ABSTRACT
Abstract
Provided are identifier (ID)-based encryption and decryption methods and apparatuses for the methods. The ID-based encryption method includes having, at a transmitting terminal, a transmitting-side private key corresponding to a transmitting-side ID issued by a key issuing server, generating, at the transmitting terminal, a session key using the transmitting-side ID, a receiving-side ID, and the transmitting-side private key, extracting, at the transmitting terminal, a secret key from at least a part of the session key, and encrypting, at the transmitting terminal, a message using a previously set encryption algorithm and the secret key.
Description
CROSS-REFERENCE TO RELATED APPLICATION
This application claims priority to and the benefit of Republic of Korea Patent Application No. 10-2012-0122508 filed on Oct. 31, 2012, the disclosure of which is incorporated herein by reference in its entirety.
BACKGROUND
1. Field
The present disclosure relates to technology for encrypting and decrypting a message, and more particularly, to identifier (ID)-based encryption and decryption methods and apparatuses for the methods.
2. Discussion of Related Art
Recently, ID-based cryptography is newly attracting attention in the big data trend and environments of the Internet of Things. Also, with the advent of various security issues in cloud environments, a need for use of ID-based cryptography is increasing, and in particular, there is a need for ID-based cryptography that can be applied not to existing personal computers (PCs) or server environments but to small terminals such as mobile terminals. However, existing ID-based cryptography mostly employs pairing, thus involving too much calculation and being too complex to be applied to small terminals, such as a mobile terminal that is a client terminal. To solve this problem, a method employing a lattice has been introduced. The method employing a lattice shows excellent calculation performance, but has a drawback in that the sizes of parameters such as a public key, a ciphertext, etc. are too large.
SUMMARY
The present disclosure is directed to providing a message encryption and decryption algorithm that can ensure sufficient stability even with a small amount of calculation and a small ciphertext size.
According to an aspect of the present disclosure, there is provided an identifier (ID)-based encryption method including: having, at a transmitting terminal, a transmitting-side private key corresponding to a transmitting-side ID issued by a key issuing server; generating, at the transmitting terminal, a session key using the transmitting-side ID, a receiving-side ID, and the transmitting-side private key; extracting, at the transmitting terminal, a secret key from at least a part of the session key; and encrypting, at the transmitting terminal, a message using a previously set encryption algorithm and the secret key.
According to another aspect of the present disclosure, there is provided an ID-based decryption method including: having, at a receiving terminal, a receiving-side private key corresponding to a receiving-side ID issued by a key issuing server; generating, at the receiving terminal, a session key using a transmitting-side ID, the receiving-side ID, and the receiving-side private key; extracting, at the receiving terminal, a secret key from at least a part of the session key; and decrypting, at the receiving terminal, an encrypted message using a previously set decryption algorithm and the secret key.
According to still another aspect of the present disclosure, there is provided an apparatus including: at least one processor; a memory; and at least one program. The at least one program is stored in the memory, and configured to be executed by the at least one processor. The program includes commands for: having a transmitting-side private key corresponding to a transmitting-side ID issued by a key issuing server; generating a session key using the transmitting-side ID, a receiving-side ID, and the transmitting-side private key; extracting a secret key from at least a part of the session key; and encrypting a message using a previously set encryption algorithm and the secret key.
According to yet another aspect of the present disclosure, there is provided an apparatus including: at least one processor; a memory; and at least one program. The at least one program is stored in the memory, and configured to be executed by the at least one processor. The program includes commands for: having a receiving-side private key corresponding to a receiving-side ID issued by a key issuing server; generating a session key using a transmitting-side ID, the receiving-side ID, and the receiving-side private key; extracting a secret key from at least a part of the session key; and decrypting an encrypted message using a previously set decryption algorithm and the secret key.
BRIEF DESCRIPTION OF THE DRAWINGS
The above and other objects, features, and advantages of the present disclosure will become more apparent to those of ordinary skill in the art by describing in detail exemplary embodiments thereof with reference to the accompanying drawings, in which:
FIG. 1 is a block diagram illustrating an identifier (ID)-based encryption and decryption system according to an exemplary embodiment of the present disclosure;
FIG. 2 is a flowchart illustrating overall steps of an ID-based encryption and decryption algorithm according to an exemplary embodiment of the present disclosure;
FIG. 3 is a flowchart illustrating an ID-based encryption process performed by a transmitting terminal according to an exemplary embodiment of the present disclosure; and
FIG. 4 is a flowchart illustrating an ID-based decryption process performed by a receiving terminal according to an exemplary embodiment of the present disclosure.
DETAILED DESCRIPTION OF EXEMPLARY EMBODIMENTS
Hereinafter, detailed embodiments of the present disclosure will be described with reference to the accompanying drawings. However, the embodiments are merely examples and are not to be construed as limiting the present disclosure.
When it is determined that the detailed description of known art related to the present disclosure may obscure the gist of the present disclosure, the detailed description thereof will be omitted. Terminology described below is defined considering functions in the present disclosure and may vary according to a user's or operator's intention or usual practice. Thus, the meanings of the terminology should be interpreted based on the overall context of the present specification.
The spirit of the present disclosure is determined by the claims, and the following exemplary embodiments are provided only to efficiently describe the spirit of the present disclosure to those of ordinary skill in the art.
FIG. 1 is a block diagram illustrating an identifier (ID)-based encryption and decryption system according to an exemplary embodiment of the present disclosure. As shown in the drawing, an ID-based encryption and decryption system 100 according to an exemplary embodiment of the present disclosure includes a transmitting terminal 102 , a receiving terminal 104 , an authentication server 106 , and a key issuing server 108 .
The transmitting terminal 102 is a terminal for encrypting a message and transmitting the encrypted message to the receiving terminal 104 . The transmitting terminal 102 generates a secret key for message encryption using its own ID (i.e., transmitting-side ID), a receiving-side ID, and a transmitting-side private key calculated from the transmitting-side ID, encrypts a message using the secret key and a previously set encryption algorithm, and then transmits the encrypted message to the receiving terminal 104 . The receiving terminal 104 is a terminal for extracting a message by decrypting a received message. The receiving terminal 104 receives the encrypted message from the transmitting terminal 102 , generates a secret key for decrypting the encrypted message using the transmitting-side ID, the receiving-side ID, and a receiving-side private key calculated from the receiving-side ID, and decrypts the encrypted message using the secret key and a previously set decryption algorithm. At this time, the transmitting-side ID and the receiving-side ID are identification information for identifying the transmitting terminal 102 and the receiving terminal 104 respectively, and various kinds of information, for example, a media access control (MAC) address of each terminal, a unique identification number given to the terminal, an ID of each terminal user, a telephone number, etc., making it possible to distinguish a specific terminal from other terminals may be used without restriction. The transmitting-side private key and the receiving-side private key are issued by the key issuing server 108 that will be described below, and an authentication process may be performed by the authentication server 106 for issue of the transmitting-side private key and the receiving-side private key. In an exemplary embodiment of the present disclosure, cryptographically safe symmetric key-based algorithms may be used as the encryption algorithm and the decryption algorithm. A symmetric key-based algorithm denotes an algorithm in which the same cryptographic key is used for encryption and decryption. In a general symmetric key-based algorithm, decryption is performed in a reverse order of encryption.
The authentication server 106 is a server for authenticating the transmitting terminal 102 and the receiving terminal 104 . In the present disclosure, IDs assigned to the transmitting terminal 102 and the receiving terminal 104 are used for message encryption and decryption, and it is necessary to authenticate whether or not respective terminals are legal owners of the corresponding IDs before performing encryption and decryption processes. Accordingly, the authentication server 106 receives an authentication request including an ID of the transmitting terminal 102 or the receiving terminal 104 from the corresponding terminal, and authenticates the transmitting terminal 102 or the receiving terminal 104 in response to the received authentication request. According to exemplary embodiments, the authentication result may be transmitted to the transmitting terminal 102 or the receiving terminal 104 , the key issuing server 108 to be described below, or all of them.
