We develop a couple of new methods to reduce transmission overheads in broadcast encryption. The methods are based on the idea of assigning one key per each partition using one-way key chains after partitioning the users. One method adopts skipping chains on partitions containing up top revoked users and the other adopts cascade chains on partitions with layer structure. The scheme using the former has the transmission overhead r/p+1 + N-r/c, which is less than r/p if r > p2 N/c. The scheme using the latter keeps the same transmission overhead with the Subset Difference (SD) scheme when r approaches 0, where r is the number of revoked users. Combining the two schemes, we propose a new broadcast encryption scheme whose transmission overhead is the same with that of the SD scheme for small r and becomes smaller than that of the SD as r grows. The scheme using skipping chains possesses an advantage that any number of new users can join any time at no cost for current users. Finally, we show that the proposed key assignment scheme satisfies key-indistinguishability assuming pseudorandom generators.
Bibliographical noteFunding Information:
Manuscript received June 5, 2007; revised March 29, 2008. Current version published October 22, 2008. The work of J. H. Cheon was supported by the SRC Program of Korea Science and Engineering Foundation (KOSEF) (R11-2007-035-01002-0). The work of N.-S. Jho, M.-H. Kim, and E. S. Yoo was supported in part by the Korea Research Foundation (KRF) (2005-070-C00004). The material in this paper was presented in part at Eurocrypt’05, Aarhus, Denmark, May 2005. This work was performed while N.-S. Jho and E. S. Yoo were with the ISaC-RIM, Department of Mathematical Sciences, Seoul National University, Seoul 151-747, Korea.
- Broadcast encryption
- Cascade chain
- Combined chain
- One-way key chain
- Skipping chain