Systems and methods for non-interactive session key distribution with revocation
    1.
    发明授权
    Systems and methods for non-interactive session key distribution with revocation 有权
    具有撤销的非交互式会话密钥分发的系统和方法

    公开(公告)号:US07400732B2

    公开(公告)日:2008-07-15

    申请号:US10255964

    申请日:2002-09-27

    IPC分类号: H04L9/16

    摘要: Systems and methods that allow the formation and distribution of session keys amongst a dynamic group of users communicating over an unreliable, or lossy, network. The systems and methods according to this invention allow an intermediate session key contained in an intermediate key distribution broadcast to be determined by receiving a preceding key distribution broadcast that precedes the intermediate key distribution broadcast, the preceding key distribution broadcast including a first portion of the intermediate session key; receiving a subsequent key distribution broadcast that follows the intermediate key distribution broadcast, the subsequent key distribution broadcast including a second portion of the intermediate session key that is distinct from the first portion; and combining at least the first portion of the intermediate session key contained within the preceding key distribution broadcast and the second portion of the intermediate session key contained within the subsequent key distribution broadcast to obtain the intermediate session key.

    摘要翻译: 允许在通过不可靠或有损耗的网络通信的动态用户组中形成和分发会话密钥的系统和方法。 根据本发明的系统和方法允许通过接收在中间密钥分配广播之前的先前密钥分发广播来确定包含在中间密钥分发广播中的中间会话密钥,前一密钥分发广播包括中间密钥分发广播的第一部分 会话密钥; 接收所述中间密钥分发广播之后的随后密钥分发广播,所述后续密钥分发广播包括与所述第一部分不同的所述中间会话密钥的第二部分; 以及组合至少包含在前述密钥分发广播中的中间会话密钥的第一部分和包含在后续密钥分发广播中的中间会话密钥的第二部分以获得中间会话密钥。

    Systems and methods for identity-based encryption and related cryptographic techniques
    2.
    发明申请
    Systems and methods for identity-based encryption and related cryptographic techniques 有权
    用于基于身份的加密和相关加密技术的系统和方法

    公开(公告)号:US20100208895A1

    公开(公告)日:2010-08-19

    申请号:US12589880

    申请日:2009-10-28

    IPC分类号: H04L9/30 H04L9/08 H04L9/00

    摘要: A method and system for encrypting a first piece of information M to be sent by a sender [100] to a receiver [110] allows both sender and receiver to compute a secret message key using identity-based information and a bilinear map. In a one embodiment, the sender [100] computes an identity-based encryption key from an identifier ID associated with the receiver [110]. The identifier ID may include various types of information such as the receiver's e-mail address, a receiver credential, a message identifier, or a date. The sender uses a bilinear map and the encryption key to compute a secret message key gIDr, which is then used to encrypt a message M, producing ciphertext V to be sent from the sender [100] to the receiver [110] together with an element rP. An identity-based decryption key dID is computed by a private key generator [120] based on the ID associated with the receiver and a secret master key s. After obtaining the private decryption key from the key generator [120], the receiver [110] uses it together with the element rP and the bilinear map to compute the secret message key gIDr, which is then used to decrypt V and recover the original message M. According to one embodiment, the bilinear map is based on a Weil pairing or a Tate pairing defined on a subgroup of an elliptic curve. Also described are several applications of the techniques, including key revocation, credential management, and return receipt notification.

    摘要翻译: 用于加密由发送器[100]发送给接收机[110]的第一条信息M的方法和系统允许发送方和接收方使用基于身份的信息和双线性映射来计算秘密消息密钥。 在一个实施例中,发送器[100]从与接收机[110]相关联的标识符ID计算基于身份的加密密钥。 标识符ID可以包括诸如接收者的电子邮件地址,接收者凭证,消息标识符或日期的各种类型的信息。 发送方使用双线性映射和加密密钥来计算秘密消息密钥gIDr,然后将其用于加密消息M,产生要从发送方[100]发送到接收方[110]的密文V以及元素 rP。 基于身份的解密密钥dID由私钥生成器[120]基于与接收者相关联的ID和秘密主密钥s计算。 在从密钥生成器[120]获得私有解密密钥之后,接收机110将其与元素rP和双线性映射一起使用以计算秘密消息密钥gIDr,然后将密钥gIDr用于解密V并恢复原始消息 M.根据一个实施例,双线性映射基于在椭圆曲线的子组上定义的Weil配对或Tate配对。 还描述了技术的若干应用,包括关键撤销,凭证管理和回报收据通知。

    Systems and methods for identity-based encryption and related cryptographic techniques
    4.
    发明授权
    Systems and methods for identity-based encryption and related cryptographic techniques 有权
    用于基于身份的加密和相关加密技术的系统和方法