The key issuing server 108 receives the transmitting-side ID and the receiving-side ID from the transmitting terminal 102 and the receiving terminal 104 respectively, and issues the transmitting-side private key and the receiving-side private key corresponding to the received transmitting-side ID and receiving-side ID to the transmitting terminal 102 and the receiving terminal 104 . To this end, the key issuing server 108 includes a private key generator (PKG), and the private key issuing device may be present as one element of the key issuing server 108 or configured to exchange data with the key issuing server 108 via a communication network, etc. as a separate element from the key issuing server 108 . The private key issuing device calculates a private key corresponding to a received ID on the basis of a previously set system parameter, its own master key, and pre-calculated data corresponding to a trapdoor discrete logarithm (TDL) group. Details of issue of the private keys will be described later.
<div id="p-0024" num="0023" class="des
CROSS-REFERENCE TO RELATED APPLICATION
This application claims priority to and the benefit of Republic of Korea Patent Application No. 10-2012-0122508 filed on Oct. 31, 2012, the disclosure of which is incorporated herein by reference in its entirety.
BACKGROUND
1. Field
The present disclosure relates to technology for encrypting and decrypting a message, and more particularly, to identifier (ID)-based encryption and decryption methods and apparatuses for the methods.
2. Discussion of Related Art
Recently, ID-based cryptography is newly attracting attention in the big data trend and environments of the Internet of Things. Also, with the advent of various security issues in cloud environments, a need for use of ID-based cryptography is increasing, and in particular, there is a need for ID-based cryptography that can be applied not to existing personal computers (PCs) or server environments but to small terminals such as mobile terminals. However, existing ID-based cryptography mostly employs pairing, thus involving too much calculation and being too complex to be applied to small terminals, such as a mobile terminal that is a client terminal. To solve this problem, a method employing a lattice has been introduced. The method employing a lattice shows excellent calculation performance, but has a drawback in that the sizes of parameters such as a public key, a ciphertext, etc. are too large.
SUMMARY
The present disclosure is directed to providing a message encryption and decryption algorithm that can ensure sufficient stability even with a small amount of calculation and a small ciphertext size.
According to an aspect of the present disclosure, there is provided an identifier (ID)-based encryption method including: having, at a transmitting terminal, a transmitting-side private key corresponding to a transmitting-side ID issued by a key issuing server; generating, at the transmitting terminal, a session key using the transmitting-side ID, a receiving-side ID, and the transmitting-side private key; extracting, at the transmitting terminal, a secret key from at least a part of the session key; and encrypting, at the transmitting terminal, a message using a previously set encryption algorithm and the secret key.
According to another aspect of the present disclosure, there is provided an ID-based decryption method including: having, at a receiving terminal, a receiving-side private key corresponding to a receiving-side ID issued by a key issuing server; generating, at the receiving terminal, a session key using a transmitting-side ID, the receiving-side ID, and the receiving-side private key; extracting, at the receiving terminal, a secret key from at least a part of the session key; and decrypting, at the receiving terminal, an encrypted message using a previously set decryption algorithm and the secret key.
According to still another aspect of the present disclosure, there is provided an apparatus including: at least one processor; a memory; and at least one program. The at least one program is stored in the memory, and configured to be executed by the at least one processor. The program includes commands for: having a transmitting-side private key corresponding to a transmitting-side ID issued by a key issuing server; generating a session key using the transmitting-side ID, a receiving-side ID, and the transmitting-side private key; extracting a secret key from at least a part of the session key; and encrypting a message using a previously set encryption algorithm and the secret key.
According to yet another aspect of the present disclosure, there is provided an apparatus including: at least one processor; a memory; and at least one program. The at least one program is stored in the memory, and configured to be executed by the at least one processor. The program includes commands for: having a receiving-side private key corresponding to a receiving-side ID issued by a key issuing server; generating a session key using a transmitting-side ID, the receiving-side ID, and the receiving-side private key; extracting a secret key from at least a part of the session key; and decrypting an encrypted message using a previously set decryption algorithm and the secret key.
BRIEF DESCRIPTION OF THE DRAWINGS
The above and other objects, features, and advantages of the present disclosure will become more apparent to those of ordinary skill in the art by describing in detail exemplary embodiments thereof with reference to the accompanying drawings, in which:
FIG. 1 is a block diagram illustrating an identifier (ID)-based encryption and decryption system according to an exemplary embodiment of the present disclosure;
FIG. 2 is a flowchart illustrating overall steps of an ID-based encryption and decryption algorithm according to an exemplary embodiment of the present disclosure;
FIG. 3 is a flowchart illustrating an ID-based encryption process performed by a transmitting terminal according to an exemplary embodiment of the present disclosure; and
FIG. 4 is a flowchart illustrating an ID-based decryption process performed by a receiving terminal according to an exemplary embodiment of the present disclosure.
DETAILED DESCRIPTION OF EXEMPLARY EMBODIMENTS
Hereinafter, detailed embodiments of the present disclosure will be described with reference to the accompanying drawings. However, the embodiments are merely examples and are not to be construed as limiting the present disclosure.
When it is determined that the detailed description of known art related to the present disclosure may obscure the gist of the present disclosure, the detailed description thereof will be omitted. Terminology described below is defined considering functions in the present disclosure and may vary according to a user's or operator's intention or usual practice. Thus, the meanings of the terminology should be interpreted based on the overall context of the present specification.
The spirit of the present disclosure is determined by the claims, and the following exemplary embodiments are provided only to efficiently describe the spirit of the present disclosure to those of ordinary skill in the art.
FIG. 1 is a block diagram illustrating an identifier (ID)-based encryption and decryption system according to an exemplary embodiment of the present disclosure. As shown in the drawing, an ID-based encryption and decryption system 100 according to an exemplary embodiment of the present disclosure includes a transmitting terminal 102 , a receiving terminal 104 , an authentication server 106 , and a key issuing server 108 .
The transmitting terminal 102 is a terminal for encrypting a message and transmitting the encrypted message to the receiving terminal 104 . The transmitting terminal 102 generates a secret key for message encryption using its own ID (i.e., transmitting-side ID), a receiving-side ID, and a transmitting-side private key calculated from the transmitting-side ID, encrypts a message using the secret key and a previously set encryption algorithm, and then transmits the encrypted message to the receiving terminal 104 . The receiving terminal 104 is a terminal for extracting a message by decrypting a received message. The receiving terminal 104 receives the encrypted message from the transmitting terminal 102 , generates a secret key for decrypting the encrypted message using the transmitting-side ID, the receiving-side ID, and a receiving-side private key calculated from the receiving-side ID, and decrypts the encrypted message using the secret key and a previously set decryption algorithm. At this time, the transmitting-side ID and the receiving-side ID are identification information for identifying the transmitting terminal 102 and the receiving terminal 104 respectively, and various kinds of information, for example, a media access control (MAC) address of each terminal, a unique identification number given to the terminal, an ID of each terminal user, a telephone number, etc., making it possible to distinguish a specific terminal from other terminals may be used without restriction. The transmitting-side private key and the receiving-side private key are issued by the key issuing server 108 that will be described below, and an authentication process may be performed by the authentication server 106 for issue of the transmitting-side private key and the receiving-side private key. In an exemplary embodiment of the present disclosure, cryptographically safe symmetric key-based algorithms may be used as the encryption algorithm and the decryption algorithm. A symmetric key-based algorithm denotes an algorithm in which the same cryptographic key is used for encryption and decryption. In a general symmetric key-based algorithm, decryption is performed in a reverse order of encryption.
