Public Key Reliability Certification Without Authority
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current certification authority-centric public key cryptography schemes are inflexible and difficult to handle for generating and verifying secondary key pairs, which are essential for reliable interactions over the Internet, particularly in scenarios requiring electronic certification.
Innovation Solution
A method and apparatus for generating a second key pair associated with a first key pair, where the second secret key is calculated by multiplying the first secret key with an integer x, and the second public key is calculated by multiplying the first public key with the same integer x, utilizing cyclic groups and elliptic curve cryptography, allowing for digital signature execution without relying on a certification authority.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If a certification authority-centric public key cryptography scheme is used, then the reliability of digital certificates is guaranteed, but the flexibility and ease of operation for generating and verifying secondary key pairs deteriorates
Solution Approach 1:
The system enables self-service by allowing entities to autonomously generate secondary key pairs from their primary key pair without requiring a certification authority. The key generation process is performed locally using cryptographic operations on the existing primary key, eliminating the need for external certification services while maintaining security and reliability through mathematical proofs of key relationships.
2Reliability
If a certification authority-centric public key cryptography scheme is used, then the security of key verification is maintained, but the adaptability to various application scenarios deteriorates
Solution Approach 1:
The invention provides a universal key pair generation mechanism that can be applied across multiple application scenarios. The method of generating secondary key pairs from primary key pairs using cryptographic operations is universally applicable to different use cases including digital signatures, authentication, and data encryption, without requiring scenario-specific certification authorities. The mathematical proof mechanism ensures security while the flexible key generation process adapts to various application needs.
3Reliability
If traditional key pair generation methods are used, then the process requires certification authority involvement, but this increases the device complexity and operational overhead
Solution Approach 1:
The invention extracts the essential function of key verification from the certification authority infrastructure and implements it locally through mathematical proofs. By removing the dependency on external certification authorities and embedding the verification capability directly in the key generation process, the system eliminates complex infrastructure requirements while maintaining public key authenticity through cryptographic proof mechanisms.
Data Source
AI summary
Proving reliability of a second public key of a second key pair generated in association with a first key pair. A generator 210 calculates and stores x·H(n) which is proof data and ax·H(n), when the second public key ax·g1 which is of the second key pair is generated (S301). The generator 210 provides the calculated proof data to a receiving apparatus 220 (S302) which has received the proof data, transmits a proof request to the proving apparatus 230 for requesting a proof that the second public key ax·g1 is generated by an owner of the first public key a·g1 (S303). In response to the proof request, the proving apparatus 230 verifies the proof data by calculating a verification formula for the proof data (S304). The proving apparatus 230 transmits the verification result as a response to the proof request from the receiving apparatus 220 (S305).