Patent ID: 8661240

Claim:
A system, comprising: a first device configured for joint generation of a ciphertext with a second device in a data processing system, the first device comprising memory for storing a first message, representing secret data of the first device, comprising at least one element of a pair of base groups G 1 , G 2 satisfying a bilinear map ê: G 1 ×G 2 →G T where G T is a target group, a communications interface for communicating with the second device, and control logic adapted to: generate an initial ciphertext comprising an initial blinded encrypted message, in which the first message is encrypted under a public key of a trusted entity, and an initial consistency component for validating the initial ciphertext, the initial consistency component being generated using the bilinear map; send the initial ciphertext via the communications interface to the second device; on receipt from the second device of an updated ciphertext comprising an updated blinded encrypted message and an updated consistency component for validating the updated ciphertext, the updated consistency component being generated using the initial consistency component and the bilinear map, wherein the updated blinded encrypted message comprises the initial blinded encrypted message and an encryption under the public key of a second message, representing secret data of the second device and comprising at least one element of the pair of base groups, to unblind the updated blinded encrypted message to obtain a final encrypted message; and to generate a final ciphertext comprising the final encrypted message and a final consistency component for validating the final ciphertext, the final consistency component being generated using the updated consistency component and the bilinear map.