METHOD AND APPARATUS FOR APPLYING RECIPIENT CRITERIA IN IDENTITY-BASED ENCRYPTION

• US 20130275756A1
• Filed: 06/10/2013
• Published: 10/17/2013
• Est. Priority Date: 02/19/2010
• Status: Active Grant

• Current Assignee: Nokia Corporation
• Original Assignee: Nokia Corporation
• Inventors: LUUKKALA, Vesa-Veikko, SOVIO, Sampo
• Granted Patent: US 9,401,810 B2
• Time in Patent Office: Days
• US Class Current: 713/168
• CPC Class Codes: H04L 2209/80 Wireless network architectures or network communication protocols for wireless network security H04W12/00
• CPC Class Codes: H04L 63/0428 wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04L 63/0442 wherein the sending and receiving network entities apply asymmetric encryption, i.e. different keys for encryption and decryption cryptographic mechanisms or cryptographic arrangements for public-key encryption H04L9/30
• CPC Class Codes: H04L 9/3073 involving pairings, e.g. identity based encryption [IBE], bilinear mappings or bilinear pairings, e.g. Weil or Tate pairing

Abstract

An approach is provided for reducing communication traffic and cost by applying recipient criteria in identity-based encryption. A recipient criterion application selects one or more recipient criteria for data, and encrypts the data using the selected one or more recipient criteria as a public key of identity-based encryption.

Claims

1. A method comprising:

selecting one or more recipient criteria for data;

formatting the selected one or more recipient criteria into a predetermined information representation format or structure; and

encrypting the data using the formatted selected one or more recipient criteria as a public key of identity-based encryption.

2. A method of claim 1,

wherein encrypting the data comprises:

constructing a reduced ordered binary decision diagram from the information representation format or structure of the one or more recipient criteria; and

using the decision diagram of the one or more recipient criteria as the public key, and

wherein the method further comprises;

causing, at least in part, storage of the decision diagram of the one or more recipient criteria.

3. A method of claim 2, further comprising:

formatting the data into the predetermined information representation format or structure;

constructing another reduced ordered binary decision diagram from the information representation format or structure of the data;

using the decision diagram of the one or more recipient criteria as the public key to encrypt the decision diagram of the data; and

causing, at least in part, publication of the encrypted decision diagram of the data.

4. A method of claim 1,

wherein encrypting the data comprises:

constructing a reduced ordered binary decision diagram from the information representation format or structure of the one or more recipient criteria;

computing a hash identifier corresponding to the decision diagram of the one or more recipient criteria; and

using the decision diagram or hash identifier of the one or more recipient criteria as the public key to encrypt the data, and

wherein the method further comprises;

causing, at least in part, storage of at least one of the decision diagram of the one or more recipient criteria and the hash identifier of the one or more recipient criteria.

5. A method of claim 4, further comprising:

formatting the data into the predetermined information representation format or structure;

constructing another reduced ordered binary decision diagram from the information representation format or structure of the data;

computing a hash identifier corresponding to the decision diagram of the data;

using the decision diagram or hash identifier of the one or more recipient criteria as the public key to encrypt the decision diagram or hash identifier of the data; and

causing, at least in part, publication of the encrypted decision diagram or hash identifier of the data.

6. A method of claim 5, further comprising:

encrypting the hash identifier of the one or more recipient criteria with a key thereby providing a keyed hash identifier of the one or more recipient criteria, and

encrypting the hash identifier of the data with a key thereby providing a keyed hash identifier of the data.

7. A method of claim 6, wherein the encrypted decision diagram, hash identifier, or keyed hash identifier of the data is published with the hash identifier or keyed hash identifier of the one or more recipient criteria that is used to encrypt the encrypted decision diagram, hash identifier, or keyed hash identifier of the data.

8. A method of claim 1, wherein the one or more recipient criteria include at least one of a user personality feature, a technical capability of a receiving device, a usage pattern of the device, an environmental condition in which the device is used, and context information associated with the device.

9. An apparatus comprising:

at least one processor; and

at least one memory including computer program code,

wherein the at least one memory and the computer program code configured to, with the at least one processor, cause the apparatus to perform at least the following;

select one or more recipient criteria for data,

format the selected one or more recipient criteria into a predetermined information representation format or structure, and

encrypt the data using the selected one or more recipient criteria as a public key of identity-based encryption.

