Method and apparatus for applying recipient criteria in identity-based encryption

• US 8,488,783 B2
• Filed: 02/19/2010
• Issued: 07/16/2013
• Est. Priority Date: 02/19/2010
• Status: Active Grant

• Current Assignee: Nokia Technologies Oy (Nokia Corporation)
• Original Assignee: Nokia Corporation
• Inventors: Sovio, Sampo, Luukkala, Vesa-Veikko
• Primary Examiner(s): Kim, Jung
• Assistant Examiner(s): LEUNG, ROBERT B
• Application Number:
  US12/708,778
• Publication Number:
  US 20110206200A1
• Time in Patent Office: 1,243 Days
• Field of Search: None
• US Class Current: 380/44
• CPC Class Codes: H04L 2209/80 Wireless network architectures or network communication protocols for wireless network security H04W12/00
• CPC Class Codes: H04L 63/0428 wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04L 63/0442 wherein the sending and receiving network entities apply asymmetric encryption, i.e. different keys for encryption and decryption cryptographic mechanisms or cryptographic arrangements for public-key encryption H04L9/30
• CPC Class Codes: H04L 9/3073 involving pairings, e.g. identity based encryption [IBE], bilinear mappings or bilinear pairings, e.g. Weil or Tate pairing

Abstract

An approach is provided for reducing communication traffic and cost by applying recipient criteria in identity-based encryption. A recipient criterion application selects one or more recipient criteria for data, and encrypts the data using the selected one or more recipient criteria as a public key of identity-based encryption.

Claims

1. A method comprising:

selecting one or more recipient criteria for data;

encrypting, via a processing device, the data using the selected one or more recipient criteria as a public key of identity-based encryption;

formatting, via the processing device, the selected one or more recipient criteria into a predetermined information representation format or structure;

constructing, via the processing device, a reduced ordered binary decision diagram from the information representation format or structure of the recipient criteria, thereby encrypting the data using the decision diagram of the recipient criteria as the public key; and

causing, at least in part, storage of the decision diagram of the recipient criteria.

2. A method of claim 1, further comprising:

formatting the data into the predetermined information representation format or structure;

constructing another reduced ordered binary decision diagram from the information representation format or structure of the data, thereby encrypting the decision diagram of the data using the decision diagram of the recipient criteria as the public key; and

causing, at least in part, publication of the encrypted decision diagram of the data.

7. A method of claim 1, wherein the one or more recipient criteria include at least one of a user personality feature, a technical capability of a receiving device, a usage pattern of the device, an environmental condition in which the device is used, and context information associated with the device.

3. A method comprising:

selecting one or more recipient criteria for data;

encrypting, via a processing device, the data using the selected one or more recipient criteria as a public key of identity-based encryption;

formatting, via the processing device, the selected one or more recipient criteria into a predetermined information representation format or structure;

constructing, via the processing device, a reduced ordered binary decision diagram from the information representation format or structure of the recipient criteria;

computing, via the processing device, a hash identifier corresponding to the decision diagram of the recipient criteria, thereby encrypting the data using the decision diagram or hash identifier of the recipient criteria as the public key; and

causing, at least in part, storage of the decision diagram of the recipient criteria and the hash identifier of recipient criteria.

4. A method of claim 3, further comprising:

formatting the data into a predetermined information representation format or structure;

constructing another reduced ordered binary decision diagram from the information representation format or structure of the data;

computing a hash identifier corresponding to the decision diagram of the data, thereby encrypting the decision diagram or hash identifier of the data using the decision diagram or hash identifier of the recipient criteria as the public key; and

causing, at least in part, publication of the encrypted decision diagram or hash identifier of the data.

5. A method of claim 4, further comprising:

encrypting the hash identifier of the recipient criteria with a key thereby providing a keyed hash identifier of the recipient criteria, and

encrypting the hash identifier of the data with a key thereby providing a keyed hash identifier of the data.

6. A method of claim 5, wherein the encrypted decision diagram, hash identifier, or keyed hash identifier of the data is published with the hash identifier or keyed hash identifier of the recipient criteria that is used to encrypt the encrypted decision diagram, hash identifier, or keyed hash identifier of the data.