The authentication server 106 is a server for authenticating the transmitting terminal 102 and the receiving terminal 104 . In the present disclosure, IDs assigned to the transmitting terminal 102 and the receiving terminal 104 are used for message encryption and decryption, and it is necessary to authenticate whether or not respective terminals are legal owners of the corresponding IDs before performing encryption and decryption processes. Accordingly, the authentication server 106 receives an authentication request including an ID of the transmitting terminal 102 or the receiving terminal 104 from the corresponding terminal, and authenticates the transmitting terminal 102 or the receiving terminal 104 in response to the received authentication request. According to exemplary embodiments, the authentication result may be transmitted to the transmitting terminal 102 or the receiving terminal 104 , the key issuing server 108 to be described below, or all of them.
The key issuing server 108 receives the transmitting-side ID and the receiving-side ID from the transmitting terminal 102 and the receiving terminal 104 respectively, and issues the transmitting-side private key and the receiving-side private key corresponding to the received transmitting-side ID and receiving-side ID to the transmitting terminal 102 and the receiving terminal 104 . To this end, the key issuing server 108 includes a private key generator (PKG), and the private key issuing device may be present as one element of the key issuing server 108 or configured to exchange data with the key issuing server 108 via a communication network, etc. as a separate element from the key issuing server 108 . The private key issuing device calculates a private key corresponding to a received ID on the basis of a previously set system parameter, its own master key, and pre-calculated data corresponding to a trapdoor discrete logarithm (TDL) group. Details of issue of the private keys will be described later.
As described above, the key issuing server 108 may be configured to issue a private key only to an authenticated terminal, and to this end, the key issuing server 108 may receive an authentication result of a terminal from the authentication server 106 . Also, it has been described that the authentication server 106 and the key issuing server 108 may be configured as separate entities in the illustrated exemplary embodiment, but the authentication server 106 and the key issuing server 108 may be elements in the same computer system. This is the same for the aforementioned PKG as mentioned above.
Details of encryption and decryption in the ID-based encryption and decryption system 100 having the above-described constitution will be described below. An exemplary embodiment of the present disclosure proposes an ID-based core cryptographic algorithm capable of efficient encryption and decryption in a TDL group. As shown in FIG. 2 , the algorithm includes four steps of setup 202 , issue of a private key 204 , encryption 206 , and decryption 208 . In the setup step 202 among the steps, elements of an overall system are defined, and in the private key issuing step 204 , the PKG generates private keys corresponding to a user's ID on the basis of a master key. In the encryption step 206 , a transmitter encrypts a message to be transmitted using a receiver's ID, and in the decryption step 208 , the receiver decrypts the received ciphertext using a private key corresponding to his or her own ID.
Setup 202
In the setup step according to an exemplary embodiment of the present disclosure, parameters used for message encryption and decryption are defined. First, for a given security parameter of 1, N=pq is calculated from two prime numbers of similar sized values that satisfy pâ¡1 (mod 4) and qâ¡3 (mod 4) respectively. Here, p and q are prime numbers that satisfy a security level corresponding to the given security parameter and are cryptographically safe. A security parameter denotes an element of an algorithm whereby time and cost of a basic attack on an encryption algorithm are determined. Here, the basic attack denotes an attack based on exhaustive search of searching all possible key candidates until a key satisfying given data (plaintext and ciphertext) is found. Since time taken for an exhaustive search depends on the number of possible keys, and the number of keys is determined according to a length of the keys, a security parameter denotes the length of the keys in this case.
Next, a first hash function H 1 and a second hash function H 2 used for message encryption and decryption is defined. Suppose that a generator of a maximal cyclic subgroup G of a finite group Z N ={0, 1, 2, . . . , N-1} is g. The first hash function H 1 is defined as follows.
H 1 : {0,1}*â G
(where {0, 1}* means an arbitrary bit between 0 and 1)
As the first hash function H 1 , a random hash function, for example, SHA1, SHA-256, SHA-512, etc., may be used, and a Jacobi symbol, etc. may be used to map an arbitrary bit string that is an output value of the random hash function to the group G.
Also, the second hash function H 2 is defined as follows.
H 2 : {0,1}â{0,1} n
(where {0, 1} n means a bit string of n bits composed of arbitrary bits each of which has a value of 0 or 1)
As the second hash function H 2 , a random hash function, for example, SHA1, SHA-256, SHA-512, etc., may also be used, and an output value may be a random n-bit string. Here, the value of n may be 128, 160, 512, etc. according to the type of a symmetric key-based encryption algorithm used in an encryption process that will be described later.
Next, a symmetric key-based cryptographic algorithm E sym : {0, 1} k â{0, 1} k used in message encryption and decryption is defined, and also a mode of operation (MoO) to be used with the symmetric key-based cryptographic algorithm is defined. Here, a message size k of the symmetric key-based cryptographic algorithm may be the same as n, or have a value related to n (e.g., k=½*n).
A system parameter param R and master key mk root derived through such a process are as follows.
param R =( N,G,g,H 1 ,H 2 ,E sym ,MoO)
mk root =( p,q )
Issue of Private Key 204
In this step, a transmitting-side or receiving-side private key is issued on the basis of the transmitting-side ID or receiving-side ID received by the key-issuing server 108 . The PKG of the key-issuing server 108 calculates a private key corresponding to a given ID on the basis of the system parameter param R , the master key mk root , and pre-calculated data corresponding to a TDL group. When the PKG has specific information called a trapdoor, it is possible to mathematically and relatively easily calculate a discrete logarithm. Otherwise, there is a group whose discrete logarithm is very difficult to calculate, and the group is referred to as a TDL group. In the present disclosure, a private key corresponding to each ID is calculated using characteristics of such a TDL group. In other words, the PKG stores pre-calculated data of respective values corresponding to TDL groups in the form of, for example, a table, etc., and calculates a private key corresponding to a received ID using the received ID and the pre-calculated data stored in the table. Specifically, the PKG converts a received ID into an element of a TDL group G using the first hash function H 1 , and calculates a discrete logarithm of H 1 (ID) with respect to a base g using the pre-calculated data mentioned above. This is as follows.
Private key x =log g ( H 1 ( ID ))
As described above, a user should perform a process of authenticating ownership of his or her ID and a user authentication process in advance of the private key issuing process. Also, online or offline connection and data transmission for issuing a private key should be safely secured in terms of cryptology and information and communication security.
Encryption 206
In this step, a message m to be transmitted from the transmitting terminal 102 to the receiving terminal 104 is encrypted. Suppose that an ID of the transmitting terminal 102 is A, and an ID of the receiving terminal 104 is B. Through the above-described private key issuing process, the transmitting terminal 102 has a transmitting-side private key a=log g (H 1 (A)) corresponding to its own ID A.
FIG. 3 is a flowchart illustrating an ID-based encryption process performed by a transmitting terminal according to an exemplary embodiment of the present disclosure.
First, the transmitting terminal 102 hashes the transmitting-side ID A and the receiving-side ID B using the first hash function H 1 , thereby generating a first session key element h A and a second session key element h B ( 302 ). This is expressed by the following equations.
h A =H 1 ( A )
h B =H 1 ( B )
Here, the transmitting terminal 102 may calculate and store h A that is an output value of the first hash function H 1 corresponding to its own ID in advance. When a hash value of the receiving-side ID B is also stored, the stored value can be used thereafter to transmit a message to the same receiving terminal 104 without calculating the hash value again.
Next, the transmitting terminal 102 calculates the second session key element h B to the power of the transmitting-side private key a, thereby generating a third session key element (h B ) a ( 304 ). After that, the transmitting terminal 102 generates a session key generation bit string including the first session key element, the second session key element, and the third session key element, and hashes the session key generation bit string using the second hash function H 2 , thereby generating a session key S ( 306 ). First, the session key generation bit string may be generated as follows by concatenating values of h A , (h B ) a , and h B calculated above.
