Private Mutually Authenticated Key Exchange Using HIPE
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Conventional authenticated key exchange protocols fail to ensure the privacy of both session keys and user identities, especially in environments like the Internet of Things (IoT), where sensitive information leakage can occur during secure connection establishment, and they are not secure against both passive and active attacks, particularly in post-quantum settings.
Innovation Solution
The implementation of a private, mutually authenticated key exchange method using hierarchical inner-product encryption (HIPE) schemes, which enables secure key agreement by encrypting identities and attributes, hiding authorization policies, and utilizing lattice-based cryptography for post-quantum security, allowing for various authorization policies such as anonymous identity-based, prefix-based, polynomial evaluation, disjunctions, and conjunctions.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Loss of information
If conventional authenticated key exchange protocols are used, then key exchange functionality is achieved, but privacy of session keys and user identities is compromised
Solution Approach 1:
The protocol segments the key exchange process into distinct phases: initial key exchange, authentication phase with HIPE ciphertext, and session establishment. Each phase handles specific security requirements separately, allowing privacy protection in the authentication phase while maintaining overall security reliability.
Solution Approach 2:
The patent introduces HIPE ciphertext as an intermediary mechanism that enables authentication without directly exposing identities or session keys. The ciphertext acts as a mediator that verifies authorization policies while preserving the privacy of underlying sensitive information.
2Loss of information
If hierarchical inner-product encryption is used to protect privacy, then information leakage is prevented, but computational complexity increases
Solution Approach 1:
The system performs preliminary key generation and HIPE ciphertext preparation before the actual authentication occurs. This allows complex cryptographic operations to be pre-computed, reducing the computational burden during the actual key exchange and authentication phases.
Solution Approach 2:
The patent utilizes lattice-based cryptographic parameters that provide post-quantum security while optimizing the balance between privacy protection and computational efficiency. By carefully selecting cryptographic parameters, the system achieves strong privacy guarantees without excessive computational overhead.
3Reliability
If lattice-based cryptography is implemented for post-quantum security, then security against quantum attacks is achieved, but computational overhead increases
Solution Approach 1:
The patent extracts and separates the post-quantum cryptographic operations from the standard key exchange protocol. By isolating lattice-based operations to specific phases (key generation, HIPE ciphertext creation), the system achieves post-quantum security while minimizing the overall computational overhead of the complete protocol.
Data Source
AI summary
A method of private mutually authenticated key exchange is provided. The method may include receiving, at the first device, a message transmitted from a second device and including a hierarchical inner-product encryption (HIPE) ciphertext. Further, the method may include decrypting, at the first device, the HIPE ciphertext to generate a first authenticated encryption (AE) ciphertext. The method may further include decrypting, at the first device, the first AE ciphertext. Further, the method may include encrypting, at the first device, a second AE ciphertext including a signature and one or more attributes of the first device. Moreover, the method may include transmitting, to the second device, another message including the second AE ciphertext.