An identity or attribute encryption calculation method and system based on an Intel SGX mechanism

Abstract

The invention discloses an identity or attribute encryption calculation method and system based on an Intel SGX mechanism. The method comprises the following steps: 1) deploying Public Enclave at a message sender terminal, deploying Private Enclave at a message receiver terminal, and respectively providing an application program running environment for isolated execution based on an Intel SGX mechanism; 2) requesting a private key from the PKG when the Private Enclave is started for the first time; when the Public Enclave is started for the first time, requesting system parameters and a main key from the PKG to generate a public key of the user; and (3) the Public license derives a corresponding public key according to the input ID or attribute and then encrypts the message by using the public key, and a decryption interface of the Private license of the message receiver terminal decrypts the message by using a private key. According to the public key password calculation method disclosed by the invention, the public key password calculation is safely and efficiently realized.

Description

technical field [0001] The invention belongs to the field of computer technology and information security technology, and in particular relates to an identity or attribute encryption calculation method and system based on the Intel SGX mechanism. Background technique [0002] The public key cryptosystem based on identity encryption allows users to use arbitrary identifiers, such as user names or email addresses, to expand the user's public key. Attribute-based encryption is considered obfuscated identity-based encryption. In the public key cryptosystem based on attribute encryption, users are given a series of attribute sets, and only when the attribute set meets the requirements of access control, the ciphertext data can be decrypted, and its public key is related to its attributes. In this way, public key cryptosystems based on identity or attribute encryption greatly reduce the work of traditional public key cryptosystems in distributing public keys. However, they only ...

AI Technical Summary

Problems solved by technology

However, they only improved the generation method and distribution process of the public key, and the cryptographic calculation still uses the public key cryptographic algorithm based on mathematically intractable problems, such as factorization of large integers, discrete logarithm problems and discrete logarithm problems on elliptic curves, etc.

Therefore, due to the computational complexity of difficult mathematical problems, the existing public-key cryptosystems based on identity or attribute encryption are still computationally intensive, and have the disadvantages of time-consuming computation and high performance overhead.

Images