Linkable ring signature method based on anonymous broadcast encryption

Abstract

The invention provides a linkablering signature method based on anonymous broadcast encryption, aiming at widening the application range of the linkable ring signature and improving the safety of thelinking verifier.The implementation method comprises following steps: setting ring signature parameters;a ring member IDx gets the public parameter; thering member IDx generates a key and a linkable hash value PKskx. The trusted third party obtains broadcast encryption parameters and calculates broadcast encryption private key SKIDx of ring member IDx. The signer calculates a linkable flag Tag anda flag ciphertext CT and obtains a ring signature sigma of the message m. The verifier verifies the correctness of the ring signature sigma; judging the identity of the verifier; an authorized user verifies the linkability of ring signature sigma; an obtainer calculates the signer information to prove Psi. The verifier verifies the correctness of Psi. The invention can be used for a transaction scene under a block chain which needs permission to judge whether the transaction scene can be linked or not.

Description

technical field [0001] The invention belongs to the technical field of information security, and relates to a ring signature method, in particular to a linkable ring signature method based on anonymous broadcast encryption, which can be used in transaction scenarios that require authority to judge whether linkability is required under the blockchain. Background technique [0002] Digital signatures, also known as public key digital signatures and electronic signatures, are similar to ordinary physical signatures written on paper. At the same time, they use the technology in the field of public key encryption to identify digital information. This method is a digital string that only the sender of the message can produce and cannot be forged by others. This digital string is also an effective proof of the authenticity of the message sent by the sender of the message. Group signature is a kind of digital signature. It satisfies that in a group signature scheme, any member of a ...

AI Technical Summary

Problems solved by technology

However, the linkability of this method can be verified by all verifiers. It is not suitable for scenarios that require permission to judge whether it is linkable. The application range is narrow, and the anonymity of linkable verifiers cannot be guaranteed, and the security is insufficient.

Images