Method and apparatus for generating an identifier-based public/private key pair
AssigneeHewlett-Packard Development Company, L.P.
InventorsLiqun Chen, Keith Harrison
Life of this patent
Estimating the term…
Abstract
An identifier-based public/private key pair is generated for a first party with the involvement of a trusted authority that has an associated secret. An identifier of the first party is signed by the trusted party to produce a multi-component signature. This signature is converted into the first-party identifier-based key pair; the private key of this key pair comprises a component of the signature provided confidentially to the first party, and the public key being formed using at least another component of the signature and the first-party identifier. The signature used by the trusted authority is, for example, a Schnorr signature or a DSA signature.
Claims23
A method of generating an identifier-based public/private key pair for a first party, comprising:
- providing an identifier of the first party for use by a first trusted entity that has associated public values g, p, q, y and secret x where:
- p and q are large primes satisfying q|p−1;
- g is an integer such that gq=1 mod p;
- x is an integer such that 1<x<q;
- and
- y=gx mod p;
- the first trusted entity using its secret x to compute a multi-component signature over the first-party identifier;
- and
- converting the signature into the first-party identifier-based key pair, the private key of this key pair comprising a first component of the signature provided as a secret to the first party, and the public key being formed using at least another component of the signature and said identifier.
Apparatus for of generating an identifier-based public/private key pair for a first party, comprising:
- a first computing arrangement associated with a trusted authority that has associated public values g, p, q, y and secret x where:
- p and q are large primes satisfying q|p−1;
- g is an integer such that gq=1 mod p;
- x is an integer such that 1<x<q;
- and
- y=gx mod p;
- the first computing arrangement being arranged to use the secret x to compute a multi-component signature over an identifier of a first party;
- and
- a second computing arrangement arranged to convert the signature into the first-party identifier-based key pair, the private key of this key pair comprising a first component of the signature provided as a secret to the first party, and the public key being formed using at least another component of the signature and said identifier.
A method of generating an identifier-based public/private key pair for a first party, comprising:
- providing an identifier of the first party for use by a first trusted entity that has a secret the first trusted entity using its secret to compute a multi-component signature, based on discrete logarithms, over the first-party identifier;
- and
- converting the signature into the first-party identifier-based key pair, the private key of this key pair comprising a first component of the signature provided confidentially to the first party, and the public key being formed using at least another component of the signature and said identifier.
Dependencies are inferred from the claim text.