Method and apparatus for applying recipient criteria in identity-based encryption

• US 9,401,810 B2
• Filed: 06/10/2013
• Issued: 07/26/2016
• Est. Priority Date: 02/19/2010
• Status: Active Grant

• Current Assignee: Nokia Technologies Oy (Nokia Corporation)
• Original Assignee: Nokia Technologies Oy (Nokia Corporation)
• Inventors: Sovio, Sampo, Luukkala, Vesa-Veikko
• Primary Examiner(s): LEUNG, ROBERT B
• Application Number:
  US13/914,083
• Publication Number:
  US 20130275756A1
• Time in Patent Office: 1,142 Days
• US Class Current: 1/1
• CPC Class Codes: H04L 2209/80 Wireless network architectures or network communication protocols for wireless network security H04W12/00
• CPC Class Codes: H04L 63/0428 wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04L 63/0442 wherein the sending and receiving network entities apply asymmetric encryption, i.e. different keys for encryption and decryption cryptographic mechanisms or cryptographic arrangements for public-key encryption H04L9/30
• CPC Class Codes: H04L 9/3073 involving pairings, e.g. identity based encryption [IBE], bilinear mappings or bilinear pairings, e.g. Weil or Tate pairing

Abstract

An approach is provided for reducing communication traffic and cost by applying recipient criteria in identity-based encryption. A recipient criterion application selects one or more recipient criteria for data, and encrypts the data using the selected one or more recipient criteria as a public key of identity-based encryption.

Claims

1. A method comprising:

selecting, by an apparatus of an information sender, one or more recipient criteria for data, wherein the one or more recipient criteria include at least one user feature other than a user location;

formatting, by the apparatus, the selected one or more recipient criteria into a predetermined information representation format or structure;

encrypting, by the apparatus, the data using the formatted one or more recipient criteria as a public key of identity-based encryption;

causing, at least in part by the apparatus, a publication of the encrypted data as being publicly available; and

causing, at least in part by the apparatus, a transmission of a decryption key for the encrypted data via a network only to a requester for the encrypted data who satisfies the one or more recipient criteria,

wherein recipient identification remains unknown to the information sender.

2. A method of claim 1, wherein the data is encrypted by:

constructing a reduced ordered binary decision diagram from the information representation format or structure of the one or more recipient criteria; and

using the decision diagram of the one or more recipient criteria as the public key, and the method further comprising;

causing, at least in part, storage of the decision diagram of the one or more recipient criteria,

wherein the recipient identification includes recipient identifiers and recipient addresses, and

wherein the encrypted data is made publicly available at a semantic web, a cloud, or a combination thereof.

3. A method of claim 2, further comprising:

formatting the data into the predetermined information representation format or structure;

constructing another reduced ordered binary decision diagram from the information representation format or structure of the data;

using the decision diagram of the one or more recipient criteria as the public key to encrypt the decision diagram of the data; and

causing, at least in part, publication of the encrypted decision diagram of the data

wherein the encrypted data is made publicly available at one or more information databases, or one or more information stores, or a combination thereof.

4. A method of claim 1, wherein the data is encrypted by:

constructing a reduced ordered binary decision diagram from the information representation format or structure of the one or more recipient criteria;

computing a hash identifier corresponding to the decision diagram of the one or more recipient criteria; and

using the decision diagram or hash identifier of the one or more recipient criteria as the public key to encrypt the data, and the method further comprising;

causing, at least in part, storage of at least one of the decision diagram of the one or more recipient criteria and the hash identifier of the one or more recipient criteria.

5. A method of claim 4, further comprising:

formatting the data into the predetermined information representation format or structure;

constructing another reduced ordered binary decision diagram from the information representation format or structure of the data;

computing a hash identifier corresponding to the decision diagram of the data;

using the decision diagram or hash identifier of the one or more recipient criteria as the public key to encrypt the decision diagram or hash identifier of the data; and

causing, at least in part, publication of the encrypted decision diagram or hash identifier of the data.

6. A method of claim 5, further comprising:

encrypting the hash identifier of the one or more recipient criteria with a key thereby providing a keyed hash identifier of the one or more recipient criteria, and

encrypting the hash identifier of the data with a key thereby providing a keyed hash identifier of the data.

7. A method of claim 6, wherein the encrypted decision diagram, hash identifier, or keyed hash identifier of the data is published with the hash identifier or keyed hash identifier of the one or more recipient criteria that is used to encrypt the encrypted decision diagram, hash identifier, or keyed hash identifier of the data.

8. A method of claim 1, further comprising:

in response to a request from the requester, causing, at least in part by the apparatus, a calculation of the decryption key based upon the one or more recipient criteria,

wherein the one or more recipient criteria include a technical capability of a receiving device, a usage pattern of the device, an environmental condition in which the device is used other than a device location, and context information associated with the device other than the device location,

wherein the at least one user feature includes one or more personal interests, one or more media preferences, or a combination thereof.

