Re-encryption Key Generation Device for Attribute-Based Proxy-Re-Encryption
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Attribute-based proxy-re-encryption schemes increase the size of ciphertext during re-encryption due to the inclusion of a random matrix.
Innovation Solution
A re-encryption key generation device that randomizes and encrypts a decryption key using attribute-based encryption, eliminating the need for a random matrix in the re-encrypted ciphertext.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Adaptability or versatility
If a random matrix is included in a re-encrypted ciphertext to enable attribute-based proxy-re-encryption, then the functionality of changing decryption authority is improved, but the size of the ciphertext increases
Solution Approach 1:
The patent extracts the random matrix from the re-encrypted ciphertext and relocates it to the re-encryption key. This separation allows the re-encrypted ciphertext to be stored more efficiently while the re-encryption key (which is not frequently updated) contains the random matrix needed for future re-encryption operations. The decryption authority changing functionality is preserved because the random matrix remains accessible through the re-encryption key when needed.
Solution Approach 2:
The random matrix is generated and stored in advance in the re-encryption key during the key generation phase, before any re-encryption operations are performed. This preliminary action eliminates the need to include the random matrix in each re-encrypted ciphertext, as it is already prepared and stored separately. The functionality is maintained because the pre-stored random matrix can be used when re-encryption is needed.
2Volume of stationary object
If the ciphertext size is reduced by eliminating the random matrix, then storage efficiency is improved, but the complexity of key management increases
Solution Approach 1:
The patent moves the random matrix from the ciphertext dimension to the key dimension, creating a separate storage dimension for cryptographic parameters. This dimensional separation allows ciphertext to be stored compactly while keys are managed separately with their own storage structure. The increased key management complexity is isolated to the key dimension and does not affect ciphertext storage efficiency.
Data Source
AI summary
A key generation device generates a decryption key dkx having a tag-added decryption key and a decryption key adkx. The tag-added decryption key includes a decryption key tdkx in which a key attribute x is set and a tag tgφ required to decrypt a ciphertext with the decryption key tdkx. In the decryption key adkx, the key attribute x is set. An encryption device generates an original ciphertext octy in which a ciphertext attribute y corresponding to the key attribute x is set and which can be decrypted with the tag-added decryption key. A re-encryption key generation device encrypts the decryption key tdkx by an attribute-based encryption scheme using a ciphertext attribute y′, so as to generate a re-encryption key rkx,y′ which is a key for generating a re-encrypted ciphertext rcty′ which can be decrypted with a decryption key adkx′ in which a key attribute x′ corresponding to the ciphertext attribute y′ is set.


