Name Encryption Device Using Distributed Key Segmentation
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing pseudonymization techniques using common key encryption systems are inefficient in managing keys, making it difficult to prevent key leakage and authenticate corresponding relationships between names and pseudonyms, and are vulnerable to information leakage due to centralized key management.
Innovation Solution
A system that disperses a name into multiple parts, generates commitments, and encrypts them using individual public keys, allowing for distributed key management and simple algebraic operations for zero-knowledge proof, making it difficult to leak information by requiring multiple authorized individuals to collude for key leakage.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If common key encryption system is used for pseudonymization, then encryption processing can be performed, but key management becomes centralized and vulnerable to leakage
Solution Approach 1:
The patent segments the single centralized key into multiple distributed keys held by different authorized individuals. The pseudonymization process requires collaboration among multiple parties, each possessing a portion of the key material, thereby eliminating single-point key management vulnerabilities while maintaining encryption functionality.
Solution Approach 2:
The patent transitions from a single-dimension key management model (one centralized key) to a multi-dimensional model where key security is distributed across multiple dimensions (multiple authorized individuals). This dimensional expansion enhances security by requiring collusion among multiple parties to compromise the system.
2Reliability
If common key encryption is used, then pseudonymization can be achieved, but authentication of name-pseudonym correspondence becomes difficult
Solution Approach 1:
The patent introduces commitment objects as intermediaries that bind names to pseudonyms without revealing the underlying key material. These commitment objects serve as verifiable proofs of correspondence between original names and pseudonyms, enabling authentication while maintaining the distributed key structure.
3Productivity
If centralized key management is implemented, then pseudonymization processing can be performed, but information leakage risk increases
Solution Approach 1:
By segmenting key ownership among multiple authorized individuals, the patent reduces information leakage risk. Even if one individual is compromised, the complete key material cannot be reconstructed, thereby protecting against information leakage while maintaining the ability to perform pseudonymization processing.
4Ease of operation
If simple algebraic operations are used for pseudonymization, then zero-knowledge proof becomes easier, but key distribution security becomes challenging
Solution Approach 1:
The patent replaces complex cryptographic key distribution mechanisms with simpler algebraic operations that naturally provide security through mathematical properties. The commitment object mechanism uses straightforward algebraic relationships to enable zero-knowledge proofs while the distributed key structure inherently protects against unauthorized reconstruction.
Data Source
AI summary
Provided is a name encryption device which suppresses leak and facilities the zero-knowledge proof by making the pseudonymization process to be a simple algebraic calculation. The name encryption device converts an encrypted name text into a pseudonym-encrypted text by dispersing the encrypted name text. The encryption device disperses a name into a plurality of name parts to generate a commitment for each of the parts and encrypts disclosure information and each of the name parts by respective public keys. The encryption device outputs the disclosure information relating to the respective commitments and encrypted texts obtained by the respective public keys of the name parts.