universality (Multi-functionality)

Data Source

PatentUS9503264B2Attribute based encryption using lattices
Publication Date: 2016.11.22 MICROSOFT TECHNOLOGY LICENSING LLC
  • US9503264B2 patent drawing
  • US9503264B2 patent drawing
  • US9503264B2 patent drawing

AI summary

A master public key is generated as a first set of lattices based on a set of attributes, along with a random vector. A master secret key is generated as a set of trap door lattices corresponding to the first set of lattices. A user secret key is generated for a user's particular set of attributes using the master secret key. The user secret key is a set of values in a vector that are chosen to satisfy a reconstruction function for reconstructing the random vector using the first set of lattices. Information is encrypted to a given set of attributes using the user secret key, the given set of attributes and the user secret key. The information is decrypted by a second user having the given set of attributes using the second user's secret key.