SM9-based fuzzy identity-based encryption method

Abstract

The invention discloses an SM9-based fuzzy identity-based encryption method. The method comprises the following steps that: S1, a key generation center generates a system parameter according to an SM9 algorithm, sets a threshold value, and discloses the generated system parameter to a user in a system; S2, the key generation center generates main public and private keys of the system according to the attribute space of the user, discloses the main public key to the user in the system, and stores the main private key; S3, the key generation center outputs a private key of the user corresponding to an attribute set according to the attribute set corresponding to the user identity and the main public and private keys of the system; S4, a sender obtains an encrypted ciphertext of a to-be-encrypted message under the attribute set according to the attribute set corresponding to the identity of a receiver, the to-be-encrypted message and the system public key; and S5, after the receiver obtains the ciphertext, the receiver compares the attribute set represented by the identity of the receiver with the attribute set used by the ciphertext, when the number of common attributes in the two attribute sets reaches a preset threshold value, correct decryption can be carried out, otherwise, the decryption fails. The method supports a SM9-based fuzzy identity base-based encryption scheme and is widely applied to encryption scenes needing error correction capability.

Description

technical field [0001] The invention relates to the technical field of information security, in particular to an SM9-based fuzzy identity-based encryption method. Background technique [0002] In recent years, with the rapid development of the Internet of Things, people have paid more and more attention to security issues in the Internet of Things, especially how to transmit data safely and how to deal with errors that often occur during data transmission. Passwords are used to process data encryption. Commonly used means, the traditional encryption technology is public key encryption, but public key encryption requires a third party to issue a certificate, and when encrypting, the encryptor needs to obtain the receiver's certificate first, which brings about the management and maintenance of certificates. In order to effectively Troubleshoot certificate issues. [0003] Shamir first proposed the concept of identity encryption in 1984. Identity encryption is a cryptographic...

AI Technical Summary

Problems solved by technology

[0006] The purpose of the present invention is to provide a fuzzy identity-based encryption method based on SM9 to solve the problem that errors occur in the data transmission process that cannot be realized by the SM9 identification encryption algorithm

Images