An organization identity encryption and decryption method

Abstract

The invention discloses an organization identity encryption and decryption method, which relates to the technical field of encryption and decryption. It generates the public key of the enterprise organization and the private key of the enterprise organization, and then forms the user's private key through the attribute label in the organization identity, thereby completing the user's authentication. To determine the organization identity, in the process of encrypting and decrypting the ciphertext, the third-party application platform uses "zero-knowledge" verification to verify the user's organization identity, and then authorizes the user through the access policy of the organization structure, thereby Enabling users to complete the encryption and decryption process of ciphertexts; the present invention encrypts enterprise organizations and individual users using attribute tags, thereby enabling the verification of organizational identities, one-to-many authorization and access control to be completed, and at the same time through "Zero-knowledge" verification enables users to complete all verification and authorization processes in third-party application platforms without providing personal privacy.

Description

technical field [0001] The invention belongs to the technical field of encryption, in particular to an organization identity encryption and decryption method. Background technique [0002] Attribute-Based Encryption (ABE) is essentially an asymmetric encryption technology, but the biggest difference from asymmetric encryption such as RSA and ECC is that it implements one-to-many encryption and decryption. In ABE, the user's organizational identity is regarded as a series of attributes, which can be decrypted only when the attributes of the user's key match the encryption attributes. The organization's identity verification, one-to-many authorization and access control are realized through cryptographic algorithms; [0003] The user and authority management of the existing application system usually uses the user name and password to verify the user's identity, and then determines the user's identity in the organization according to the user's role or group, and performs auth...

AI Technical Summary

Problems solved by technology

[0003] The user and authority management of the existing application system usually uses the user name and password to verify the user's identity, and then determines the user's identity in the organization according to the user's role or group, and performs authorization and access control based on this. This method will cause user identity information to be scattered in the hands of identity authenticators at various enterprise levels. Users will not be cautious enough to use their own information, or enterprises will conduct information verification on user identities, which will lead to the exposure of identity information, and user identity information will be in the hands of various enterprises. Stored on the server, different companies attach different importance to data security and take different measures, making the leakage of user data a problem of barrel effect. If any part is breached, the user's privacy will be leaked. Under such circumstances, it is a problem that we need to solve to complete the verification of organizational identity in the business scenario of multi-organization cooperation. To this end, a method for encrypting and decrypting organizational identity is now provided

Images