Registration Apparatus for Multi-User Searchable Encryption
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current searchable encryption technologies face challenges in supporting multi-user common key schemes, particularly in enabling efficient search operations such as partial match and range searches, and are limited by the use of public key encryption technologies which affect speed and scalability.
Innovation Solution
A registration apparatus generates encrypted data using multiple functions, incorporating random numbers and attribute information to enable secure and efficient searchable encryption under a multi-user common key encryption scheme, allowing for partial match and range searches without relying on public key encryption.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If public key encryption technology is used to achieve multi-user searchable encryption, then security and access control are improved, but search speed and operational efficiency deteriorate
Solution Approach 1:
The patent replaces public key encryption mechanisms with common key encryption mechanisms. Specifically, it substitutes the asymmetric cryptographic system with a symmetric cryptographic system that uses common keys, thereby eliminating the computational overhead of public key operations while maintaining security through proper key management and attribute-based access control structures.
Solution Approach 2:
The patent changes the cryptographic parameter from asymmetric keys to symmetric common keys. By transitioning from public-private key pairs to shared secret keys, the system achieves faster encryption and decryption operations while implementing multi-user access control through attribute-based encryption schemes that use common key infrastructure.
2Productivity
If common key encryption is used for searchable encryption, then search speed is improved, but multi-user access control capability deteriorates
Solution Approach 1:
The patent segments the access control mechanism into attribute-based components. Instead of using a single common key for all users, the system divides access control into multiple attributes that can be independently managed. Each user possesses attributes that determine their access rights, allowing fine-grained multi-user control while maintaining the speed advantages of common key encryption.
Solution Approach 2:
The patent creates a universal common key framework that serves multiple functions simultaneously. The common key infrastructure supports both fast search operations and sophisticated multi-user access control through attribute-based encryption. The system achieves multi-functionality by combining common key efficiency with attribute-based access control versatility.
3Measurement precision
If attribute-based encryption is implemented for fine-grained access control, then access control precision is improved, but system complexity increases
Solution Approach 1:
The patent uses copying of cryptographic primitives to simplify the overall system. By reusing common key encryption building blocks and attribute-based components across multiple users and data elements, the system achieves fine-grained access control without proportionally increasing complexity. The modular copying of encryption functions reduces the need for unique complex mechanisms for each user.
Data Source
AI summary
A registration apparatus generates a data random number tuple R that is a tuple of random numbers whose quantity is the same as a level quantity L of a hierarchy that a user attribute forms, and that is also a tuple of uniformly random numbers. Also, the registration apparatus accepts a plaintext M and attribute information B. The registration apparatus executes a function F_2 by taking as input a concatenated value of an attribute value of each level j in the attribute information B and a number of each level j, executes a function F_3 by taking as input a function value of the function F_2, calculates an attribute element C_{j, 0, 0} that is an exclusive-or of a function value of the function F_3 and a jth random number of the data random number tuple R, executes a function F_4 by taking as input the plaintext M and an exclusive-or of the data random number tuple R, and generates encrypted data C that includes the attribute element C_{j, 0, 0} and a ciphertext C_{L+1} which is a function value of the function F_4. Then, the registration apparatus registers the encrypted data C in a data management apparatus.