Public key cipher system private key escrowing system based on identification

Abstract

The invention relates to a public key cryptosystem private key escrow system based on identification. A client cryptosystem transmits the information of a user to a private key generator for requesting authentication; a user private key is generated and stored at the client cryptosystem after the authentication of the private key generator is passed; and the client cryptosystem provides an operation interface for an application program, and realizes the cryptographic operation internally. The public key cryptosystem private key escrow system dynamically acquires the private key form the private key generator when a user is logged in, a tamper-proofing authentication protocol and the technology of a cipher device can ensure the user to acquire the private key safely. Because the user neither stores the private key statically nor dynamically exposes the private key out of the cipher device, so the hacking difficulty of a hacker is increased. The public key cryptosystem private key escrow system can effectively resist various dynamic and static analysis methods.

Description

technical field [0001] The invention relates to the identification technology in the communication network, in particular to a private key trusteeship technology used in the identification-based public key cryptosystem. Background technique [0002] The identity-based public key cryptosystem uses the user's identity, such as name, IP address, email address, etc. as the public key, and the private key is calculated by a trusted third party, the private key generator PKG (Private Key Generator). However, the private key generator does not directly participate in the encryption and signature process except for generating the private key. [0003] In the public key encryption system, the user's private key is the only certificate to ensure the legitimacy of the user's identity and correctly implement decryption and digital signature. If the user's private key is leaked, a new public-private key pair needs to be regenerated for the user, and all users will be notified. The user'...

AI Technical Summary

Problems solved by technology

[0005] In order to protect the security of the private key, the more commonly used method is to save the user's private key in the USBKey and protect it with a password. This method has certain security in practical applications, but strictly speaking, because the USB Key Passwords are usually relatively simple and can be obtained through exhaustive methods, and passwords are easily tracked and obtained in the computer system, so the USB Key may be cracked by static analysis

Images