Secure bidirectional heterogeneous digital signature method between PKI and IBC

Abstract

The invention discloses a secure bidirectional heterogeneous digital signature method between a PKI and an IBC. System parameters are generated through a private key generation center, and the systemparameters are disclosed; the user in the public key infrastructure environment and the user based on the identity encryption environment generate a public key and a private key respectively; whereinthe user in the public key infrastructure environment is a signer, the user based on the identity encryption environment is a verifier, the signer generates a signature and sends the signature to theverifier, and the verifier verifies the signature, passes the verification and accepts the message, otherwise, refuses to accept the message; wherein the user based on identity encryption is a signer,the user in the public key infrastructure environment is a verifier, the signer generates a signature and sends the signature to the verifier, and the verifier verifies the signature, passes the verification and accepts the message, otherwise, refuses to accept the message. According to the invention, the safety, correctness, non-repudiation and unforgeability of communication between the publickey infrastructure and the user based on the identity encryption environment are protected, and the safety and privacy requirements are met.

Description

technical field [0001] The invention belongs to the technical field of user communication security, and in particular relates to a secure two-way heterogeneous digital signature method between PKI and IBC. Background technique [0002] Public Key Infrastructure (PKI) is the main means of deploying traditional Public Key Cryptography (PKC) at present. The identity of a user is bound to a certificate, and the identity of a user and its public key are linked The binding relationship is obtained in the form of a digital certificate, which is issued to the user by a trusted certificate authority (Certificate Authority, CA). All data is signed by the certificate authority with its own private key to form a certificate. Before issuing a certificate to a user, the certificate authority first verifies the authenticity of the user's identity. Any communication party that trusts the certificate authority can establish a trust relationship with the other party by verifying the digital...

AI Technical Summary

Problems solved by technology

[0005] Before 2010, users communicated based on the same cryptographic system, based on the public key infrastructure environment, or based on the identity environment, or based on the non-certificate environment, but the communication parties all over the world use different cryptographic systems, so only in one environment Medium communication, can no longer meet the user's communication requirements

Images