    公开(公告)号:US09356779B2

    公开(公告)日:2016-05-31

    申请号:US13369165

    申请日:2012-02-08

    摘要: A method and system for encrypting a first piece of information M to be sent by a sender [100] to a receiver [110] allows both sender and receiver to compute a secret message key using identity-based information and a bilinear map. The sender uses a bilinear map to encrypt a message M, producing ciphertext V to be sent from the sender [100] to the receiver [110]. The receiver [110] uses the bilinear map to decrypt V and recover the original message M. According to one embodiment, the bilinear map is based on a Weil pairing or a Tate pairing defined on a subgroup of an elliptic curve. Also described are several applications of the techniques, including key revocation, credential management, and return receipt notification.

    摘要翻译: 用于加密由发送器[100]发送给接收机[110]的第一条信息M的方法和系统允许发送方和接收方使用基于身份的信息和双线性映射来计算秘密消息密钥。 发送方使用双线性映射来加密消息M,产生要从发送方[100]发送到接收方[110]的密文V。 接收机[110]使用双线性映射来解密V并恢复原始消息M.根据一个实施例,双线性映射基于在椭圆曲线的子组上定义的Weil配对或Tate配对。 还描述了技术的若干应用,包括关键撤销,凭证管理和回报收据通知。

    Systems and Methods for Identity-Based Encryption and Related Cryptographic Techniques
    6.
    发明申请
    Systems and Methods for Identity-Based Encryption and Related Cryptographic Techniques 有权
    基于身份的加密和相关密码技术的系统和方法

    公开(公告)号:US20120159188A1

    公开(公告)日:2012-06-21

    申请号:US13369165

    申请日:2012-02-08

    IPC分类号: G06F21/24

    摘要: A method and system for encrypting a first piece of information M to be sent by a sender [100] to a receiver [110] allows both sender and receiver to compute a secret message key using identity-based information and a bilinear map. The sender uses a bilinear map to encrypt a message M, producing ciphertext V to be sent from the sender [100] to the receiver [110]. The receiver [110] uses the bilinear map to decrypt V and recover the original message M. According to one embodiment, the bilinear map is based on a Weil pairing or a Tate pairing defined on a subgroup of an elliptic curve. Also described are several applications of the techniques, including key revocation, credential management, and return receipt notification.

    摘要翻译: 用于加密由发送器[100]发送给接收机[110]的第一条信息M的方法和系统允许发送方和接收方使用基于身份的信息和双线性映射来计算秘密消息密钥。 发送方使用双线性映射来加密消息M,产生要从发送方[100]发送到接收方[110]的密文V。 接收机[110]使用双线性映射来解密V并恢复原始消息M.根据一个实施例,双线性映射基于在椭圆曲线的子组上定义的Weil配对或Tate配对。 还描述了技术的若干应用,包括关键撤销,凭证管理和回报收据通知。

    Systems and methods for identity-based encryption and related cryptographic techniques
    7.
    发明申请
    Systems and methods for identity-based encryption and related cryptographic techniques 有权
    用于基于身份的加密和相关加密技术的系统和方法

    公开(公告)号:US20070041583A1

    公开(公告)日:2007-02-22

    申请号:US11431410

    申请日:2006-05-09

    IPC分类号: H04L9/28

    摘要: A method and system for encrypting a first piece of information M to be sent by a sender [100] to a receiver [110] allows both sender and receiver to compute a secret message key using identity-based information and a bilinear map. In a one embodiment, the sender [100] computes an identity-based encryption key from an identifier ID associated with the receiver [110]. The identifier ID may include various types of information such as the receiver's e-mail address, a receiver credential, a message identifier, or a date. The sender uses a bilinear map and the encryption key to compute a secret message key gIDr, which is then used to encrypt a message M, producing ciphertext V to be sent from the sender [100] to the receiver [110] together with an element rP. An identity-based decryption key dID is computed by a private key generator [120] based on the ID associated with the receiver and a secret master key s. After obtaining the private decryption key from the key generator [120], the receiver [110] uses it together with the element rP and the bilinear map to compute the secret message key gIDr, which is then used to decrypt V and recover the original message M. According to one embodiment, the bilinear map is based on a Weil pairing or a Tate pairing defined on a subgroup of an elliptic curve. Also described are several applications of the techniques, including key revocation, credential management, and return receipt notification.

