Generation method of composite public key

Abstract

The invention constructs a novel compound public key CPK system on the basis of simple marked keys in a combined public key CPK system; wherein, digital signature keys are compounded by marked keys and random keys; the random keys are compounded with update keys; the three types of keys are compounded into the digital signature keys; key exchange keys are compounded by the marked keys and system keys; the system keys is compounded with annual keys; the three types of keys are compounded into the key exchange keys. The random keys and the system keys enhance the security of the marked keys, and the update keys and the annual keys provide convenience for the key exchange; the advantages and characteristics of the combined keys are reserved in the compound keys; a combination matrix which is taken as a trust root provides evidences for the integration of marks and keys without the proof from a third party. The compound public key system greatly enhances the security degree and permits the definition of the signature keys in the name of individual so as to be widely applied to the fields of trusted connection, code authentication, electronic banks, trusted transaction, trusted logistics, etc.

Description

technical field [0001] The invention relates to the fields of authentication algorithms and identification authentication, and more specifically relates to a compound public key generation method based on a combined public key. Background technique [0002] Information security mainly involves authentication techniques and data confidentiality. Authentication technology mainly relies on authentication protocols and digital signature algorithms. Data confidentiality relies on key exchange protocols. [0003] There is a digital signature requirement that the signature key is defined by an individual to ensure the privacy and exclusiveness of the signature key, and no one else, including the key management center, should have the same signature key. The key exchange is required to be uniformly defined by the key management center, and the handshake-free key exchange should be realized as much as possible to adapt to the store-and-forward networked packet communication, and th...

AI Technical Summary

Problems solved by technology

[0024] In 1984, Shamir proposed the IBC algorithm, which belongs to the single-factor mechanism defined centrally. Implement identity-based key exchange

[0025] In 1996, PKI appeared, which is a self-defined single-factor mechanism. The digital signature meets the self-defined requirements. Under the condition of third-party certification, it can be used for identification authentication, but its key exchange must rely on LDAP, which cannot be exchanged. directness

[0026] In 2001, Dan Boneh and Matthew Franklin of the United States used Weil's group pair theory to construct IBE encryption based on identity, but digital signatures cannot be realized.

[0032] 2) The private key of the entity is generated by the management center, and the entity has no complete exclusivity or privacy for the private key;

[0033] 3) It is difficult to scientifically estimate the collision probability after hash function operation and the collision probability of different seed key combinations

Images