Deniable aggregation signcryption method

Abstract

The invention discloses a deniable aggregation signcryption method. The deniable aggregation signcryption method comprises the following steps: step 1, setting public parameters by a system; step 2, the system generating a public key and a private key for each user; step 3, performing signcryption on the message by each sender according to the public key and the private key of the sender and the public key of the receiver, and then generating a ciphertext; step 4, aggregating all the ciphertext by the aggregator to generate an aggregated ciphertext; and step 5, the receiver carrying out unsigncryption on the aggregated ciphertext according to the public key and the private key of the receiver and the public keys of all the senders. According to the deniable aggregation signcryption methodprovided by the invention, message confidential transmission and message authenticity verification are completed, so that the calculation expenditures of a message sender and a message receiver are reduced. Besides, aiming at a many-to-one communication scene, the ciphertext data volume transmitted on the network bandwidth is reduced by means of aggregating the ciphertext. When a plurality of messages are sent, the total data volume of the ciphertext can be reduced by about 25%, the pressure of the network bandwidth is reduced, and the transmission efficiency is improved.

Description

Technical field [0001] The invention relates to the technical field of data authentication and encryption, in particular to a repudable aggregate signcryption method. Background technique [0002] Since scholars Diffie and Hellman first proposed public key encryption in their paper "New Direction in Cryptography" in 1976, the industry has always adopted signature first and then encryption as a standard practice for implementing network data encrypted transmission and identity authentication. The reason for this is because encryption can protect the confidentiality of data, and signatures can achieve identity authentication. Therefore, the computational cost of simultaneously realizing data confidential transmission and user identity authentication is the sum of the computational cost of the encryption scheme and the signature scheme. Due to the high computational overhead of public key encryption technology, this method of signing and then encrypting is not friendly to resource-...

AI Technical Summary

Problems solved by technology

Due to the large computational overhead of public key encryption technology, this method of signing first and then encrypting is not friendly to devices with limited resources. This problem was not solved until 1997.

Based on this idea, Basudan S et al. proposed an aggregated signcryption scheme to protect user privacy in 2017, and applied the scheme to the Internet of Vehicles based on fog computing. However, this scheme can only protect the identity privacy of users, but cannot The user's location information will not be disclosed

Images