Session key generation bit string: (h A â¥(h B ) a â¥h B )
Here, a concatenation order of the respective session key elements constituting the session key generation bit string is not particularly limited, but it is apparent that the session key elements should be concatenated in the same order between the transmitting terminal 102 and the receiving terminal 104 .
Meanwhile, when a session key generation bit string is generated in this way, there is a problem in that the same session key generation bit string is generated between the same transmitter and the same receiver every time. To solve this problem, an additional bit string (first additional bit string) may be further included in the session key generation bit string. For example, an additional bit string is included as follows.
Session key generation bit string=( h A â¥( h B ) a â¥h B â¥first additional bit string)
Here, the first additional bit string may have a different value, for example, a message generation date or time, a serial number of a message, etc. each time, and may be information sharable between the transmitting terminal 102 and the receiving terminal 104 . When an additional bit string is added to a session key generation bit string in this way, it is possible to generate a different session key generation bit string each time, and thus a session key to be described below is changed each time.
When a session key generation bit string is generated in this way, the transmitting terminal 102 hashes the session key generation bit string using the second hash function H 2 , thereby generating a session key. In other words, a session key is generated as follows.
S=H 2 (session key generation bit string)
Next, the transmitting terminal 102 extracts a secret key S key from at least a part of the generated session key S ( 308 ). For example, the session key itself may be a secret key (i.e., S=S key ). Alternatively, a part of a binary bit string constituting the session key S may be assigned to the secret key S key , and the binary bit string other than the part assigned to the secret key may be assigned to an initialization vector (IV) for message encryption. For example, when SHA-256 is used as the second hash function H 2 , the session key S becomes a 256-bit random binary string, and by assigning lower (or upper) 128 bits of the 256-bit random binary string to the secret key S key and upper (or lower) 128 bits to the IV such as a cipher block chaining (CBC) mode, it is possible to apply the session key S to a symmetric key-based cryptographic algorithm having a secret key of 128 bits (e.g., AES-128, etc.). In other words, it is satisfied that S=S key â¥IV or IVâ¥S key in this case. However, this method cannot be applied to a counter (CTR) mode, etc. in which a different IV value is necessary each time, and in this case, an IV generation algorithm is additionally necessary.
Next, the transmitting terminal 102 encrypts a message using the previously set symmetric key-based encryption algorithm E sym and the secret key S key , thereby generating a ciphertext C ( 310 ) (i.e., C=MoO(E sym (S key , m), IV)). For example, when SHA-256, AES-128, and the CBC mode are used as the second hash function H 2 , the symmetric key-based encryption algorithm E sym , and an MoO respectively, if S equal to S key â¥IV is used, it is satisfied that C=AESâCBC (Skey, IV) (m).
Meanwhile, when the original message m that is input information and the secret key S key are not changed, the ciphertext C that is an output value is not changed either due to characteristics of the symmetric key-based encryption algorithm. To prevent this, in the encryption step, an additional bit string (second additional bit string) previously set between the transmitting terminal 102 and the receiving terminal 104 is added to the message, so that a different output value (ciphertext) can be obtained from the same input value (original message) each time. In this case, the receiving terminal 104 can obtain the original message m as it is by removing the second additional bit string after decryption of the ciphertext Like the first additional bit string, the second additional bit string may have a different value, for example, a message generation date or time, a serial number of a message, etc. each time, and may be a value sharable between the transmitting terminal 102 and the receiving terminal 104 .
When the ciphertext C is generated through such a process, the transmitting terminal 102 transmits the generated ciphertext C and the ID A of the transmitting terminal 102 to the receiving terminal 104 .
Decryption 208
In this step, the receiving terminal 104 decrypts the ciphertext C transmitted from the transmitting terminal 102 . Suppose that the ID of the transmitting terminal 102 is A, and the ID of the receiving terminal 104 is B. Through the above-described private key issuing process, the receiving terminal 104 has a receiving-side private key b=log g (H 1 (B)) corresponding to its own ID B.
FIG. 4 is a flowchart illustrating an ID-based decryption process performed by a receiving terminal according to an exemplary embodiment of the present disclosure.
First, the receiving terminal 104 hashes the transmitting-side ID A and the receiving-side ID B using the first hash function H 1 , thereby generating a first session key element h A and a second session key element h B ( 402 ). This is expressed by the following equations.
h A =H 1 ( A )
h B =H 1 ( B )
Here, the receiving terminal 104 may calculate and store h B that is an output value of the first hash function H 1 corresponding to its own ID B in advance. When a hash value of the transmitting-side ID A is also stored, the stored value can be used thereafter to receive a message from the same transmitting terminal 102 without calculating the hash value again.
Next, the receiving terminal 104 calculates the first session key element h A to the power of the receiving-side private key b, thereby generating a third session key element (h A ) b ( 404 ). As can be seen from the equation below, the third session key element of the receiving side generated in step 404 is the same as that of the transmitting side generated in step 304 . In other words, according to exemplary embodiments of the present disclosure, it is possible to have the same secret key between the transmitting side and the receiving side without a key exchange process.
( h A ) b =( h B ) a =g ab
Next, the receiving terminal 104 generates a session key generation bit string including the first session key element, the second session key element, and the third session key element, and hashes the session key generation bit string using the second hash function H 2 , thereby generating a session key S ( 406 ). At this time, the receiving terminal 104 uses the same rules for generating the session key generation bit string as the transmitting terminal 102 , and in case of need, may add a first additional bit string that has been set in advance between the receiving terminal 104 and the transmitting terminal 102 . Through such a process, the same session key as that of the transmitting terminal 102 is generated.
Next, the receiving terminal 104 extracts a secret key S key from at least a part of the generated session key S ( 408 ). In other words, in this step, a secret key or a secret key/IV pair is extracted using the same method as in step 308 .
Finally, the receiving terminal 104 decrypts the received ciphertext using a shared IV according to a previously set symmetric key-based encryption algorithm E sym , the secret key S key , and an MoO, thereby recovering the message ( 410 ). At this time, when a second additional bit string has been added to the decrypted message, a process of removing the second additional bit string is additionally performed.
Meanwhile, an exemplary embodiment of the present disclosure may include a computer-readable recording medium including a program for performing the methods described herein on a computer. The computer-readable recording medium may separately include program commands, local data files, local data structures, etc. or include a combination of them. The medium may be specially designed and configured for the present disclosure, or known and available to those of ordinary skill in the field of computer software. Examples of the computer-readable recording medium include magnetic media, such as a hard disk, a floppy disk, and a magnetic tape, optical recording media, such as a CD-ROM and a DVD, magneto-optical media, such as a floptical disk, and hardware devices, such as a ROM, a RAM, and a flash memory, specially configured to store and perform program commands. Examples of the program commands may include high-level language codes executable by a computer using an interpreter, etc. as well as machine language codes made by compilers. A computer, such as the one mentioned above, is very familiar to those who practice in these technical arts. Therefore, the discussion herein has avoided obscuring the key features of the exemplary embodiments by purposefully omitting details concerning the manner in which a hardware processor of such a computer system uses the above-identified computer-readable codes and data storage device to carry out the various functions or implement the various units previously mentioned. Likewise, since a person familiar with this field understands that such functions and units may be implemented through various combinations of hardware and/or software, such implementation details are likewise omitted.
Since exemplary embodiments of the present disclosure involve a remarkably less amount of calculation but can maintain a satisfactory level of security, it is possible to provide an encryption and decryption algorithm that can be readily applied to a mobile terminal having limited computing power, memory capacity, etc. For example, in existing public key-based cryptography, a random value should be generated every time, and thus exponentiation is required for every encryption/decryption. On the other hand, in exemplary embodiments of the present disclosure, only encryption is performed using the same session key without exponentiation once exponentiation is performed upon issue of a private key, and thus a remarkably less amount of calculation is required compared to existing cryptography.
