PKE method and system based on SM2 algorithm

Abstract

The invention provides a partial key escrow (PKE) method and system based on a public key cryptographic algorithm SM2, and belongs to the field of information security. N (N is not less than 1) different PKE systems form one key escrow network. An SM2 private key of a user is divided into N+1 partial keys by utilizing key partition storage and multiparty combined calculation modes; the user and the N different PKE systems perform scatter storage; and the user and the N different PKE systems are combined to complete a correlation calculation when the private key needs to be used. At user key generation and use stages, the PKE system generates user partial private keys by utilizing a labeling mapping algorithm, but does not practically save the user partial private keys; therefore, the construction scale of the system can be largely reduced, investment costs of the system are reduced, and operation efficiency and service level of the system are improved.

Description

technical field [0001] The invention relates to a key component trusteeship method and system based on an SM2 public key cryptographic algorithm and a key split storage mechanism, and belongs to the field of information security. Background technique [0002] In the Internet and cloud computing environment, a large number of network-related applications have emerged, such as online banking, online payment, online shopping and Internet medical care, etc., which require online user identity authentication, online operation confirmation and user privacy protection to ensure that network applications security. The best way to solve this security requirement is to use public key cryptography to realize digital signature and public key encryption. When using public key cryptography, it is critical to keep the private key used secure. Under normal circumstances, in order to ensure the safe storage and use of the private key, the private key used for signing and decryption is requ...

AI Technical Summary

Problems solved by technology

[0003] Aiming at the application requirement of entrusting a large number of private key components for key splitting and joint computing, the present invention proposes an identification-based private key component escrow method, and thus constructs a corresponding key component escrow system (Partialkey escrow, PKE for short), to solve the problem of user private key component custody in the scenario of a large number of users

Images