10. An apparatus of claim 9,

wherein, when encrypting the data, the apparatus is further caused to:

construct a reduced ordered binary decision diagram from the information representation format or structure of the one or more recipient criteria, and

use the decision diagram of the one or more recipient criteria as the public key, and

wherein, the apparatus is further caused to;

cause, at least in part, storage of the decision diagram of the one or more recipient criteria.

11. An apparatus of claim 10, wherein the apparatus is further caused to:

format the data into the predetermined information representation format or structure,

construct another reduced ordered binary decision diagram from the information representation format or structure of the data,

use the decision diagram of the one or more recipient criteria as the public key to encrypt the decision diagram of the data, and

cause, at least in part, publication of the encrypted decision diagram of the data.

12. An apparatus of claim 9,

wherein, when encrypting the data, the apparatus is further caused to:

construct a reduced ordered binary decision diagram from the information representation format or structure of the one or more recipient criteria,

compute a hash identifier corresponding to the decision diagram of the one or more recipient criteria, and

use the decision diagram or hash identifier of the one or more recipient criteria as the public key to encrypt the data, and

cause, at least in part, storage of at least one of the decision diagram of the one or more recipient criteria and the hash identifier of the one or more recipient criteria.

13. An apparatus of claim 12, wherein the apparatus is further caused to:

format the data into the predetermined information representation format or structure,

construct another reduced ordered binary decision diagram from the information representation format or structure of the data,

compute a hash identifier corresponding to the decision diagram of the data,

use the decision diagram or hash identifier of the one or more recipient criteria as the public key to encrypt the decision diagram or hash identifier of the data, and

cause, at least in part, publication of the encrypted decision diagram or hash identifier of the data.

14. An apparatus of claim 13, wherein the apparatus is further caused to:

encrypt the hash identifier of the one or more recipient criteria with a key thereby providing a keyed hash identifier of the one or more recipient criteria, and

encrypt the hash identifier of the data with a key thereby providing a keyed hash identifier of the data.

15. An apparatus of claim 14, wherein the encrypted decision diagram, hash identifier, or keyed hash identifier of the data is published with the hash identifier or keyed hash identifier of the one or more recipient criteria that is used to encrypt the encrypted decision diagram, hash identifier, or keyed hash identifier of the data.

16. An apparatus of claim 9, wherein the one or more recipient criteria include at least one of a user personality feature, a technical capability of a receiving device, a usage pattern of the device, an environmental condition in which the device is used, and context information associated with the device.

17. A non-transitory computer-readable storage medium carrying one or more sequences of one or more instructions which, when executed by one or more processors, cause an apparatus to perform at least the following:

selecting one or more recipient criteria for data;

formatting the selected one or more recipient criteria into a predetermined information representation format or structure; and

encrypting the data using the formatted selected one or more recipient criteria as a public key of identity-based encryption.

18. A non-transitory computer-readable storage medium of claim 17,

wherein, when encrypting the data, the apparatus is caused to further perform:

constructing a reduced ordered binary decision diagram from the information representation format or structure of the one or more recipient criteria; and

using the decision diagram of the one or more recipient criteria as the public key, and

wherein the apparatus is caused to further perform;

causing, at least in part, storage of the decision diagram of the one or more recipient criteria.

19. A non-transitory computer-readable storage medium of claim 18, wherein the apparatus is caused to further perform:

formatting the data into the predetermined information representation format or structure;

constructing another reduced ordered binary decision diagram from the information representation format or structure of the data;

using the decision diagram of the recipient criteria as the public key to encrypt the decision diagram of the data; and

causing, at least in part, publication of the encrypted decision diagram of the data.

20. A non-transitory computer-readable storage medium of claim 17, wherein, when encrypting the data, the apparatus is caused to further perform:

constructing a reduced ordered binary decision diagram from the information representation format or structure of the one or more recipient criteria,

computing a hash identifier corresponding to the decision diagram of the one or more recipient criteria, and

using the decision diagram or hash identifier of the one or more recipient criteria as the public key to encrypt the data, and

causing, at least in part, storage of at least one of the decision diagram of the one or more recipient criteria and the hash identifier of the one or more recipient criteria.