Using RSA keys for Broadcast Encryption? What is the best way of using both broadcast encryption and RSA private keys? I'm particularly interested in Broadcast Encryption as implemented by BGW 1, but I guess that the question stands for any broadcast encryption system.

My confusion comes from the fact that the initial phase of Broadcast Encryption takes in the number of users and creates one global Public Key and a Private Key for each user. But suppose that the users in the system already had RSA private keys assigned. Is there a way to mitigate the fact that we need to maintain two private keys per each user (one from RSA and one from Broadcast Encryption) ? 



1 Boneh, Dan, Craig Gentry, and Brent Waters. "Collusion resistant broadcast encryption with short ciphertexts and private keys." Annual International Cryptology Conference. Springer Berlin Heidelberg, 2005.
The Broadcast encryption scheme you link to uses elliptic curve groups based on the bilinear map (bilinear pairing). RSA is not elliptic curve based. 


  Is there a way to mitigate the fact that we need to maintain two private keys per each user (one from RSA and one from Broadcast Encryption) ? 


This is not trivially possible. You would have to devise a scheme that combines those two primitives. 

The only scheme I know of that combines RSA with bilinear pairing is Comparison-based encryption for fine-grained access control in clouds by Zhu et al. (DOI: 10.1145/2133601.2133614)

You might want to check that to see if you can salvage some of that, but I doubt that you will be successful.



Why integrating them is not a good idea in your case:

If your users already have their RSA private keys, then those RSA private keys are not linked in mathematically aside from following the same key generation process. In order to get the ciphertext size improvement of broadcast encryption (BE), you'd need to find some hidden property between all of the RSA private keys just by looking at the RSA public keys of your users. For that, you will either have to break RSA (not an easy feat) or you need to ask the users for their RSA private keys. If you ask for RSA private keys, you might as well just replace them with the BE private keys and skip the integration.