-
公开(公告)号:US08200963B2
公开(公告)日:2012-06-12
申请号:US11311256
申请日:2005-12-20
申请人: Weon-il Jin , Dae-youb Kim , Hwan-joon Kim , Sung-joon Park
发明人: Weon-il Jin , Dae-youb Kim , Hwan-joon Kim , Sung-joon Park
IPC分类号: H04L29/06
CPC分类号: H04L9/0833 , G06F21/10 , H04L9/0822 , H04L2209/601
摘要: A combination-based broadcast encryption method includes: assigning by a server a base group of different combinations to each user; producing and sending secret information for each user by using as a base the base group allocated to each user; producing and sending an inverse-base parameter value through calculations with integers used to produce the base group and key value information of one or more privileged users; and deriving a group key by using the key value information of the privileged users, encrypting a session key by using the derived group key, and sending the encrypted session key to each user. Accordingly, each user is assigned a different base through a combination, thereby having security against collusion attacks.
摘要翻译: 基于组合的广播加密方法包括:由服务器分配不同组合的基组给每个用户; 通过使用分配给每个用户的基本组作为基础来生成和发送每个用户的秘密信息; 通过用于产生基本组的整数和一个或多个特权用户的键值信息的计算产生和发送反基本参数值; 以及通过使用所述特权用户的密钥值信息来导出组密钥,通过使用导出的组密钥加密会话密钥,以及将加密的会话密钥发送给每个用户。 因此,通过组合为每个用户分配不同的基站,从而具有防止串通攻击的安全性。
-
公开(公告)号:US07929705B2
公开(公告)日:2011-04-19
申请号:US11271989
申请日:2005-11-14
申请人: Dae-youb Kim , Weon-il Jin , Hwan-joon Kim , Sung-joon Park , Jung-hee Cheon , Myung-hwan Kim , Nam-su Jho , Eun-sun Yoo
发明人: Dae-youb Kim , Weon-il Jin , Hwan-joon Kim , Sung-joon Park , Jung-hee Cheon , Myung-hwan Kim , Nam-su Jho , Eun-sun Yoo
IPC分类号: H04L9/08
CPC分类号: H04N21/2585 , H04L9/0822 , H04L9/0827 , H04L9/0836 , H04L9/0869 , H04L9/0891 , H04L2209/38 , H04L2209/601 , H04L2209/606 , H04N7/162 , H04N7/1675 , H04N21/26613
摘要: A user key management method for a broadcast encryption includes assigning node path identifiers (IDs) to nodes arranged in sequence; assigning random seed value keys to the nodes according to the node path IDs; generating key values by repeatedly applying a hash function to the assigned random seed value keys; and assigning the generated key values to the nodes in sequence. Accordingly, it is possible to reduce the transmission overhead that is most important matter in the broadcast encryption to less than the number of the revoked users. Further, there is an advantage that the transmission overhead of the exemplary embodiments of the present invention is remarkably reduced compared with the Subset Difference method.
摘要翻译: 用于广播加密的用户密钥管理方法包括将节点路径标识符(ID)分配给依次排列的节点; 根据节点路径ID向节点分配随机种子值密钥; 通过重复地将哈希函数应用于所分配的随机种子值键来产生密钥值; 并将生成的密钥值依次分配给节点。 因此,可以将在广播加密中最重要的传输开销降低到小于被撤销用户的数量。 此外,与子集差分法相比,本发明的示例性实施例的传输开销明显减少。
-
公开(公告)号:US20070189539A1
公开(公告)日:2007-08-16
申请号:US11340614
申请日:2006-01-27
申请人: Dae-youb Kim , Hwan-joon Kim , Sung-joon Park , Weon-il Jin , Dong-hoon Lee
发明人: Dae-youb Kim , Hwan-joon Kim , Sung-joon Park , Weon-il Jin , Dong-hoon Lee
IPC分类号: H04L9/00
CPC分类号: H04L9/0836 , H04L9/0822 , H04L9/085 , H04L2209/601
摘要: A hierarchical threshold tree-based broadcast encryption method includes a first step for a server initialization and a user subscription, a second step of distributing a message to enable a privileged user (authorized user) to decrypt a group key, and a third step of the privileged user (authorized user) decrypting the message using the group key. According to the method, it is possible to prevent any group of revocators from obtaining the group key using their secret information and information being broadcast by the server.
摘要翻译: 基于分层阈值树的广播加密方法包括用于服务器初始化和用户订阅的第一步骤,分发消息以使得特权用户(授权用户)能够解密组密钥的第二步骤,以及第三步骤 特权用户(授权用户)使用组密钥解密消息。 根据该方法,可以防止任何一组撤销者使用其秘密信息和由服务器广播的信息来获得组密钥。
-
4.