8. An apparatus comprising:

at least one processor; and

at least one memory including computer program code,

wherein the at least one memory and the computer program code configured to, with the at least one processor, cause the apparatus to perform at least the following;

select one or more recipient criteria for data,

encrypt the data using the selected one or more recipient criteria as a public key of identity-based encryption,

format the selected one or more recipient criteria into a predetermined information representation format or structure;

construct a reduced ordered binary decision diagram from the information representation format or structure of the recipient criteria, thereby encrypting the data using the decision diagram of the recipient criteria as the public key; and

cause, at least in part, storage of the decision diagram of the recipient criteria.

9. An apparatus of claim 8, wherein the apparatus is further caused to:

format the data into the predetermined information representation format or structure,

construct another reduced ordered binary decision diagram from the information representation format or structure of the data, thereby encrypting the decision diagram of the data using the decision diagram of the recipient criteria as the public key, and

cause, at least in part, publication of the encrypted decision diagram of the data.

14. An apparatus of claim 8, wherein the one or more recipient criteria include at least one of a user personality feature, a technical capability of a receiving device, a usage pattern of the device, an environmental condition in which the device is used, and context information associated with the device.

10. An apparatus comprising:

at least one processor; and

at least one memory including computer program code,

wherein the at least one memory and the computer program code configured to, with the at least one processor, cause the apparatus to perform at least the following;

select one or more recipient criteria for data,

encrypt the data using the selected one or more recipient criteria as a public key of identity-based encryption,

format the selected one or more recipient criteria into a predetermined information representation format or structure;

construct a reduced ordered binary decision diagram from the information representation format or structure of the recipient criteria,

compute a hash identifier corresponding to the decision diagram of the recipient criteria, thereby encrypting the data using the decision diagram or hash identifier of the recipient criteria as the public key; and

cause, at least in part, storage of the decision diagram of the recipient criteria and the hash identifier of recipient criteria.

11. An apparatus of claim 10, wherein the apparatus is further caused to:

format the data into the predetermined information representation format or structure,

construct another reduced ordered binary decision diagram from the information representation format or structure of the data,

compute a hash identifier corresponding to the decision diagram of the data, thereby encrypting the decision diagram or hash identifier of the data using the decision diagram or hash identifier of the recipient criteria as the public key, and

cause, at least in part, publication of the encrypted decision diagram or hash identifier of the data.

12. An apparatus of claim 11, wherein the apparatus is further caused to:

encrypt the hash identifier of the recipient criteria with a key thereby providing a keyed hash identifier of the recipient criteria, and

encrypt the hash identifier of the data with a key thereby providing a keyed hash identifier of the data.

13. An apparatus of claim 12, wherein the encrypted decision diagram, hash identifier, or keyed hash identifier of the data is published with the hash identifier or keyed hash identifier of the recipient criteria that is used to encrypt the encrypted decision diagram, hash identifier, or keyed hash identifier of the data.

15. A non-transitory computer-readable storage medium carrying one or more sequences of one or more instructions which, when executed by one or more processors, cause an apparatus to perform at least the following:

selecting one or more recipient criteria for data; and

encrypting the data using the selected one or more recipient criteria as a public key of identity-based encryption;

formatting the selected one or more recipient criteria into a predetermined information representation format or structure;

constructing a reduced ordered binary decision diagram from the information representation format or structure of the recipient criteria, thereby encrypting the data using the decision diagram of the recipient criteria as the public key; and

causing, at least in part, storage of the decision diagram of the recipient criteria.

16. A non-transitory computer-readable storage medium of claim 15, wherein the apparatus is caused to further perform:

formatting the data into the predetermined information representation format or structure;

constructing another reduced ordered binary decision diagram from the information representation format or structure of the data, thereby encrypting the decision diagram of the data using the decision diagram of the recipient criteria as the public key; and

causing, at least in part, publication of the encrypted decision diagram of the data.

17. A non-transitory computer-readable storage medium carrying one or more sequences of one or more instructions which, when executed by one or more processors, cause an apparatus to perform at least the following:

selecting one or more recipient criteria for data;

encrypting the data using the selected one or more recipient criteria as a public key of identity-based encryption;

formatting the selected one or more recipient criteria into a predetermined information representation format or structure;

constructing a reduced ordered binary decision diagram from the information representation format or structure of the recipient criteria;

computing a hash identifier corresponding to the decision diagram of the recipient criteria, thereby encrypting the data using the decision diagram or hash identifier of the recipient criteria as the public key; and

causing, at least in part, storage of the decision diagram of the recipient criteria.