A double threshold signature method based on ecdsa

Abstract

The present application discloses an ECDSA-based double threshold signature method, which splits an asymmetrically encrypted master private key into n groups, and each group has m grandchild private keys. In any t group, each group of any u private keys of the grandchildren can be electronically signed, and the result is the same as the result of directly signing with the master private key; If the number of keys is less than u, or the number of participating groups is less than t, the correct signature result will not be obtained. In addition, during the process of the scheme, no one will obtain the master private key of the system or the child private key representing any one group. Among them, n, m, t, and u are all self-defined parameters, and users can set them according to their own needs. The invention expands the application scenario of the single-layer threshold signature and increases the security.

Description

technical field [0001] The invention relates to the field of electronic information security, in particular to an ECDSA-based double threshold signature method. Background technique [0002] More and more Internet services are now based on electronic signatures of asymmetric encryption algorithms to verify user identity, such as the transfer of a certain amount of money. The common threshold signature scheme is suitable for the following scenarios: a certain right needs to be jointly managed by n individuals, but for security reasons, any (t-1) individuals are required to have private communication to obtain the right. However, such a scheme cannot satisfy more complex rights management scenarios. For example, a certain rights and interests need to be jointly managed by n organizations, and any (t-1) organizations cannot obtain the rights and interests; For security reasons, it is necessary to entrust the part of the rights and interests representing the organization to m m...

AI Technical Summary

Problems solved by technology

The common threshold signature scheme is suitable for the following scenarios: a certain right needs to be managed by n individuals, but for security reasons, it is impossible to obtain the right even if any (t-1) of them are required to communicate privately

However, such a solution cannot meet more complex equity management scenarios. For example, a certain equity needs to be managed by n organizations, and any (t-1) organizations can not obtain the equity if they are required to have private relationships; For security reasons, it is necessary to entrust the rights and interests representing the organization to m members for management, and any (u-1) members among them cannot obtain the rights and interests representing the organization

In addition, some existing threshold algorithms temporarily restore the main private key during the generation of the sub-private key or during the signing process, or require a trusted center, which greatly reduces the security of the entire scheme. needs to be optimized

Images