Invention Grant
US07865742B2 Method, apparatus, and program product for enabling access to flexibly redacted content 有权
方法,装置和程序产品,用于访问灵活编辑的内容

Method, apparatus, and program product for enabling access to flexibly redacted content
Abstract:
A capability key is generated that provides access to sensitive information within a selectively encrypted data unit created from an unencrypted data unit. A user specifies access rights as a monotone boolean relationship between a selection of a list of attributes related to the unencrypted data unit. This relationship is used to compute a key descriptor. Next one or more shares of a master secret is generated responsive to the monotone boolean relationship and a random number. Next a unique capability key is computed from one or more cryptosystem parameters, the one or more shares and the random number. The unique capability key and the key descriptor together enable decryption of sensitive information within a selectively encrypted data unit created from an unencrypted data unit. Finally, the unique capability key and the key descriptor are provided to allow decryption of sensitive information within the selectively encrypted data unit.
Information query
Patent Agency Ranking
0/0