IBE公钥加密系统的用户私钥分发方案

为了解决基于身份的加密方案(IBE)中的用户身份认证和私钥分发问题，使用公钥证书的概念，提出了一种新的身份认证和私钥分发方案．该方案使用一个可信第三方实现信任转移，增添一个用户公钥用于建立私钥传输的安全信道．新方案不仅大大减少了认证的次数，而且解决了原方案及相关应用都不曾处理的用户私钥安全分发问题．基于IBE，文中还提出了一种加密方案，该方案有一个公钥和两个私钥，两个私钥都可用于解密，其中一个托管到可信第三方，另一个用作不可拒认数字签名．

Private key distribution scheme of ID-based encryption

To solve the problems of authenticating the user's identity and distributing the user's private keys in the identity-based encryption(IBE) system, a new scheme for both identity authentication and private key distribution is proposed as a reinforcement for IBE by smartly using the concept of public-key certificate. A trusted third party is employed to transfer trust, and an additional public key is used to set up the secure channel for transmitting the private key. Not only is the number of authentications needed decreased significantly, but the private key distribution problem which had never been dealt with in the original scheme and relating applications is addressed in the new scheme. Based on IBE, we also propose an encryption scheme which has one public key with two corresponding private keys. Both of the private keys can be used for decryption, one of which is escrowed to a trusted third party, the other for non-repudiation signature.