In addition, exemplary embodiments of the present disclosure have a remarkably smaller ciphertext size than an existing ciphertext size, and can reduce network traffic for transmitting and receiving the ciphertext.
It will be apparent to those skilled in the art that various modifications can be made to the above-described exemplary embodiments of the present disclosure without departing from the spirit or scope of the present disclosure. Thus, it is intended that the present disclosure covers all such modifications provided they come within the scope of the appended claims and their equivalents.
Claims ( 19 )
What is claimed is:
1. An identifier (ID)-based encryption method, comprising:
storing, at a transmitting terminal, a transmitting-side private key corresponding to a transmitting-side ID issued by a key issuing server;
generating, at the transmitting terminal, a first session key element and a second session key element from the transmitting-side ID and a receiving-side ID, respectively;
generating, at the transmitting terminal, a third session key element from the second session key element;
generating, at the transmitting terminal, a session key from a session key generation bit string, the session key generation bit string including the first session key element, the second session key element, and the third session key element;
extracting, at the transmitting terminal, a secret key from at least a part of the session key; and
encrypting, at the transmitting terminal, a message using a previously set encryption algorithm and the secret key.
2. The ID-based encryption method of claim 1 , wherein:
the generating of the first session key element and the generating of the second session key element are performed by hashing the transmitting-side ID and the receiving-side ID, respectively, using a first hash function;
the generating of the third session key element is performed by calculating the second session key element to a power of the transmitting-side private key; and
the generating of the session key includes hashing the session key generation bit string using a second hash function.
3. The ID-based encryption method of claim 2 , wherein the transmitting-side private key is calculated according to the following equation:
a =log g ( H 1 ( A ))
where:
a is the transmitting-side private key,
H1 is the first hash function,
A is the transmitting-side ID,
g is a generator of a maximal cyclic subgroup of a group,
N is an integer satisfying N=pq, and
p and q are prime numbers that satisfy pâ¡1 (mod 4) and qâ¡3 (mod 4) respectively).
4. The ID-based encryption method of claim 3 , wherein the first hash function is set to map an arbitrary binary bit string to an arbitrary element in the maximal cyclic subgroup.
5. The ID-based encryption method of claim 1 , further comprising previously setting a first additional bit string between the transmitting terminal and the receiving terminal, wherein the generating of the session key generation bit string is performed so as to further include the first additional bit string.
6. The ID-based encryption method of claim 1 , wherein the extracting of the secret key further includes:
extracting a part of a binary bit string constituting the session key;
assigning the extracted part to the secret key; and
assigning the binary bit string, excluding the part assigned to the secret key, to an initialization vector (IV) for encrypting the message.
7. The ID-based encryption method of claim 6 , wherein the encrypting of the message is performed using:
the encryption algorithm,
a mode of operation (MoO) of the encryption algorithm,
the secret key, and
the IV.
8. The ID-based encryption method of claim 7 , further comprising previously setting a second additional bit string between the transmitting terminal and the receiving terminal, wherein the encrypting of the message further includes adding the second additional bit string to the message.
9. An identifier (ID)-based decryption method, comprising:
storing, at a receiving terminal, a receiving-side private key corresponding to a receiving-side ID issued by a key issuing server;
generating, at the receiving terminal, a first session key element and a second session key element from a transmitting-side ID and the receiving-side ID, respectively;
generating, at the receiving terminal, a third session key element from the first session key element;
generating, at the receiving terminal, a session key from a session key generation bit string, the session key generation bit string including the first session key element, the second session key element, and the third session key element;
extracting, at the receiving terminal, a secret key from at least a part of the session key; and
decrypting, at the receiving terminal, an encrypted message using a previously set decryption algorithm and the secret key.
10. The ID-based decryption method of claim 9 , wherein:
the generating of the first session key element and the generating of the second session key element are performed by hashing the transmitting-side ID and the receiving-side ID respectively using a first hash function;
the generating of the third session key element is performed by calculating the first session key element to a power of the receiving-side private key, and
the generating of the session key is includes hashing the session key generation bit string using a second hash function.
</
CLAIMS
Claims ( 19 )
What is claimed is:
1. An identifier (ID)-based encryption method, comprising:
storing, at a transmitting terminal, a transmitting-side private key corresponding to a transmitting-side ID issued by a key issuing server;
generating, at the transmitting terminal, a first session key element and a second session key element from the transmitting-side ID and a receiving-side ID, respectively;
generating, at the transmitting terminal, a third session key element from the second session key element;
generating, at the transmitting terminal, a session key from a session key generation bit string, the session key generation bit string including the first session key element, the second session key element, and the third session key element;
extracting, at the transmitting terminal, a secret key from at least a part of the session key; and
encrypting, at the transmitting terminal, a message using a previously set encryption algorithm and the secret key.
2. The ID-based encryption method of claim 1 , wherein:
the generating of the first session key element and the generating of the second session key element are performed by hashing the transmitting-side ID and the receiving-side ID, respectively, using a first hash function;
the generating of the third session key element is performed by calculating the second session key element to a power of the transmitting-side private key; and
the generating of the session key includes hashing the session key generation bit string using a second hash function.
3. The ID-based encryption method of claim 2 , wherein the transmitting-side private key is calculated according to the following equation:
a =log g ( H 1 ( A ))
where:
a is the transmitting-side private key,
H1 is the first hash function,
A is the transmitting-side ID,
g is a generator of a maximal cyclic subgroup of a group,
N is an integer satisfying N=pq, and
p and q are prime numbers that satisfy pâ¡1 (mod 4) and qâ¡3 (mod 4) respectively).
4. The ID-based encryption method of claim 3 , wherein the first hash function is set to map an arbitrary binary bit string to an arbitrary element in the maximal cyclic subgroup.
5. The ID-based encryption method of claim 1 , further comprising previously setting a first additional bit string between the transmitting terminal and the receiving terminal, wherein the generating of the session key generation bit string is performed so as to further include the first additional bit string.
6. The ID-based encryption method of claim 1 , wherein the extracting of the secret key further includes:
extracting a part of a binary bit string constituting the session key;
assigning the extracted part to the secret key; and
assigning the binary bit string, excluding the part assigned to the secret key, to an initialization vector (IV) for encrypting the message.
7. The ID-based encryption method of claim 6 , wherein the encrypting of the message is performed using:
the encryption algorithm,
a mode of operation (MoO) of the encryption algorithm,
the secret key, and
the IV.
8. The ID-based encryption method of claim 7 , further comprising previously setting a second additional bit string between the transmitting terminal and the receiving terminal, wherein the encrypting of the message further includes adding the second additional bit string to the message.
9. An identifier (ID)-based decryption method, comprising:
storing, at a receiving terminal, a receiving-side private key corresponding to a receiving-side ID issued by a key issuing server;
generating, at the receiving terminal, a first session key element and a second session key element from a transmitting-side ID and the receiving-side ID, respectively;
generating, at the receiving terminal, a third session key element from the first session key element;
generating, at the receiving terminal, a session key from a session key generation bit string, the session key generation bit string including the first session key element, the second session key element, and the third session key element;
extracting, at the receiving terminal, a secret key from at least a part of the session key; and
decrypting, at the receiving terminal, an encrypted message using a previously set decryption algorithm and the secret key.
10. The ID-based decryption method of claim 9 , wherein:
the generating of the first session key element and the generating of the second session key element are performed by hashing the transmitting-side ID and the receiving-side ID respectively using a first hash function;
the generating of the third session key element is performed by calculating the first session key element to a power of the receiving-side private key, and
the generating of the session key is includes hashing the session key generation bit string using a second hash function.
