Cryptographic key generation method and system based on identity

Abstract

The invention provides an identity-based key generation method and system. It involves computer communication and e-commerce application fields. In order to solve the problems of key escrow and unreliable security channels in the prior art, the present invention provides an identity-based key generation method, which includes setting system parameters, generating user information, and generating initial keys , steps to verify initial key, generate hardened key, and generate user key. The present invention also provides an identity-based key generation system, which includes a module for setting system parameters, a module for generating user information, a module for generating an initial key, a module for verifying an initial key, a module for generating a strengthened key, and a module for generating user information. key module. The technical scheme of the invention solves the problem of dependence on the safe channel and key trusteeship, and effectively prevents various impersonation attacks.

Description

technical field [0001] The invention relates to the application fields of computer communication and e-commerce, in particular to an identity-based key generation method and system. Background technique [0002] In 1984, Shamir proposed an identity-based cryptosystem. Theoretically, identity-based cryptosystems and digital signature systems do not require an authentication center, and any character string can be used as the user's public key. Mailboxes, applications of various smart cards), as well as the troublesome problems of time limit, authority limitation, and authority recovery in ordinary password systems can be easily solved. [0003] Although Shamir gave an identity-based signature scheme in 1984, the first practical identity-based encryption system was not given until 2001 by Boneh and Franklin, and their scheme is referred to as IBE (Identity-based encryption, identity-based encryption system). The IBE scheme is implemented based on bilinear pairings built on ...

AI Technical Summary

Problems solved by technology

This creates two corresponding problems: one is the key escrow problem

Since PKG has the user's private key, PKG can not only decrypt any user's file, but also impersonate any user to sign, so that the identity authentication in this system is not guaranteed.

Second, the issue of secure channels

So the key escrow problem remains

Images