公开(公告)号:US08160246B2
公开(公告)日:2012-04-17
申请号:US11245054
申请日:2005-10-07
申请人: Hwan-joon Kim , Dae-youb Kim , Weon-il Jin , Sung-joon Park
发明人: Hwan-joon Kim , Dae-youb Kim , Weon-il Jin , Sung-joon Park
IPC分类号: H04L9/00
CPC分类号: G06Q20/3829 , H04L9/0836 , H04L9/0891 , H04L2209/601
摘要: An apparatus and method for generating a key for a broadcast encryption. The apparatus includes a node secret generator for managing a user that receives broadcast data in a tree structure and for generating a unique node secret for each node in the tree structure. The apparatus also includes an instant key generator for temporarily generating an instant key used at all nodes in common in the tree structure, and a node key generator for generating a node key for each node by operating the node secret generated at the node secret generator and the instant key generated at the instant key generator. Thus, key update can be efficiently achieved.
摘要翻译: 一种用于生成用于广播加密的密钥的装置和方法。 该装置包括节点秘密生成器,用于管理以树结构接收广播数据的用户,并为树结构中的每个节点生成唯一的节点秘密。 该装置还包括一个即时密钥生成器,用于临时生成树结构中所有节点共同使用的即时密钥,以及节点密钥生成器,用于通过操作在节点秘密生成器处生成的节点秘密来生成每个节点的节点密钥, 在即时密钥生成器处生成的即时密钥。 因此,可以有效地实现密钥更新。
-
公开(公告)号:US08005225B2
公开(公告)日:2011-08-23
申请号:US11340614
申请日:2006-01-27
申请人: Dae-youb Kim , Hwan-joon Kim , Sung-joon Park , Weon-il Jin , Dong-hoon Lee
发明人: Dae-youb Kim , Hwan-joon Kim , Sung-joon Park , Weon-il Jin , Dong-hoon Lee
IPC分类号: H04L29/00
CPC分类号: H04L9/0836 , H04L9/0822 , H04L9/085 , H04L2209/601
摘要: A hierarchical threshold tree-based broadcast encryption method includes a first step for a server initialization and a user subscription, a second step of distributing a message to enable a privileged user (authorized user) to decrypt a group key, and a third step of the privileged user (authorized user) decrypting the message using the group key. According to the method, it is possible to prevent any group of revocators from obtaining the group key using their secret information and information being broadcast by the server.
摘要翻译: 基于分层阈值树的广播加密方法包括用于服务器初始化和用户订阅的第一步骤,分发消息以使得特权用户(授权用户)能够解密组密钥的第二步骤,以及第三步骤 特权用户(授权用户)使用组密钥解密消息。 根据该方法,可以防止任何一组撤销者使用其秘密信息和由服务器广播的信息来获得组密钥。
-
公开(公告)号:US20070140483A1
公开(公告)日:2007-06-21
申请号:US11311256
申请日:2005-12-20
申请人: Weon-il Jin , Dae-youb Kim , Hwan-joon Kim , Sung-joon Park
发明人: Weon-il Jin , Dae-youb Kim , Hwan-joon Kim , Sung-joon Park
CPC分类号: H04L9/0833 , G06F21/10 , H04L9/0822 , H04L2209/601
摘要: A combination-based broadcast encryption method includes: assigning by a server a base group of different combinations to each user; producing and sending secret information for each user by using as a base the base group allocated to each user; producing and sending an inverse-base parameter value through calculations with integers used to produce the base group and key value information of one or more privileged users; and deriving a group key by using the key value information of the privileged users, encrypting a session key by using the derived group key, and sending the encrypted session key to each user. Accordingly, each user is assigned a different base through a combination, thereby having security against collusion attacks.
摘要翻译: 基于组合的广播加密方法包括:由服务器分配不同组合的基组给每个用户; 通过使用分配给每个用户的基本组作为基础来生成和发送每个用户的秘密信息; 通过用于产生基本组的整数和一个或多个特权用户的键值信息的计算产生和发送反基本参数值; 以及通过使用所述特权用户的密钥值信息来导出组密钥,通过使用导出的组密钥加密会话密钥,以及将加密的会话密钥发送给每个用户。 因此,通过组合为每个用户分配不同的基站,从而具有防止串通攻击的安全性。
-
7.
公开(公告)号:US08755520B2
公开(公告)日:2014-06-17
申请号:US13426830
申请日:2012-03-22
申请人: Hwan-joon Kim , Dae-youb Kim , Weon-il Jin , Sung-joon Park
发明人: Hwan-joon Kim , Dae-youb Kim , Weon-il Jin , Sung-joon Park
IPC分类号: H04L9/00
CPC分类号: G06Q20/3829 , H04L9/0836 , H04L9/0891 , H04L2209/601
摘要: An apparatus and method for generating a key for a broadcast encryption. The apparatus includes a node secret generator for managing a user that receives broadcast data in a tree structure and for generating a unique node secret for each node in the tree structure. The apparatus also includes an instant key generator for temporarily generating an instant key used at all nodes in common in the tree structure, and a node key generator for generating a node key for each node by operating the node secret generated at the node secret generator and the instant key generated at the instant key generator. Thus, key update can be efficiently achieved.