11. The ID-based decryption method of claim 10 , wherein the receiving-side private key is calculated according to the following equation:
b =log g ( H 1 ( B ))
where:
b is the receiving-side private key,
H1 is the first hash function,
B is the receiving-side ID,
g is a generator of a maximal cyclic subgroup of a group,
N is an integer satisfying N=pq, and
p and q are prime numbers that satisfy pâ¡1 (mod 4) and qâ¡3 (mod 4) respectively.
12. The ID-based decryption method of claim 11 , wherein the first hash function is set to map an arbitrary binary bit string to an arbitrary element in the maximal cyclic subgroup.
13. The ID-based decryption method of claim 9 , further comprising previously setting a first additional bit string between the transmitting terminal and the receiving terminal, wherein the generating of the session key generation bit string is performed so as to further so as to include the first additional bit string.
14. The ID-based decryption method of claim 9 , wherein the extracting of the secret key further includes:
extracting a part of a binary bit string constituting the session key;
assigning the extracted part to the secret key; and
assigning the binary bit string, excluding the part assigned to the secret key, to an initialization vector (IV) for encrypting the message.
15. The ID-based decryption method of claim 14 , wherein the decrypting of the message is performed using:
the decryption algorithm,
a mode of operation (MoO) of the decryption algorithm,
the secret key, and
the IV.
16. The ID-based decryption method of claim 15 , further comprising previously setting a second additional bit string between the transmitting terminal and the receiving terminal, wherein the decrypting of the message further includes removing the second additional bit string from the decrypted message.
17. A non-transitory computer-readable recording medium storing a program which, when executed by a computer, causes the computer to perform an identifier (ID)-based encryption method comprising:
storing, at a transmitting terminal, a transmitting-side private key corresponding to a transmitting-side ID issued by a key issuing server;
generating, at the transmitting terminal, a first session key element and a second session key element from the transmitting-side ID and a receiving-side ID, respectively; generating, at the transmitting terminal, a third session key element from the second session key element;
generating, at the transmitting terminal, a session key from a session key generation bit string, the session key generation bit string including the first session key element, the second session key element, and the third session key element;
extracting, at the transmitting terminal, a secret key from at least a part of the session key; and
encrypting, at the transmitting terminal, a message using a previously set encryption algorithm and the secret key, at the transmitting terminal, a message using a previously set encryption algorithm and the secret key.
18. An apparatus, comprising:
at least one hardware processor;
a memory accessible by the at least one hardware processor; and
at least one program stored in the memory;
wherein the at least one program is configured to be executed by the at least one hardware processor, and includes commands enabling the at least one hardware processor to:
store a transmitting-side private key corresponding to a transmitting-side identifier (ID) issued by a key issuing server;
generate a first session key element and a second session key element from the transmitting-side ID and a receiving-side ID, respectively;
generate a third session key element from the second session key element;
generate a session key from a session key generation bit string, the session key generation bit string including the first session key element, the second session key element, and the third session key element;
extract a secret key from at least a part of the session key; and
encrypt a message using a previously set encryption algorithm and the secret key.
19. An apparatus, comprising:
at least one hardware processor;
a memory accessible by the at least one hardware processor; and
at least one program stored in the memory;
wherein the at least one program is configured to be executed by the at least one hardware processor, and includes commands enabling the at least one hardware processor to:
store a receiving-side private key corresponding to a receiving-side identifier (ID) issued by a key issuing server;
generate a first session key element and a second session key element from a transmitting-side ID and the receiving-side ID, respectively;
generate a third session key element from the first session key element;
generate a session key from a session key generation bit string, the session key generation bit string including the first session key element, the second session key element, and the third session key element;
extract a secret key from at least a part of the session key; and
decrypt an encrypted message using a previously set decryption algorithm and the secret key.
US14/067,284
2012-10-31
2013-10-30
Method and system for ID-based encryption and decryption
Active
2034-06-21
US9379891B2
( en )
Applications Claiming Priority (2)
Application Number
Priority Date
Filing Date
Title
KR20120122508A
KR101493212B1
( en )
2012-10-31
2012-10-31
Method and system for id-based encryption and decryption
KR10-2012-0122508
2012-10-31
Publications (2)
Publication Number
Publication Date
US20140192976A1
US20140192976A1 ( en )
2014-07-10
US9379891B2
true
US9379891B2 ( en )
2016-06-28
Family
ID=50627636
Family Applications (1)
Application Number
Title
Priority Date
Filing Date
US14/067,284
Active
2034-06-21
US9379891B2
( en )
2012-10-31
2013-10-30
Method and system for ID-based encryption and decryption
Country Status (4)
Country
Link
US
( 1 )
US9379891B2
( en )
KR
( 1 )
KR101493212B1
( en )
CN
( 1 )
CN103795533B
( en )
WO
( 1 )
WO2014069778A1
( en )
Cited By (15)
* Cited by examiner, â Cited by third party
Publication number
Priority date
Publication date
Assignee
Title
US9693263B2
( en )
2014-02-21
2017-06-27
Yaana Technologies, LLC
Method and system for data flow management of user equipment in a tunneling packet data network
US10135930B2
( en )
2015-11-13
2018-11-20
Yaana Technologies Llc
System and method for discovering internet protocol (IP) network address and port translation bindings
US10257248B2
( en )
2015-04-29
2019-04-09
Yaana Technologies, Inc.
Scalable and iterative deep packet inspection for communications networks
US10285038B2
( en )
2014-10-10
2019-05-07
Yaana Technologies, Inc.
Method and system for discovering user equipment in a network
US10334037B2
( en )
2014-03-31
2019-06-25
Yaana Technologies, Inc.
Peer-to-peer rendezvous system for minimizing third party visibility and method thereof
US10439996B2
( en )
2014-02-11
2019-10-08
Yaana Technologies, LLC
Method and system for metadata analysis and collection with privacy
US10447503B2
( en )
2014-02-21
2019-10-15
Yaana Technologies, LLC
Method and system for data flow management of user equipment in a tunneling packet data network
US10515567B2
( en )
2010-06-01
2019-12-24
Ternarylogic Llc
Cryptographic machines with N-state lab-transformed switching devices
US10542426B2
( en )
2014-11-21
2020-01-21
Yaana Technologies, LLC
System and method for transmitting a secure message over a signaling network
US10650373B2
( en )
2010-06-01
2020-05-12
Ternarylogic Llc
Method and apparatus for validating a transaction between a plurality of machines
US11178547B2
( en )
2018-07-10
2021-11-16
Apple Inc.
Identity-based message integrity protection and verification for wireless communication
US11276258B2
( en )
2020-06-15
2022-03-15
Delphian Systems, LLC
Enhanced security for contactless access card system
US11336425B1
( en )
2010-06-01
2022-05-17
Ternarylogic Llc
Cryptographic machines characterized by a Finite Lab-Transform (FLT)
US11658949B2
( en )
2019-10-07
2023-05-23
British Telecommunications Public Limited Company
Secure publish-subscribe communication methods and apparatus
US20230297695A1
( en )
*
2022-03-18
2023-09-21
STMicroelectronics (Grand Ouest) SAS
Secure generation of pairing keys
Families Citing this family (27)
* Cited by examiner, â Cited by third party
Publication number
Priority date
Publication date
Assignee
Title
US9350550B2
( en )
2013-09-10
2016-05-24
M2M And Iot Technologies, Llc
Power management and security for wireless modules in âmachine-to-machineâ communications
US9100175B2
( en )
2013-11-19
2015-08-04
M2M And Iot Technologies, Llc
Embedded universal integrated circuit card supporting two-factor authentication
US10498530B2
( en )
2013-09-27
2019-12-03
Network-1 Technologies, Inc.
Secure PKI communications for âmachine-to-machineâ modules, including key derivation by modules and authenticating public keys
US10700856B2
( en )
2013-11-19
2020-06-30
Network-1 Technologies, Inc.
