Non-Interactive Zero-Knowledge Proof Without Bilinear Pairing

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Existing zero-knowledge proof methods require bilinear pairing for verification of multiplication and division operations, limiting their practical application and suffering from high computational costs.

Innovation Solution

A novel non-interactive zero-knowledge proof method that uses a commitment parameter to generate commitment values and an offset term, allowing verification without bilinear pairing, supporting both linear and generalized multiplication relationships for secure data processing.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If bilinear pairing is used to verify multiplication and division operations, then verification capability is improved, but computational cost increases and device complexity increases

Engineering Contradiction:
Improveverification capabilityVSAvoidcomputational complexity
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

The patent extracts the bilinear pairing operation from the verification process and replaces it with alternative cryptographic primitives. Specifically, the invention uses commitment schemes and zero-knowledge proofs that do not rely on bilinear pairings, thereby eliminating the computational burden while maintaining verification capability. The core verification logic is separated from the pairing operation and reimplemented using more efficient mathematical foundations.

Inventive Principle:
Principle #2Taking out (Extraction)

Solution Approach 2:

The patent changes the underlying cryptographic parameters and assumptions. Instead of relying on the mathematical properties of bilinear pairings (such as the pairing-friendly curve parameters), the invention transitions to parameter sets compatible with commitment schemes and zk-SNARKs, such as different elliptic curve parameters or hash function parameters. This parameter change fundamentally alters the verification mechanism to be more computationally efficient.

Inventive Principle:
Principle #35Parameter changes

2Reliability

If bilinear pairing is used for verification, then multiplication and division operations can be verified, but productivity decreases due to high computational overhead

Engineering Contradiction:
Improveoperation verificationVSAvoidprocessing efficiency
Core Design Contradiction:
ReliabilityVSProductivity

Solution Approach 1:

The patent substitutes the mechanical computation of bilinear pairings with a different computational mechanism. The verification process is replaced using commitment schemes where the verifier checks consistency of commitments rather than performing pairing operations. For multiplication verification, the patent uses product proof mechanisms that rely on homomorphic properties of commitments rather than pairing-based arithmetic, dramatically reducing computational steps.

Inventive Principle:
Principle #28Mechanics substitution (Replace mechanical system)

Solution Approach 2:

The patent performs preliminary actions during the proof generation phase that simplify subsequent verification. Commitments are pre-computed and embedded in the proof structure, allowing the verifier to check validity without performing expensive operations. The heavy computational lifting is shifted to the prover side during proof generation, while verification becomes a lightweight consistency check, thereby improving overall productivity.

Inventive Principle:
Principle #10Preliminary action

3Ease of operation

If non-interactive zero-knowledge proof is used, then ease of use is improved, but initialization complexity increases due to trusted third party requirement

Engineering Contradiction:
Improveusage convenienceVSAvoidinitialization complexity
Core Design Contradiction:
Ease of operationVSDevice complexity

Solution Approach 1:

The patent performs the trusted third party initialization as a preliminary action that occurs once during system setup, rather than requiring it for each proof generation. The common reference string (CRS) or public parameters are generated in advance and cached, allowing subsequent proof generations to proceed without re-invoking the trusted third party. This preliminary setup phase separates the one-time initialization complexity from the repeated proof operations.

Inventive Principle:
Principle #10Preliminary action

Solution Approach 2:

The patent creates reusable copies of the initialization parameters and commitment structures. The public parameters and commitment keys generated during setup are copied and stored for multiple use across different proof instances. This copying mechanism allows the system to maintain the security properties of trusted third party initialization while eliminating the need to repeat the complex initialization process for each new proof, thereby improving ease of use.

Inventive Principle:
Principle #26Copying

Data Source

PatentUS11550952B1Zero-knowledge proof method and electronic device
Publication Date: 2023.01.10 HANGZHOU ABMATRIX TECH CO LTD
  • US11550952B1 patent drawing
  • US11550952B1 patent drawing
  • US11550952B1 patent drawing

AI summary

Disclosed is a method and an apparatus a zero-knowledge proof and an electronic device. That method comprise the following steps: selecting a data processing relationship, and processing private data and public data to obtain a calculation result; respectively committing the private data and the calculation result according to a commitment parameter to obtain a first commitment value and a second commitment value, wherein the commitment parameter is generated by a trusted third party; generating a non-interactive zero-knowledge proof according to the data processing relationship; wherein the commitment parameter, the first commitment value and the second commitment value are used by a verifier to verify the non-interactive zero-knowledge proof. The present disclosure solves the technical problem that bilinear pairing cannot be used in the scenario where bilinear pairing cannot be used in related technologies.