摘要翻译: 一种用于生成用于广播加密的密钥的装置和方法。 该装置包括节点秘密生成器,用于管理以树结构接收广播数据的用户,并为树结构中的每个节点生成唯一的节点秘密。 该装置还包括一个即时密钥生成器,用于临时生成树结构中所有节点共同使用的即时密钥,以及节点密钥生成器,用于通过操作在节点秘密生成器处生成的节点秘密来生成每个节点的节点密钥, 在即时密钥生成器处生成的即时密钥。 因此,可以有效地实现密钥更新。
-
公开(公告)号:US07848525B2
公开(公告)日:2010-12-07
申请号:US11346194
申请日:2006-02-03
申请人: Hwan-joon Kim , Dae-youb Kim , Sung-joon Park , Weon-il Jin
发明人: Hwan-joon Kim , Dae-youb Kim , Sung-joon Park , Weon-il Jin
IPC分类号: H04L9/00
CPC分类号: H04L9/0822 , H04L9/0836 , H04L2209/601
摘要: A hybrid broadcast encryption method is provided. The hybrid broadcast encryption method includes setting initialization values, generating a node secret using the initialization values; generating a private secret using the node secret; sending the node secret and the private secret; generating a broadcast message based on a revoked group; encrypting a session key using a key encryption key (KEK) which is allocated to every user group and the broadcast message; and broadcasting to every user the encrypted session key and the broadcast message.
摘要翻译: 提供了一种混合广播加密方法。 混合广播加密方法包括设置初始化值,使用初始化值生成节点秘密; 使用节点秘密生成私人秘密; 发送节点秘密和私人秘密; 基于撤销的组生成广播消息; 使用分配给每个用户组的密钥加密密钥(KEK)和广播消息来加密会话密钥; 并向每个用户广播加密的会话密钥和广播消息。
-
公开(公告)号:US20060177067A1
公开(公告)日:2006-08-10
申请号:US11346194
申请日:2006-02-03
申请人: Hwan-joon Kim , Dae-youb Kim , Sung-joon Park , Weon-il Jin
发明人: Hwan-joon Kim , Dae-youb Kim , Sung-joon Park , Weon-il Jin
IPC分类号: H04L9/00
CPC分类号: H04L9/0822 , H04L9/0836 , H04L2209/601
摘要: A hybrid broadcast encryption method is provided. The hybrid broadcast encryption method includes setting initialization values, generating a node secret using the initialization values; generating a private secret using the node secret; sending the node secret and the private secret; generating a broadcast message based on a revoked group; encrypting a session key using a key encryption key (KEK) which is allocated to every user group and the broadcast message; and broadcasting to every user the encrypted session key and the broadcast message.
摘要翻译: 提供了一种混合广播加密方法。 混合广播加密方法包括设置初始化值,使用初始化值生成节点秘密; 使用节点秘密生成私人秘密; 发送节点秘密和私人秘密; 基于撤销的组生成广播消息; 使用分配给每个用户组的密钥加密密钥(KEK)和广播消息来加密会话密钥; 并向每个用户广播加密的会话密钥和广播消息。
-
公开(公告)号:US20060129805A1
公开(公告)日:2006-06-15
申请号:US11271989
申请日:2005-11-14
申请人: Dae-youb Kim , Weon-il Jin , Hwan-joon Kim , Sung-joon Park , Jung-hee Cheon , Myung-hwan Kim , Nam-su Jho , Eun-sun Yoo
发明人: Dae-youb Kim , Weon-il Jin , Hwan-joon Kim , Sung-joon Park , Jung-hee Cheon , Myung-hwan Kim , Nam-su Jho , Eun-sun Yoo
IPC分类号: H04L9/00
CPC分类号: H04N21/2585 , H04L9/0822 , H04L9/0827 , H04L9/0836 , H04L9/0869 , H04L9/0891 , H04L2209/38 , H04L2209/601 , H04L2209/606 , H04N7/162 , H04N7/1675 , H04N21/26613
摘要: A user key management method for a broadcast encryption includes assigning node path identifiers (IDs) to nodes arranged in sequence; assigning random seed value keys to the nodes according to the node path IDs; generating key values by repeatedly applying a hash function to the assigned random seed value keys; and assigning the generated key values to the nodes in sequence. Accordingly, it is possible to reduce the transmission overhead that is most important matter in the broadcast encryption to less than the number of the revoked users. Further, there is an advantage that the transmission overhead of the exemplary embodiments of the present invention is remarkably reduced compared with the Subset Difference method.
摘要翻译: 用于广播加密的用户密钥管理方法包括将节点路径标识符(ID)分配给依次排列的节点; 根据节点路径ID向节点分配随机种子值密钥; 通过重复地将哈希函数应用于所分配的随机种子值键来产生密钥值; 并将生成的密钥值依次分配给节点。 因此,可以将在广播加密中最重要的传输开销降低到小于被撤销用户的数量。 此外,与子集差分法相比,本发明的示例性实施例的传输开销明显减少。
-
-
-
-
-
-
-
-
-