Identity-Based Encryption (IBE)
Principles • Mathematics •
Applications • Numerical Examples
Learning Objectives
• Understand motivation of IBE in Data Privacy
– Explain IBE architecture and workflow
– Understand bilinear pairing mathematically
– Derive encryption-decryption correctness
– Solve numerical example
– Discuss privacy implications
Why Do We Need IBE?
• Traditional PKI requires certificates
– Certificate Authority dependency
– Revocation management complexity
– IBE: Public key = Identity
Origin of IBE
• Proposed by Adi Shamir (1984)
– Practical scheme by Boneh-Franklin (2001)
– Based on bilinear pairings
Core Concept
• Public Key = User Identity
– Private key generated by PKG
– No certificate exchange required
– Simplifies key management
System Components
• 1. Private Key Generator (PKG)
– 2. Sender
– 3. Receiver
– Trusted setup phase
1. Privacy Problem in Traditional PKI
• Certificates expose identity–public key binding
– Certificate validation generates metadata logs
– Revocation mechanisms increase infrastructure
complexity
– Higher metadata leakage risk
2. How IBE Improves Privacy
• Public Key = Identity (no certificate needed)
– No certificate distribution or validation traffic
– Reduced metadata exposure
– Simplified secure communication
3. Metadata Minimization Principle
• Privacy includes protection of communication
metadata
– IBE reduces certificate lookup traffic
– Less observable key exchange behavior
– Supports privacy-by-design architecture
4. IBE in Healthcare Data Privacy
• Encrypt patient data using email/ID directly
– No certificate storage in medical devices
– Lightweight security for IoT healthcare systems
– Useful in WBAN and remote monitoring
5. IBE in Cloud Data Sharing
• Encrypt files for user@[Link] directly
– No public key retrieval required
– Simplifies secure cloud collaboration
– Supports GDPR data minimization principle
6. Time-Bound Identity Encryption
• Identity can include timestamp or expiry
– Example: alice@[Link] || 2026
– Enables automatic key expiration
– Improves controlled data access privacy
7. Privacy Limitation: Key Escrow
• PKG holds master secret
– PKG can generate all private keys
– Centralized trust model required
– Potential insider privacy risk
8. IBE vs PKI (Privacy Comparison)
• No certificates in IBE
– Lower metadata exposure
– Simpler infrastructure
– But introduces PKG trust dependency
9. Critical Analysis
• IBE improves distribution privacy
– IBE weakens decentralization privacy
– Suitable for controlled environments
– Must evaluate trust model carefully
Four Algorithms
• Setup()
– Extract()
– Encrypt()
– Decrypt()
Mathematical Foundation
• Elliptic Curve Cryptography
– Cyclic groups of prime order p
– Bilinear pairing e: G1 x G1 -> GT
– Security: Bilinear Diffie-Hellman
Bilinear Property
• e(aP, bQ) = e(P, Q)^(ab)
– Ensures correctness of IBE
– Efficient computability required
Setup Phase
• Choose prime p and generator P
– Choose master secret s
– Compute P_pub = sP
– Keep s secret
Extract Phase
• Compute Q_ID = H(ID)
– Private key d_ID = sQ_ID
– Securely deliver private key
Encryption
• Choose random r
– U = rP
– K = e(Q_ID, P_pub)^r
– Ciphertext = (U, M XOR H2(K))
Decryption
• Compute K = e(d_ID, U)
– Recover M using XOR
– Correctness from bilinear property
Correctness Proof
• Encryption: e(Q_ID, sP)^r = e(Q_ID, P)^(sr)
– Decryption: e(sQ_ID, rP) = e(Q_ID, P)^(sr)
– Both derive identical key
Numerical Example Setup
• Prime p = 17
– Generator P = 5
– Master secret s = 3
– P_pub = 15
Extract Example
• ID = 'alice'
– Assume H(ID) = 7
– d_ID = 3 * 7 = 21 ≡ 4 mod 17
Encryption Example
• Message M = 9
– Random r = 2
– U = 10
– Demonstration pairing value = 9
– V = 9 XOR 9 = 0
IBE vs PKI
• No certificates required
– Simplified key distribution
– Key escrow exists
– Useful in controlled environments
Key Escrow Problem
• PKG knows master secret
– Can compute all private keys
– Privacy concern
Applications
• Secure email
– Cloud data encryption
– IoT healthcare
– Military communication
Security Assumptions
• Bilinear Diffie-Hellman hardness
– Discrete logarithm problem