System and method for computing an escrow session key and a private session key for encoding digital communications between two devices

Patent metadata

Field	Value
Publication number	US-11265161-B2
Application number	US-202016988347-A
Country	US
Kind code	B2
Filing date	Aug 7, 2020
Priority date	Feb 8, 2018
Publication date	Mar 1, 2022
Grant date	Mar 1, 2022

Abstract

This document describes a system and method for generating two types of session keys for encoding digital communications between two devices. In particular, the first type of session key possesses escrow properties whereby a trusted third party will be able to generate the first type of session key to decode the digital communications between the two devices while the second type of session key does not possess escrow properties.

First claim

What is claimed is:

1. A system for generating an escrow session key SK 1 and a private session key SK 2 for encoding digital communications, the system comprising:
a secure server;
a device i; and
another device j;
wherein the secure server is configured to generate a master secret key (MSK) and global system parameters (GSP) for an Identity Based Cryptography (IBC) scheme, wherein the MSK and GSP are utilized together with an identity of a requesting device to generate an IBC private key IBC-K for the requesting device;
wherein the device i is configured to:
encrypt a first element g a with an identity ID j associated with the another device j using an Identity Based Encryption (IBE) scheme associated with the IBC scheme to generate an encrypted first element g a , wherein “g” is a generator of a cyclic multiplicative group G and “a” is a random number generated by the device i; and
communicate, to the another device j, a communication comprising the encrypted first element g a , an identity ID i associated with the device i, and a session key request;
wherein upon receiving the communication from the device i, the another device j is configured to:
use the IBE scheme to decrypt the encrypted first element g a with an IBC private key IBC-K j , wherein the IBC private key IBC-K j is requested and obtained by the another device j from the secure server; and
generate a second element g b , wherein “g” is the generator of the cyclic multiplicative group G and “b” is a random number generated by the another device j;
compute the escrow session key SK 1 using the first element g a ;
compute the private session key SK 2 using the first element g a and the random number b; and
communicate the second element g b and the identity ID j associated with the another device j to the device i;
wherein the device i is further configured to:
compute the escrow session key SK 1 using the first element;
compute the private session key SK 2 using the second element g b and the random number a;
compute a first combined key SK 11 by obtaining a coproduct of the escrow session key SK 1 and the private session key SK 2 ;
generate a key confirmation value using the first combined key SK 11 ; and
communicate the key confirmation value to the another device j; and
wherein upon receiving the key confirmation value from the device i, the another device j is configured to:
compute a second combined key SK 22 by obtaining a coproduct of the escrow session key SK 1 and the private session key SK 2 ;
verify the key confirmation value using the second combined key SK 22 ; and
validate the escrow session key SK 1 and the private session key SK 2 in response to the key confirmation value being is verified.

2. The system according to claim 1 , wherein the another device j being configured to communicate the second element g b and the identity ID j associated with the another device j to the device i comprises:
using the IBE scheme to encrypt the second element g b with an identity ID i associated with the device i to generate an encrypted second element g b ; and
communicating the encrypted second element g b and the identity ID j associated with the another device j to the device i;
wherein upon receiving the encrypted second element g b and the identity ID j associated with the another device j from the another device j, the device i is configured to:
use the IBE scheme to decrypt the encrypted second element g b with an IBC private key IBC-K i , wherein the IBC private key IBC-K i is requested and obtained by the device i from the secure server.

3. The system according to claim 1 ,
wherein computing the escrow session key SK 1 by the another device j comprises: using the first element g a and the second element g b to generate the escrow session key SK 1 ; and
wherein computing the escrow session key SK 1 by the device i comprises: using the first element g a and the second element g b to generate the escrow session key SK 1 .

4. The system according to claim 1 , wherein the another device j communicating the second element g b and the identity ID associated with the another device j to the device i comprises:
using a Public Key Infrastructure (PKI) scheme to encrypt the second element g b with a PKI Public Key PBK i associated with the device i to generate an encrypted second element g b ; and
communicating the encrypted second element g b and the identity ID j associated with the another device j to the device i;
wherein upon receiving the encrypted second element g b and the identity ID j associated with the another device j, the device i is configured to:
use the PKI scheme to decrypt the encrypted second element g b with a PKI Private Key PRK i associated with the device i.

5. The system according to claim 1 , wherein communicating by the device i the encrypted first element g a , the identity ID i associated with the device i, and the session key request to the another device j comprises:
signing the encrypted first element g a using an IBC private signing key IBC-K i associated with the device i to generate a signed encrypted first element g a ; and
transmitting the signed encrypted first element g a to the another device j;
wherein upon receiving the signed encrypted first element g a , the another device j is configured to:
verify the signed encrypted first element g a using the identity ID i associated with the device i and a verification function associated with the IBC scheme, wherein the first element g a is decrypted in response to the signed encrypted first element g a being verified.

6. A device i for generating an escrow session key SK 1 and a private session key SK 2 for encoding digital communications between the device i and another device j, comprising:
a processor; and
a non-transitory media readable by the processor, the non-transitory media storing instructions that when executed by the processor, cause the processor to:
use an Identity Based Encryption (IBE) scheme associated with an Identity Based Cryptography (IBC) scheme to encrypt a first element g a with an identity ID j associated with the another device j to generate an encrypted first element g a , wherein “g” is a generator of a cyclic multiplicative group G and “a” is a random number generated by the device i, wherein the IBC scheme comprises a master secret key (MSK) and global system parameters (GSP), and wherein the MSK and GSP are utilized together with an identity of a requesting device to generate an IBC private key IBC-K for the requesting device;
communicate, to the another device j, the encrypted first element g a , an identity ID i associated with the device i, and a session key request;
receive, from the another device j, a second element g b and the identity ID j associated with the another device j;
compute the escrow session key SK 1 using the first element g a ;
compute the private session key SK 2 using the second element g b and the random number a, wherein “g” is the generator of the cyclic multiplicative group G and “b” is a random number generated by the another device j;
compute a first combined key SK 11 by obtaining a coproduct of the escrow session key SK 1 and the private session key SK 2 ;
generate a key confirmation value using the first combined key SK 11 , wherein the key confirmation value is communicated to the another device j; and
validate the key confirmation value in response to a key confirmation validation value associated with the another device j being received.

7. The device according to claim 6 , wherein the second element g b is encrypted using the IBE scheme and the identity ID i associated with the device i to generate an encrypted second element g b ,

Assignees

• Huawei Int Pte Ltd

Inventors

• Yasmin Rehana
• Yang Yanjiang
• Wei Zhuo
• Li Tieyan
• Yu Hai

Classifications

• H04L9/0847

  involving identity based encryption [IBE] schemes · CPC title

• G06Q30/0185

  Product, service or business identity fraud · CPC title

• H04L9/0841 Primary

  involving Diffie-Hellman or related key agreement protocols · CPC title

• H04L9/3242

  involving keyed hash functions, e.g. message authentication codes [MACs], CBC-MAC or HMAC · CPC title

• H04L9/0866

  involving user or device identifiers, e.g. serial number, physical or biometrical information, DNA, hand-signature or measurable physical characteristics · CPC title