Key derivation for a module using an embedded universal integrated circuit card
KR101599144B1
( en )
*
2014-07-23
2016-03-02
ì¼ì±ìì¤ëìì¤ ì£¼ìíì¬
Apparatus and method for generating key
CN105721153B
( en )
*
2014-09-05
2020-03-27
ä¸æSdsæ ªå¼ä¼ç¤¾
Key exchange system and method based on authentication information
US9853977B1
( en )
2015-01-26
2017-12-26
Winklevoss Ip, Llc
System, method, and program product for processing secure transactions within a cloud computing system
US10015017B2
( en )
*
2015-04-09
2018-07-03
Qualcomm Incorporated
Proof of work based user identification system
CN106130716B
( en )
2015-05-06
2020-01-21
ä¸æSdsæ ªå¼ä¼ç¤¾
Key exchange system and method based on authentication information
WO2017014614A1
( en )
*
2015-07-23
2017-01-26
주ìíì¬ í¬ìì´í¼
Method for operating communication client of iot device, and iot device including communication client
CN105119923B
( en )
*
2015-09-01
2018-03-23
æé½æ±åä¹¾å ç§ææéå ¬å¸
A kind of information decoding method and terminal
CN105119924B
( en )
*
2015-09-01
2018-04-10
æé½æ±åä¹¾å ç§ææéå ¬å¸
A kind of information transferring method
WO2017083853A1
( en )
*
2015-11-13
2017-05-18
Yaana Technologies Llc
System and method for providing secure and anonymous device-to-device communication
CN107104932A
( en )
*
2016-02-23
2017-08-29
ä¸å ´é讯è¡ä»½æéå ¬å¸
Key updating method, apparatus and system
CN105743914B
( en )
*
2016-03-31
2019-03-22
å®é¾è®¡ç®æºéä¿¡ç§æ(æ·±å³)æéå ¬å¸
A kind of voice encryption communication means, calling terminal, called end and system
KR101815175B1
( en )
2016-05-27
2018-01-04
ì¼ì±ìì¤ëìì¤ ì£¼ìíì¬
Apparatus and method for data encryption, apparatus and method for data decryption
EP3561797B1
( en )
*
2016-12-20
2022-02-09
Nippon Telegraph And Telephone Corporation
Message transmission system, communication terminal, server device, message transmission method, and program
CN108449563B
( en )
*
2018-02-01
2020-07-10
å¦é¨æ宸ç§ææéå ¬å¸
Method and system for encrypting and decrypting audio and video
DE102018212361A1
( en )
*
2018-07-25
2020-01-30
Robert Bosch Gmbh
First vehicle-side terminal, method for operating the first terminal, second vehicle-side terminal and method for operating the second vehicle-side terminal
US11210664B2
( en )
*
2018-10-02
2021-12-28
Capital One Services, Llc
Systems and methods for amplifying the strength of cryptographic algorithms
US11093627B2
( en )
*
2018-10-31
2021-08-17
L3 Technologies, Inc.
Key provisioning
WO2021107515A1
( en )
*
2019-11-28
2021-06-03
Seoul National University R&Db Foundation
Identity-based encryption method based on lattices
CN113766495A
( en )
*
2020-05-30
2021-12-07
å为ææ¯æéå ¬å¸
Information protection method, system and communication device
CN114063116B
( en )
*
2020-08-10
2025-06-24
ç½ä¼¯ç¹Â·åä¸æéå ¬å¸
Method, device and system for providing satellite positioning correction data
CN112134694B
( en )
*
2020-08-11
2024-01-23
å京æºè¯å¾®çµåç§ææéå ¬å¸
Data interaction method, main station, terminal and computer-readable storage medium
US20240007295A1
( en )
*
2021-02-09
2024-01-04
Sony Semiconductor Solutions Corporation
Information processor, mobile body apparatus, and communication system
CN115499118A
( en )
*
2022-08-05
2022-12-20
å京海泰æ¹åç§æè¡ä»½æéå ¬å¸
Message key generation method, message key generation device, file encryption method, message key decryption method, file encryption device, file decryption device and medium
Citations (14)
* Cited by examiner, â Cited by third party
Publication number
Priority date
Publication date
Assignee
Title
US5664017A
( en )
*
1995-04-13
1997-09-02
Fortress U & T Ltd.
Internationally regulated system for one to one cryptographic communications with national sovereignty without key escrow
US20020071553A1
( en )
*
2000-10-20
2002-06-13
Taizo Shirai
Data storage device, data recording method, data playback method, and program providing medium
US20030081785A1
( en )
*
2001-08-13
2003-05-01
Dan Boneh
Systems and methods for identity-based encryption and related cryptographic techniques
EP1526676A1
( en )
*
2003-10-20
2005-04-27
Samsung Electronics Co., Ltd.
Conference session key distribution method on an id-based cryptographic system
US20060215837A1
( en )
*
2004-12-18
2006-09-28
Hewlett-Packard Development Company, L.P.
Method and apparatus for generating an identifier-based public/private key pair
US20070121934A1
( en )
*
2003-12-26
2007-05-31
Yuichi Futa
Prime calculation device,method,and key issuing system
US20080162935A1
( en )
*
2006-12-29
2008-07-03
Nokia Corporation
Securing communication
US20090307492A1
( en )
*
2007-11-19
2009-12-10
Zhenfu Cao
Method,system and network device for bidirectional authentication
US20100104094A1
( en )
*
2007-01-19
2010-04-29
Mitsubishi Electric Corporation
Ciphertext generating apparatus, cryptographic communication system, and group parameter generating apparatus
US7986778B2
( en )
*
2004-06-23
2011-07-26
Hewlett-Packard Development Company, L.P.
Cryptographic method and apparatus
US20130028415A1
( en )
*
2010-04-27
2013-01-31
Nippon Telegraph And Telephone Corporation
Cryptographic processing system, key generation device, encryption device, decryption device, signature processing system, signature device, and verification device
US20130287206A1
( en )
*
2011-01-18
2013-10-31
Mitsubishi Electric Corporation
Encryption system, encryption processing method of encryption system, encryption device, encryption program, decryption device, decryption program, setup device, setup program, key generation device, key generation program, key delegation device, and key delegation program
US20130322621A1
( en )
*
2012-05-31
2013-12-05
Snu R&Db Foundation
Private key generation apparatus and method, and storage media storing programs for executing the methods
US20130336478A1
( en )
*
2012-06-15
2013-12-19
Kabushiki Kaisha Toshiba
Authentication method
Family Cites Families (8)
* Cited by examiner, â Cited by third party
Publication number
Priority date
Publication date
Assignee
Title
US6760752B1
( en )
*
1999-06-28
2004-07-06
Zix Corporation
Secure transmission system
KR100315387B1
( en )
*
1999-08-02
2001-11-26
ì¤ê¸
Private Key, Certificate Administration System and Method Thereof
KR100553792B1
( en )
*
2003-05-30
2006-02-20
주ìíì¬ í¬í
Communication device and method with terminal-to-terminal authentication
KR20050030982A
( en )
*
2003-09-27
2005-04-01
ëì°½ì
Method and system for safely distributing digital contents through communication network by using user programs containing different digital identifications
US20050182933A1
( en )
*
2004-02-03
2005-08-18
Derek Ritz
Method and system for document transmission
KR20070035342A
( en )
*
2005-09-27
2007-03-30
íêµì ë³´ë³´í¸ì§í¥ì
Password-based lightweight mutual authentication
KR100842267B1
( en )
*
2006-12-01
2008-06-30
íêµì ìíµì ì°êµ¬ì
Integrated user authentication server, client and method in a system with multiple authentication means
CN101789865B
( en )
*
2010-03-04
2011-11-30
æ·±å³å¸åä¿¡å®åç§ææéå ¬å¸
Dedicated server used for encryption and encryption method
2012
2012-10-31
KR
KR20120122508A
patent/KR101493212B1/en
active
Active
2013
2013-08-29
WO
PCT/KR2013/007768
patent/WO2014069778A1/en
not_active
Ceased
2013-09-29
CN
CN201310453305.3A
patent/CN103795533B/en
active
Active
2013-10-30
US
US14/067,284
patent/US9379891B2/en
active
Active
Patent Citations (14)
* Cited by examiner, â Cited by third party
Publication number
Priority date
Publication date
Assignee
Title
US5664017A
( en )
*
1995-04-13
1997-09-02
Fortress U & T Ltd.
