Multi-User Searchable Encryption via Secret Key Distribution

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Existing searchable encryption technologies do not adequately support multi-user information searches, leading to security concerns and increased processing loads when share-target users need to access encrypted data.

Innovation Solution

An information processing system that employs a secret distribution process to generate distribution keys, allowing share-target users to perform searches on encrypted data without sharing the user key of the share-source user, using homomorphic hash calculations to determine access permissions.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Ease of operation

If the user key of the share-source user is shared with share-target users to enable multi-user search, then the accessibility and ease of operation are improved, but the security level deteriorates

Engineering Contradiction:
Improvemulti-user search accessibilityVSAvoidsecurity level
Core Design Contradiction:
Ease of operationVSReliability

Solution Approach 1:

The user key is segmented into multiple distribution keys through secret distribution. Each share-target user receives a unique distribution key instead of the full user key. This segmentation enables multi-user access while maintaining security, as no single distribution key alone can decrypt the encrypted index or perform search operations without collaboration from other holders.

Inventive Principle:
Principle #1Segmentation

Solution Approach 2:

The patent introduces an intermediary verification mechanism where the server acts as a mediator to verify search requests. The server performs homomorphic hash calculations on received distribution keys and compares them with stored hash values. This intermediary verification layer enables secure multi-user search without direct key sharing between users.

Inventive Principle:
Principle #24Intermediary (Mediator)

2Ease of operation

If traditional searchable encryption is used to enable multi-user search, then the ease of operation is improved, but the processing load and time consumption increase

Engineering Contradiction:
Improvemulti-user search capabilityVSAvoidprocessing load
Core Design Contradiction:
Ease of operationVSLoss of time

Solution Approach 1:

The system performs preliminary actions by pre-calculating and storing hash values of distribution keys on the server during the key distribution phase. When search requests are made, the server only needs to perform homomorphic hash calculations on received keys and compare them with pre-stored values, rather than performing full encryption/decryption operations. This preliminary preparation significantly reduces processing time during actual search operations.

Inventive Principle:
Principle #10Preliminary action

Solution Approach 2:

The patent replaces traditional mechanical encryption/decryption operations with homomorphic hash calculations. Instead of decrypting the encrypted index to perform searches (which is computationally intensive), the system uses homomorphic properties to verify search requests through hash comparisons. This substitution of cryptographic mechanisms dramatically reduces processing load while maintaining security.

Inventive Principle:
Principle #28Mechanics substitution (Replace mechanical system)

Data Source

PatentUS11595209B2Information processing system, information processing method, and information processing apparatus
Publication Date: 2023.02.28 SONY GROUP CORP
  • US11595209B2 patent drawing
  • US11595209B2 patent drawing
  • US11595209B2 patent drawing

AI summary

There is provided an information processing system including: a first apparatus (10a) that divides a user key (UK) of a share-source user through a secret distribution process to generate a plurality of distribution keys (S1 and S2); a second apparatus (10b) that sends a processing request to execute a predetermined process by using one of a plurality of the distribution keys generated by the first apparatus; and a third apparatus (20) that makes a determination based on one of a plurality of the distribution keys generated by the first apparatus and the processing request received from the second apparatus.