Proxy Re-Encryption Key Management for Secure Data Sharing
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing cloud computing systems lack secure key management and proxy re-encryption functions, leading to risks of key leakage and insecure data sharing, with current solutions failing to provide secure storage, update, and destruction of keys, and relying on insecure SSL transmission.
Innovation Solution
Implement a method and apparatus for sharing encrypted data using a key management system that generates and manages proxy re-encryption keys, integrates identity authentication, and employs SGX technology for secure data transmission, ensuring secure storage, update, and destruction of keys, and enabling secure data sharing between users.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If data is encrypted using key management system for secure storage, then data security is improved, but data sharing capability deteriorates due to inability to share without revealing private key
Solution Approach 1:
The patent introduces a proxy re-encryption key as an intermediary mechanism that enables the cloud service provider to transform encrypted data from one user's encryption to another user's encryption without the original user's private key being exposed. This mediator resolves the contradiction by allowing secure data sharing while maintaining the confidentiality of private keys throughout the process
2Adaptability or versatility
If existing proxy re-encryption system is used, then data sharing is enabled, but key security deteriorates because proxy server lacks secure key storage, update, and destruction functions
Solution Approach 1:
The patent merges the proxy re-encryption functionality with the key management system into a unified integrated system. This combination allows the same trusted infrastructure that securely manages encryption keys to also manage proxy re-encryption keys, thereby enabling data sharing while maintaining key security through centralized secure storage, update, and destruction capabilities
Solution Approach 2:
The key management system is extended to perform multiple functions including not only traditional key generation and management but also proxy re-encryption key management. This multi-functional approach allows a single trusted system to handle both data encryption and secure data sharing operations, resolving the contradiction between sharing capability and key security
3Ease of operation
If SSL transmission encryption is used for key transmission, then basic security is provided, but key security deteriorates because SSL cannot ensure security once key leaves key management system
Solution Approach 1:
The patent uses homomorphic encryption as an intermediary mechanism that allows computations and operations to be performed on encrypted data without decrypting it. This enables the key management system to perform proxy re-encryption operations on encrypted data while the data remains encrypted throughout the entire process, eliminating the security vulnerability of keys leaving the secure environment
Data Source
AI summary
Disclosed in the present application are a method and apparatus for sharing encrypted data, and a device and a readable medium. The method for sharing the encrypted data includes: receiving a data sharing request sent by a data owner, and generating a data owner public key and a data owner private key; generating a data user public key, and generating a proxy re-encryption key on the basis of the data user public key and the data owner private key; encrypting shared data on the basis of the data owner public key, and uploading the encrypted data to a data processing center; acquiring a corresponding proxy re-encryption key and corresponding encrypted data on the basis of the data sharing request, and re-encrypting the encrypted data on the basis of the proxy re-encryption key.