A Signcryption Method from Certificate-less Environment to Identity-Based Environment

Abstract

The invention discloses a signcryption method from a certificateless environment to an identity-based environment. It belongs to the field of confidential communication. In order to enable the sender based on the non-certificate environment to use the signcryption method to send messages to the receiver based on the identity environment, the present invention includes: after initializing the system parameters, the key generation center generates a part of the private key DA and sends it to the sender, and the sender Randomly generate a secret value and part of the private key DA based on the system parameters to set the complete private key SA and public key PKA; the private key generation center generates the private key SB and sends it to the receiving end; the sending end uses the system parameters, the identity of the sending end and the complete private key SA, the public key PKA, the identity of the receiving end and the message m generate a sign-encrypted ciphertext, and send the ciphertext, the identity of the sending end and the public key PKA to the receiving end for decryption and sign-encryption processing. The invention is used for the signcryption communication of the heterogeneous network, and provides end-to-end confidentiality, integrity, authentication and non-repudiation services for users in a certificateless environment and an identity-based environment.

Description

technical field [0001] The invention belongs to the technical field of secure communication, and in particular relates to a heterogeneous signcryption method in which a sending end belongs to a certificateless environment and a receiving end belongs to an identity-based environment. Background technique [0002] Cryptography is an important tool to realize secure communication. The basic security services provided by the cryptographic system include confidentiality, integrity, authentication and non-repudiation. Confidentiality means that information is only available to authorized users and cannot be disclosed to unauthorized users. Integrity refers to the characteristic that information cannot be destroyed or lost by accidental or deliberate deletion, modification, forgery, replay, insertion, etc. during transmission or storage. Authentication is ensuring that a communicating party is who it claims to be. Confirming the identity of an entity is called entity authenticat...

AI Technical Summary

Problems solved by technology

[0004] (2) Signcryption allows parallel computation of some expensive cryptographic operations

This method has the following two disadvantages: ① Before using any public key, it is necessary to verify the validity of the public key certificate, which increases the amount of calculation for the user; ② CA needs to manage a large number of certificates, including certificate issuance, storage, revocation, etc.

However, the identity-based cryptosystem has a fatal shortcoming: all users' private keys are generated by PKG

[0013] In 2010, Sun and Li proposed a heterogeneous signcryption scheme where one party belongs to the public key infrastructure environment and the other belongs to the identity-based environment [Sun Y, Li H. Efficient signcryption between TPKC and IDPKC and its multi-receiver construction. SCIENCE CHINA Information Sciences,2010,53(3):557-566.], but this scheme only satisfies external security (that is, the attacker cannot be the sender or the receiver), and such a scheme cannot provide denial

[0018] However, none of the above signcryption methods can be applied to communication problems where the sender belongs to a certificateless environment and the receiver belongs to an identity-based environment.

Images