一种消除基于配对的ID加密中密钥托管问题的方法
An Approach to Remove Key Escrow Problem in ID-Based Encryption From Pairing
AI总结：
本文提出一种民主的基于身份加密模型，通过将用户部分密钥分别托管于PKG和PKPO两个实体，在保障政府监控非法消息能力的同时保护用户合法消息隐私，从而解决密钥托管问题。
摘要：
密钥托管是指将加密密钥的副本存储在可信第三方（通常是政府机构或其他组织）处。密钥托管旨在确保执法机构在必要时能够访问加密数据，例如在刑事调查或国家安全事务中。然而，密钥托管也引发了对隐私和安全的担忧。如果可信第三方遭到破坏，存储的密钥可能会被泄露，未授权方可能访问敏感信息。这可能导致严重的隐私泄露，并可能损害国家安全。在基于身份的密码学中，密钥托管问题之所以出现，是因为可信第三方——私钥生成器（PKG）——为所有用户生成私钥。这意味着PKG对私钥拥有完全的控制权，这引发了对用户安全和隐私的担忧。为了平衡安全和隐私方面的关切，已经提出了一些方法来解决密钥托管问题。我们提出一种高效的民主基于身份的加密模型，在确保安全和隐私的同时，平衡政府和用户的权利。所提方案的关键目标是为政府提供监控非法消息的权力，同时确保用户合法消息的隐私。为了实现这一目标，该方案涉及两个实体：PKG和PKPO。用户的部分密钥托管在PKG处，而另一部分密钥存储在PKPO处。后者通过混淆用户的签名来为用户提供隐私服务，只有用户凭借其个人信息才能解锁该签名。
英文摘要：
Key escrow refers to storing a copy of a cryptographic key with a trusted third party, typically a government agency or some other organization. Key escrow aims to ensure that law enforcement agencies can access encrypted data when necessary, for example, in criminal investigations or national security matters. However, key escrow also raises concerns about privacy and security. If the trusted third party is compromised, the stored keys could be exposed, and unauthorized parties could access sensitive information. This could result in a significant breach of privacy and potentially harm national security. In identity-based cryptography, the key escrow problem arises because a trusted third party, the Private Key Generator (PKG), generates the private keys for all users. This means that the PKG has complete control over the private keys, which raises concerns about the security and privacy of the users. To balance security and privacy concerns, some approaches have been proposed to address the key escrow problem. We propose an efficient democratic identity-based encryption model that balances the government's and users' rights while ensuring security and privacy. The key objective of the proposed scheme is to provide the government with authority to monitor unlawful messages while ensuring the user's privacy for their lawful messages. To achieve this, the scheme involves two entities: PKG and PKPO. The user's partial key is escrowed at PKG, while the partial key is stored at PKPO. The latter provides a privacy service to the user by confusing their signature, which the user with their personal information can only unlock.
机构、总结、中文摘要均由AI分析而来，可能存在错误，请以论文正文为准。
