Systems and methods for identity-based encryption and related cryptographic techniques

• US 20100208895A1
• Filed: 10/28/2009
• Published: 08/19/2010
• Est. Priority Date: 08/13/2001
• Status: Active Grant

• Current Assignee: Board of Trustees of the Leland Stanford Junior University (Stanford Management Co.), University of California Davis (University of California)
• Original Assignee: Board of Trustees of the Leland Stanford Junior University (Stanford Management Co.), University of California Davis (University of California)
• Inventors: Franklin, Matthew, Boneh, Dan
• Granted Patent: US 8,130,964 B2
• Time in Patent Office: Days
• US Class Current: 380/278
• CPC Class Codes: H04L 2209/04 Masking or blinding
• CPC Class Codes: H04L 9/0847 involving identity based encryption [IBE] schemes
• CPC Class Codes: H04L 9/3073 involving pairings, e.g. identity based encryption [IBE], bilinear mappings or bilinear pairings, e.g. Weil or Tate pairing

Abstract

A method and system for encrypting a first piece of information M to be sent by a sender [100] to a receiver [110] allows both sender and receiver to compute a secret message key using identity-based information and a bilinear map. In a one embodiment, the sender [100] computes an identity-based encryption key from an identifier ID associated with the receiver [110]. The identifier ID may include various types of information such as the receiver'"'"'s e-mail address, a receiver credential, a message identifier, or a date. The sender uses a bilinear map and the encryption key to compute a secret message key g_ID^r, which is then used to encrypt a message M, producing ciphertext V to be sent from the sender [100] to the receiver [110] together with an element rP. An identity-based decryption key d_ID is computed by a private key generator [120] based on the ID associated with the receiver and a secret master key s. After obtaining the private decryption key from the key generator [120], the receiver [110] uses it together with the element rP and the bilinear map to compute the secret message key g_ID^r, which is then used to decrypt V and recover the original message M. According to one embodiment, the bilinear map is based on a Weil pairing or a Tate pairing defined on a subgroup of an elliptic curve. Also described are several applications of the techniques, including key revocation, credential management, and return receipt notification.

Claims

1. A method, comprising:

with computing equipment, encrypting data using a public key that is formed using a time element, wherein encrypting the data comprises encrypting the data using cryptographic system parameters and wherein encrypting the data comprises encrypting the data using a bilinear map.

2. The method defined in claim 1 further comprising:

decrypting the encrypted data using a private key that corresponds to the public key.

3. The method defined in claim 2 further comprising forming the public key using the time element, wherein the time element includes a date and wherein forming the public key comprises using the date in forming the public key.

4. The method defined in claim 1 further comprising forming the public key using the time element, wherein the time element includes a future date and wherein forming the public key comprises forming the public key using the future date.

5. The method defined in claim 1 further comprising:

obtaining a private key from a private key generator that corresponds to the public key; and

decrypting the encrypted data using the private key.

6. A method, comprising:

with computing equipment, encrypting data using a public key that is formed using a credential associated with a user, wherein encrypting the data comprises encrypting the data using cryptographic system parameters and wherein encrypting the data comprises encrypting the data using a bilinear map.

7. The method defined in claim 6 further comprising:

decrypting the encrypted data using a private key that corresponds to the public key.

8. The method defined in claim 6 wherein the user has identifying information, the method further comprising forming the public key using the credential and using the identifying information of the user.

9. The method defined in claim 6 further comprising:

obtaining a private key that corresponds to the public key from a private key generator; and

decrypting the encrypted data using the private key.

10. The method defined in claim 9 further comprising:

at the private key generator, determining whether the user has the credential; and

if the private key generator determines that the receiver has the credential, providing the private key over a communications network.

11. The method defined in claim 6 further comprising:

determining whether the user has the credential; and

if it is determined that the user has the credential, providing the private key.

12. The method defined in claim 6 wherein the user has an identity, the method further comprising:

at a private key generator, receiving a request for the private key from the user that includes information related to the credential and that includes the identity of the user;

at the private key generator, verifying that the credential belongs to the user; and

if the credential is verified as belonging to the user, providing the requested private key to the user from the private key generator.

13. The method defined in claim 6 wherein the user has an identity, the method further comprising:

receiving a request for the private key from the user that includes information related to the credential and that includes the identity of the user;

in response to receiving the request, verifying that the credential belongs to the user; and

if the credential is verified as belonging to the user, providing the requested private key to the user.

14. The method defined in claim 6 wherein the credential includes a security clearance, the method further comprising forming the public key using the security clearance.

15. The method defined in claim 6 wherein the user has identifying information, the method further comprising forming the public key using the identifying information of the user and a time element.

16. The method defined in claim 6 further comprising:

at a private key generator, determining whether the user has the credential; and

if the private key generator determines that the user has the credential, providing the private key over a communications network.

17. A method comprising:

with computing equipment, performing cryptographic operations using a public key that is based on a credential associated with a party, wherein performing the cryptographic operations comprises using a bilinear map.

18. The method defined in claim 17 further comprising:

performing cryptographic operations using a private key corresponding to the public key.

19. The method defined in claim 18 further comprising:

forming the public key using the credential of the party.

20. The method defined in claim 19 further comprising:

obtaining a private key corresponding to the public key from a private key generator over a communications network.