Two-dimension code authentication system and method based on CBS signature mechanism

Abstract

The invention provides a two-dimension code authentication system and method based on a CBS signature mechanism. The system comprises a trust center, a plurality of two-dimension code generating ends, a plurality of two-dimension code verifying ends and a safety physical storage medium USBKey; the method comprises the following steps: the trust center generating a public key and a private key and a public parameter, and performing new commercial tenant identity registration; executing a signature key generation operation and storing the signature key if the commercial tenant does not own the signature key while accessing a credible two-dimension code generating end, judging whether the commercial tenant really owns the signature key if the commercial tenant already owns the signature key; generating a two-dimension code; scanning and verifying the two-dimension code. The system and the method are applied to the two-dimension code in the field of mobile internet, the advanced CBS signature mechanism is applied to the two-dimension code so as to achieve the aim of verifying the validity of the two-dimension code. The integrality and the undeniability of data in the two-dimension code are effectively guaranteed so as to defense the attack techniques such as malicious tampering attack and certificate interception attack.

Description

technical field [0001] The invention belongs to the technical field of network security, in particular to a two-dimensional code authentication system and method based on a CBS signature mechanism. Background technique [0002] The QR code is to encode the information that the mobile phone needs to access and use into the QR code, and use the camera of the mobile phone to read it. Mobile phone QR codes can be printed on various carriers such as newspapers, magazines, business cards, etc. Users can quickly browse the web, download graphics, music, videos, Obtain coupons and learn about product discount information, without the need to enter the URL on the mobile phone, and realize one-click Internet access. With the continuous popularization and development of two-dimensional code technology, the security of two-dimensional codes has attracted more and more attention. The two-dimensional code itself does not contain viruses, Trojans and malware, but the information contained...

AI Technical Summary

Problems solved by technology

However, this method requires a large amount of infrastructure to maintain operations, and there are problems such as complex certificate management

[0004] It can be seen that among the above-mentioned authentication schemes, some classic schemes of traditional cryptography are mostly used to solve the problem of two-dimensional code authentication. Although these schemes can solve the problem of entity authentication, there are low efficiency and operational difficulties in the actual application process. The high maintenance cost is not conducive to large-scale promotion in the real environment

Images