9. An apparatus comprising:

at least one processor; and

at least one memory including computer program code,

wherein the at least one memory and the computer program code configured to, with the at least one processor, cause the apparatus of an information sender to perform at least the following;

select one or more recipient criteria for data, wherein the one or more recipient criteria include at least one user feature other than a user location,

format the selected one or more recipient criteria into a predetermined information representation format or structure,

encrypt the data using the formatted one or more recipient criteria as a public key of identity-based encryption;

cause, at least in part, a publication of the encrypted data as being publicly available; and

cause, at least in part, a transmission of a decryption key for the encrypted data via a network only to a requester for the encrypted data who satisfies the one or more recipient criteria,

wherein recipient identification remains unknown to the information sender.

10. An apparatus of claim 9,

wherein, when encrypting the data, the apparatus is further caused to:

construct a reduced ordered binary decision diagram from the information representation format or structure of the one or more recipient criteria, and

use the decision diagram of the one or more recipient criteria as the public key, and

wherein, the apparatus is further caused to;

cause, at least in part, storage of the decision diagram of the one or more recipient criteria.

11. An apparatus of claim 10, wherein the apparatus is further caused to:

format the data into the predetermined information representation format or structure,

construct another reduced ordered binary decision diagram from the information representation format or structure of the data,

use the decision diagram of the one or more recipient criteria as the public key to encrypt the decision diagram of the data, and

cause, at least in part, publication of the encrypted decision diagram of the data.

12. An apparatus of claim 9,

wherein, when encrypting the data, the apparatus is further caused to:

construct a reduced ordered binary decision diagram from the information representation format or structure of the one or more recipient criteria,

compute a hash identifier corresponding to the decision diagram of the one or more recipient criteria, and

use the decision diagram or hash identifier of the one or more recipient criteria as the public key to encrypt the data, and

cause, at least in part, storage of at least one of the decision diagram of the one or more recipient criteria and the hash identifier of the one or more recipient criteria.

13. An apparatus of claim 12, wherein the apparatus is further caused to:

format the data into the predetermined information representation format or structure,

construct another reduced ordered binary decision diagram from the information representation format or structure of the data,

compute a hash identifier corresponding to the decision diagram of the data,

use the decision diagram or hash identifier of the one or more recipient criteria as the public key to encrypt the decision diagram or hash identifier of the data, and

cause, at least in part, publication of the encrypted decision diagram or hash identifier of the data.

14. An apparatus of claim 13, wherein the apparatus is further caused to:

encrypt the hash identifier of the one or more recipient criteria with a key thereby providing a keyed hash identifier of the one or more recipient criteria, and

encrypt the hash identifier of the data with a key thereby providing a keyed hash identifier of the data.

15. An apparatus of claim 14, wherein the encrypted decision diagram, hash identifier, or keyed hash identifier of the data is published with the hash identifier or keyed hash identifier of the one or more recipient criteria that is used to encrypt the encrypted decision diagram, hash identifier, or keyed hash identifier of the data.

16. An apparatus of claim 9, wherein the one or more recipient criteria include at least one of a user feature, a technical capability of a receiving device, a usage pattern of the device, an environmental condition in which the device is used, and context information associated with the device.

17. A non-transitory computer-readable storage medium carrying one or more sequences of one or more instructions which, when executed by one or more processors, cause an apparatus of an information sender to perform at least the following:

selecting one or more recipient criteria for data, wherein the one or more recipient criteria include at least one user feature other than a user location;

formatting the selected one or more recipient criteria into a predetermined information representation format or structure;

encrypting the data using the formatted selected one or more recipient criteria as a public key of identity-based encryption;

causing, at least in part, a publication of the encrypted data as being publicly available; and

causing, at least in part, a transmission of a decryption key for the encrypted data via a network only to a requester for the encrypted data who satisfies the one or more recipient criteria,

wherein recipient identification remains unknown to the information sender.

18. A non-transitory computer-readable storage medium of claim 17,

wherein, when encrypting the data, the apparatus is caused to further perform:

constructing a reduced ordered binary decision diagram from the information representation format or structure of the one or more recipient criteria; and

using the decision diagram of the one or more recipient criteria as the public key, and

wherein the apparatus is caused to further perform;

causing, at least in part, storage of the decision diagram of the one or more recipient criteria.

19. A non-transitory computer-readable storage medium of claim 18, wherein the apparatus is caused to further perform:

formatting the data into the predetermined information representation format or structure;

constructing another reduced ordered binary decision diagram from the information representation format or structure of the data;

using the decision diagram of the recipient criteria as the public key to encrypt the decision diagram of the data; and

causing, at least in part, publication of the encrypted decision diagram of the data.

20. A non-transitory computer-readable storage medium of claim 17, wherein, when encrypting the data, the apparatus is caused to further perform:

constructing a reduced ordered binary decision diagram from the information representation format or structure of the one or more recipient criteria,

computing a hash identifier corresponding to the decision diagram of the one or more recipient criteria, and

using the decision diagram or hash identifier of the one or more recipient criteria as the public key to encrypt the data, and

causing, at least in part, storage of at least one of the decision diagram of the one or more recipient criteria and the hash identifier of the one or more recipient criteria.