One-way encrypted electronic signature method and system

Abstract

The embodiment of the present invention provides a method and system for one-way encrypted electronic signature, which retains the electronic signature creation data and the digital abstract of the electronic signature authorization password as the electronic signature verification data Dmdy and Dpy; the way to generate the electronic signature is: based on the electronic signature creation data, Authorization password, digital digest Dmd, Dp, Dw of data message W, use one-way encryption algorithm system DSESS to construct electronic signature ES. The way to verify the electronic signature is: based on the Dw decoded from ES, the retained Dmdy and Dpy, use DSESS to construct the electronic signature verification code ESy; compare ES and ESy, if they are the same, it means that the electronic signature ES and its None of the data items in has been tampered with; calculate the digital digest Dwy of the data message, compare the calculated Dwy with the decoded Dw, if the two are the same, it means that the data message has not been tampered with. The embodiment of the present invention does not use keys, avoids the complexity of key management, and reduces technical difficulty and management difficulty.

Description

technical field [0001] The invention relates to the technical field of computer information security, in particular to a one-way encrypted electronic signature method and system. Background technique [0002] The concept of electronic signature was originally proposed by Diffie and Hellman. They proposed that each user publish a public key to verify the signature, and also save a private key to generate the signature. In Diffie and Hellman's digital signature strategy, the user's signature on the message depends on the message itself and the user's private key, and the signature can be verified by using the user's public key. [0003] Data encryption technology is the cornerstone of electronic signature technology. Data encryption is divided into two categories: one-way encryption and two-way encryption. One-way encryption means that only data can be encrypted, but there is no way to decrypt the encrypted data. Two-way encryption refers to encrypting plaintext data into ci...

AI Technical Summary

Problems solved by technology

(2) Partial information held by less than k participants cannot reconstruct P0

[0014] (2) When signing, the electronic signature creation data is only controlled by the electronic signatory;

Key management includes key generation, distribution, verification, update, storage, backup, validity period, destruction, recovery, etc. from key generation to key destruction. The key management process is complex and expensive

[0021] 2. PKI, the electronic signature implementation method based on asymmetric encryption technology, cannot be widely promoted and applied. The main defects of PKI electronic signature include high system cost, high implementation cost, prominent interoperability problems, and the integration of PKI system and other systems. Adjustment or even replacement, use and management of PKI requires more training, third-party certification bodies, users need to apply for electronic certificates, users need higher computer application skills, etc. These problems have led to the implementation of the "Electronic Signature Law" since 2005 It has been more than 12 years since this implementation is difficult to be widely used

Images