Privacy-Preserving Leakage-Deterring Encryption via One-Time Pad

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Existing solutions for privacy-preserving leakage-deterring public-key encryption require extensive communication with an authority and oblivious decryptor, which can be prohibitive and inefficient, especially in scenarios where minimizing computational and communication overhead is crucial.

Innovation Solution

A method involving a sender system that sends a commitment to leakage-deterring data to an authority, proves access to the commitment in zero-knowledge, and encrypts messages using a one-time pad and attribute-based encryption with predefined time period data and receiver identifiers, forming a ciphertext that minimizes the need for subsequent communication with the oblivious decryptor.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If existing leakage-deterring encryption schemes are used, then security against information leakage is improved, but communication overhead increases due to required interaction with authority and oblivious decryptor

Engineering Contradiction:
Improvesecurity guaranteeVSAvoidcommunication overhead
Core Design Contradiction:
ReliabilityVSLoss of time

Solution Approach 1:

The patent applies preliminary action by having the authority sign the commitment to leakage-deterring data in advance during key generation. This pre-signed commitment is then embedded in the public key, eliminating the need for real-time authority interaction during encryption and decryption operations, thus reducing communication overhead while maintaining security guarantees

Inventive Principle:
Principle #10Preliminary action

Solution Approach 2:

The patent extracts the authority's role from the encryption/decryption process by embedding the signed commitment directly in the public key. This extraction allows the system to operate independently of the authority during actual message processing, removing the communication bottleneck while preserving the leakage-deterring security property

Inventive Principle:
Principle #2Taking out (Extraction)

2Reliability

If existing leakage-deterring encryption schemes are used, then security against information leakage is improved, but computational complexity increases due to multiple encryption layers and authority interactions

Engineering Contradiction:
Improvesecurity guaranteeVSAvoidcomputational complexity
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

The patent extracts and eliminates redundant computational steps by removing the need for real-time authority verification and multiple interaction rounds. The pre-embedded signed commitment in the public key allows direct decryption operations without complex verification protocols, reducing computational complexity while maintaining security

Inventive Principle:
Principle #2Taking out (Extraction)

Solution Approach 2:

The patent performs complex security setup operations in advance during key generation, including the authority signing the commitment and embedding it in the public key. This preliminary action shifts computational burden from the encryption/decryption phases to the key generation phase, making actual message processing more efficient

Inventive Principle:
Principle #10Preliminary action

Data Source

PatentUS11728991B2Privacy-preserving leakage-deterring public-key encryption from attribute-based encryptions
Publication Date: 2023.08.15 INTERNATIONAL BUSINESS MACHINE CORPORATION
  • US11728991B2 patent drawing
  • US11728991B2 patent drawing
  • US11728991B2 patent drawing

AI summary

Privacy-preserving leakage-deterring public-key encryption techniques are provided. A sender system sends to an authority system a commitment to leakage-deterring-data, and proves in zero-knowledge that the sender system has access to an opening to the commitment. The sender system receives a signature corresponding to a signed commitment to the leakage-deterring-data and an identifier of the sender system. The sender system encrypts a message to a receiver system by applying a one-time pad to the message using a one-time-pad key, and encrypts the result of the application with the public key of the receiver system. The sender system encrypts the one-time-pad key with an attribute-based encryption scheme with a public key of an oblivious decryptor system. The sender system forms a ciphertext from a combination of the encrypted message and the encrypted one-time-pad key and sends the ciphertext to the receiver system.