Certificate-based forward security signature method and system thereof

Abstract

The invention discloses a certificate-based forward security signature system. The system comprises: a system parameter setting module, a user initial public or private key generation module, a user certificate authentication module, a user secret key evolution module, a signature module and a verification module. The system parameter setting module generates a system main secret key and a public system parameter and sends to the other modules. The user initial public or private key generation module generates the public key and the initial private key of the each user. The user certificate authentication module issues the certificate to the valid user and sends to the signature module. The user secret key evolution module evolutes the private key of the user and sends to the signature module. The signature module generates the signature to any messages and sends to the verification module. The verification module verifies validity of the signature. By using the system, partial secret key leakage problems based on a certificate password system can be solved. A practical value is high. The invention also discloses a certificate-based forward security signature method.

Description

technical field [0001] The invention belongs to the technical field of communication, relates to the security problem of network communication, more specifically relates to a digital signature method and system which can increase the difficulty for an adversary to steal a signature key and reduce the impact of signature key leakage. Background technique [0002] In order to solve the certificate management problem in the traditional public key cryptosystem, the key escrow problem in the identity-based public key cryptosystem, and the public key replacement attack problem in the certificateless public key cryptosystem, Gentry proposed at the 2004 European Secret Conference Certificate-Based Cryptography (CBC), and proposed the first certificate-based encryption scheme (Certificate-Based Encryption, CBE). The certificate-based cryptosystem combines the advantages of the traditional public-key cryptosystem and the identity-based cryptosystem, eliminates the costly certificate v...

AI Technical Summary

Problems solved by technology

However, using the key distribution method is quite expensive. While large enterprises or certificate authorities can distribute keys, ordinary users who only own one machine have no such choice. Other protection methods against key leakage include elastic key key compromise methods, protected hardware or smartcards, etc., but these methods are also often expensive or impractical

In addition, the key distribution scheme does not necessarily provide the imagined security. For example, the key distribution is susceptible to common mode failures: because all machines use the same operating system, if a vulnerability of a system that may cause illegal intrusion , all machines will be affected

Images