Certificateless authentication key negotiation method and system based on hierarchical identities

Abstract

The invention discloses a certificateless authentication key negotiation method and system based on hierarchical identities. The method comprises the following steps: solving an elliptical curve circulation additive group according to input safety constants, and calculating a public key of the system by selecting a main private key and two safety hash functions; calculating a part of private keys and a part of public keys of a first user according to the main private key, the identity of the first user and a set of selected random numbers; calculating the private key of the first user according to a part of private keys of the first user and one selected random number; calculating a part of private keys and a part of public keys of the first user according to the upper-layer user identity of the first user, a part of private keys and a part of public keys of the upper-layer user and one random number; and calculating a session key according to temporary information, the private keys and the public keys selected by a second user and a third user. The method disclosed by the invention is applied to large-scale systems and has high efficiency; the key escrow problem is avoided; and the safety key negotiation requirements are satisfied.

Description

technical field [0001] The invention relates to a non-certificate encryption system, in particular to a non-certificate-based authentication key negotiation method and negotiation system based on hierarchical identity bases. Background technique [0002] Public key cryptography is an important technology to ensure network and information security. In the traditional public key infrastructure (PKI, Public Key Infrastructure), a trusted third party is required to issue certificates for users to prove the user's legal identity, so it involves many certificate management issues and takes up a lot of system-related resources. In order to simplify the certificate management process of traditional public key infrastructure, Shamir proposed an Identity Based Cryptosystem (IBC, IdentityBasedCryptosystem) in 1984. This system does not use certificates, and directly uses the user's identity as the public key, and the private key is generated by the trusted private key generation cente...

AI Technical Summary

Problems solved by technology

In the key agreement protocol without bilinear pairing operation, the security of the protocol is based on the assumption of elliptic curve discrete logarithm difficulty, namely is the cyclic addition group of order q on the elliptic curve, given two elements in Computing a from P, aP is hard, but computing aP from P, a is easy

Images