Internationally regulated system for one to one cryptographic communications with national sovereignty without key escrow
US20020071553A1
( en )
*
2000-10-20
2002-06-13
Taizo Shirai
Data storage device, data recording method, data playback method, and program providing medium
US20030081785A1
( en )
*
2001-08-13
2003-05-01
Dan Boneh
Systems and methods for identity-based encryption and related cryptographic techniques
EP1526676A1
( en )
*
2003-10-20
2005-04-27
Samsung Electronics Co., Ltd.
Conference session key distribution method on an id-based cryptographic system
US20070121934A1
( en )
*
2003-12-26
2007-05-31
Yuichi Futa
Prime calculation device,method,and key issuing system
US7986778B2
( en )
*
2004-06-23
2011-07-26
Hewlett-Packard Development Company, L.P.
Cryptographic method and apparatus
US20060215837A1
( en )
*
2004-12-18
2006-09-28
Hewlett-Packard Development Company, L.P.
Method and apparatus for generating an identifier-based public/private key pair
US20080162935A1
( en )
*
2006-12-29
2008-07-03
Nokia Corporation
Securing communication
US20100104094A1
( en )
*
2007-01-19
2010-04-29
Mitsubishi Electric Corporation
Ciphertext generating apparatus, cryptographic communication system, and group parameter generating apparatus
US20090307492A1
( en )
*
2007-11-19
2009-12-10
Zhenfu Cao
Method,system and network device for bidirectional authentication
US20130028415A1
( en )
*
2010-04-27
2013-01-31
Nippon Telegraph And Telephone Corporation
Cryptographic processing system, key generation device, encryption device, decryption device, signature processing system, signature device, and verification device
US20130287206A1
( en )
*
2011-01-18
2013-10-31
Mitsubishi Electric Corporation
Encryption system, encryption processing method of encryption system, encryption device, encryption program, decryption device, decryption program, setup device, setup program, key generation device, key generation program, key delegation device, and key delegation program
US20130322621A1
( en )
*
2012-05-31
2013-12-05
Snu R&Db Foundation
Private key generation apparatus and method, and storage media storing programs for executing the methods
US20130336478A1
( en )
*
2012-06-15
2013-12-19
Kabushiki Kaisha Toshiba
Authentication method
Non-Patent Citations (9)
* Cited by examiner, â Cited by third party
Title
Abdalla et al. Verifiable Random Functions from Identity-Based Key Encapsulation, EUROCRYPT 2009, LNCS 5749, pp. 554-571, 2009.
*
Boyd et al. Security of Two-Party Identity-Based Key AGreement, Mycrypt, LNCS 3715, pp. 229-243, 2005.
*
Cakulev et al., " IBAKE: Identity-Based Authenticated Key Exchange ", RFC 6539, 2012.
*
Fujikoka et al. Strongly Secure Authenticated Key Exchange from Factoring, Codes, and Lattices, PKC 2012, LNCS 7293, pp. 467-484, 2012.
*
Intel Corporation, Content Protection for Recordable Media Specification. SD Memroy Card Book Common Part, Rev. 0.97, Dec. 2010.
*
Lee et al. " Cryptanalysis of Secure Key Exchange Protocol between STB and Smart Card in IPTV Broadcasting ", ISA 2009, LNCS 5576, pp. 797-803, 2009.
*
Nguyen Simplifying Peer-to-Peer Device Authentication Using Identity-Based Cryptography, 0769526225, IEEE 2006.
*
Selvi et al. " Identity Based Self Delegated Signature-Self Proxy Signatures ", 9780769541594, IEEE 2010.
*
Yoon et al., " Batch Verifications with ID-Based Signatures ", LNCS 3506, pp. 233-248, 2005.
*
Cited By (16)
* Cited by examiner, â Cited by third party
Publication number
Priority date
Publication date
Assignee
Title
US11336425B1
( en )
2010-06-01
2022-05-17
Ternarylogic Llc
Cryptographic machines characterized by a Finite Lab-Transform (FLT)
US10650373B2
( en )
2010-06-01
2020-05-12
Ternarylogic Llc
Method and apparatus for validating a transaction between a plurality of machines
US10515567B2
( en )
2010-06-01
2019-12-24
Ternarylogic Llc
Cryptographic machines with N-state lab-transformed switching devices
US10439996B2
( en )
2014-02-11
2019-10-08
Yaana Technologies, LLC
Method and system for metadata analysis and collection with privacy
US10447503B2
( en )
2014-02-21
2019-10-15
Yaana Technologies, LLC
Method and system for data flow management of user equipment in a tunneling packet data network
US9693263B2
( en )
2014-02-21
2017-06-27
Yaana Technologies, LLC
Method and system for data flow management of user equipment in a tunneling packet data network
US10334037B2
( en )
2014-03-31
2019-06-25
Yaana Technologies, Inc.
Peer-to-peer rendezvous system for minimizing third party visibility and method thereof
US10285038B2
( en )
2014-10-10
2019-05-07
Yaana Technologies, Inc.
Method and system for discovering user equipment in a network
US10542426B2
( en )
2014-11-21
2020-01-21
Yaana Technologies, LLC
System and method for transmitting a secure message over a signaling network
US10257248B2
( en )
2015-04-29
2019-04-09
Yaana Technologies, Inc.
Scalable and iterative deep packet inspection for communications networks
US10135930B2
( en )
2015-11-13
2018-11-20
Yaana Technologies Llc
System and method for discovering internet protocol (IP) network address and port translation bindings
US11178547B2
( en )
2018-07-10
2021-11-16
Apple Inc.
Identity-based message integrity protection and verification for wireless communication
US11856402B2
( en )
2018-07-10
2023-12-26
Apple Inc.
Identity-based message integrity protection and verification for wireless communication
US11658949B2
( en )
2019-10-07
2023-05-23
British Telecommunications Public Limited Company
Secure publish-subscribe communication methods and apparatus
US11276258B2
( en )
2020-06-15
2022-03-15
Delphian Systems, LLC
Enhanced security for contactless access card system
US20230297695A1
( en )
*
2022-03-18
2023-09-21
STMicroelectronics (Grand Ouest) SAS
Secure generation of pairing keys
Also Published As
Publication number
Publication date
KR101493212B1
( en )
2015-02-23
CN103795533B
( en )
2017-12-05
CN103795533A
( en )
2014-05-14
US20140192976A1
( en )
2014-07-10
KR20140055509A
( en )
2014-05-09
WO2014069778A1
( en )
2014-05-08
Similar Documents
Publication
Publication Date
Title
US20140192976A1
( en )
2014-07-10
Method and system for id-based encryption and decryption
US12010216B2
( en )
2024-06-11
Computer-implemented system and method for highly secure, high speed encryption and transmission of data
CN103795534B
( en )
2017-08-25
Authentication method and apparatus for carrying out the method based on password
US10447669B2
( en )
2019-10-15
System and method for key exchange based on authentication information
KR101685810B1
( en )
2016-12-12
System and method for key exchange based on authtication information
KR101493214B1
( en )
2015-02-24
Method for password based authentication and apparatus executing the method
<span itemprop="publicationNumber"