On top there is a trusted authority, then domain authority and users. The trusted authority has public key and master key. The domain authority has one master key and the users have a secret key.
On encryption the user use the public key and the user is decrypted with his secret key. How it is possible to generate a public-master key pair and other users keys?