    摘要翻译: 用于加密由发送器[100]发送给接收机[110]的第一条信息M的方法和系统允许发送方和接收方使用基于身份的信息和双线性映射来计算秘密消息密钥。 在一个实施例中,发送器[100]从与接收机[110]相关联的标识符ID计算基于身份的加密密钥。 标识符ID可以包括诸如接收者的电子邮件地址,接收者凭证,消息标识符或日期的各种类型的信息。 发送方使用双线性映射和加密密钥来计算秘密消息密钥g r ,然后用于加密消息M,产生要发送的密文V 从发送器[100]到接收器[110]以及元素rP。 基于身份的解密密钥d 由私钥生成器[120]基于与接收者相关联的ID和秘密主密钥s计算。 在从密钥生成器[120]获得私有解密密钥之后,接收机110将其与元素rP和双线性映射一起使用,以计算秘密消息密钥g / SUP>,然后将其用于解密V并恢复原始消息M.根据一个实施例,双线性映射基于在椭圆曲线的子组上定义的Weil配对或Tate配对。 还描述了技术的若干应用,包括关键撤销,凭证管理和回报收据通知。

    Systems and methods for identity-based encryption and related cryptographic techniques
    9.
    发明授权
    Systems and methods for identity-based encryption and related cryptographic techniques 有权
    用于基于身份的加密和相关加密技术的系统和方法

    公开(公告)号:US08130964B2

    公开(公告)日:2012-03-06

    申请号:US12589880

    申请日:2009-10-28

    摘要: A method and system for encrypting a first piece of information M to be sent by a sender [100] to a receiver [110] allows both sender and receiver to compute a secret message key using identity-based information and a bilinear map. In a one embodiment, the sender [100] computes an identity-based encryption key from an identifier ID associated with the receiver [110]. The identifier ID may include various types of information such as the receiver's e-mail address, a receiver credential, a message identifier, or a date. The sender uses a bilinear map and the encryption key to compute a secret message key gIDr, which is then used to encrypt a message M, producing ciphertext V to be sent from the sender [100] to the receiver [110] together with an element rP. An identity-based decryption key dID is computed by a private key generator [120] based on the ID associated with the receiver and a secret master key s. After obtaining the private decryption key from the key generator [120], the receiver [110] uses it together with the element rP and the bilinear map to compute the secret message key gIDr, which is then used to decrypt V and recover the original message M. According to one embodiment, the bilinear map is based on a Weil pairing or a Tate pairing defined on a subgroup of an elliptic curve. Also described are several applications of the techniques, including key revocation, credential management, and return receipt notification.

    摘要翻译: 用于加密由发送器[100]发送给接收机[110]的第一条信息M的方法和系统允许发送方和接收方使用基于身份的信息和双线性映射来计算秘密消息密钥。 在一个实施例中,发送器[100]从与接收机[110]相关联的标识符ID计算基于身份的加密密钥。 标识符ID可以包括诸如接收者的电子邮件地址,接收者凭证,消息标识符或日期的各种类型的信息。 发送方使用双线性映射和加密密钥来计算秘密消息密钥gIDr,然后将其用于加密消息M,产生要从发送方[100]发送到接收方[110]的密文V以及元素 rP。 基于身份的解密密钥dID由私钥生成器[120]基于与接收者相关联的ID和秘密主密钥s计算。 在从密钥生成器[120]获得私有解密密钥之后,接收机110将其与元素rP和双线性映射一起使用以计算秘密消息密钥gIDr,然后将密钥gIDr用于解密V并恢复原始消息 M.根据一个实施例,双线性映射基于在椭圆曲线的子组上定义的Weil配对或Tate配对。 还描述了技术的若干应用,包括密钥撤销,凭证管理和回执接收通知。

    Systems and methods for identity-based encryption and related cryptographic techniques

    公开(公告)号:US07634087B2

    公开(公告)日:2009-12-15

    申请号:US11431410

    申请日:2006-05-09

    摘要: A method and system for encrypting a first piece of information M to be sent by a sender [100] to a receiver [110] allows both sender and receiver to compute a secret message key using identity-based information and a bilinear map. In a one embodiment, the sender [100] computes an identity-based encryption key from an identifier ID associated with the receiver [110]. The identifier ID may include various types of information such as the receiver's e-mail address, a receiver credential, a message identifier, or a date. The sender uses a bilinear map and the encryption key to compute a secret message key gIDr, which is then used to encrypt a message M, producing ciphertext V to be sent from the sender [100] to the receiver [110] together with an element rP. An identity-based decryption key dID is computed by a private key generator [120] based on the ID associated with the receiver and a secret master key s. After obtaining the private decryption key from the key generator [120], the receiver [110] uses it together with the element rP and the bilinear map to compute the secret message key gIDr, which is then used to decrypt V and recover the original message M. According to one embodiment, the bilinear map is based on a Weil pairing or a Tate pairing defined on a subgroup of an elliptic curve. Also described are several applications of the techniques, including key revocation, credential management, and return receipt notification.