Apparatus and method for identity-based encryption within a conventional public-key infrastructure
View Patent ↗A computer readable medium storing executable code to generate an identity-based encryption key includes executable code to specify a master key, receive an identity-based string and execute a function that processes the master key and the identity-based string to produce a seed. The seed is then used to produce an identity-based encryption key interoperable with a deployed public key cryptosystem.
1. A computer readable medium storing executable code to generate an identity-based encryption key, wherein said executable code comprises executable code to:
specify a master key;
receive an identity-based string;
execute a function that processes said master key and said identity-based string to produce a seed;
use said seed to produce an identity-based encryption key pair interoperable with a conventional public key cryptosystem;
deliver said identity-based encryption key as a public key in response to an unauthenticated request; and
respond to an authenticated request by delivering said identity-based encryption key and a private key.
2. The computer readable medium of claim 1 wherein said executable code to specify said master key includes executable code to specify said master key from a trusted central authority within a networked environment.
3. The computer readable medium of claim 1 wherein said executable code to receive said identity-based string includes executable code to normalize said identity-based string from a plurality of alias identities.
4. The computer readable medium of claim 1 wherein said executable code to receive said identity-based string includes executable code to receive said identity-based string with a temporal component.
5. The computer readable medium of claim 1 wherein said executable code to respond to said authenticated request includes executable code to deliver said identity-based encryption key and said private key via a secure network connection.
6. A computer readable medium storing executable code to generate an identity-based encryption key, wherein said executable code comprises executable code to:
produce an identity digest token that is a function of a master key and an identity-based string;
seed a random number generator with said identity digest token to produce an identity-based encryption key pair interoperable with a conventional public key cryptosystem;
deliver said identity-based encryption key as a public key in response to an unauthenticated request; and
respond to an authenticated request by delivering said identity-based encryption key and a private key.
7. The computer readable medium of claim 6 wherein said executable code includes executable code to specify a master key from a trusted central authority within a networked environment.
8. The computer readable medium of claim 6 wherein said executable code includes executable code to normalize said identity-based string from a plurality of alias identities.
9. The computer readable medium of claim 6 wherein said executable code includes executable code to receive said identity-based string with a temporal component.
10. The computer readable medium of claim 6 wherein said executable code to respond to said authenticated request includes executable code to deliver said identity-based encryption key and said private key via a secure network connection.