A Pedersen secret sharing multi-party aggregate access control method based on blockchain

Abstract

The present invention relates to a Pedersen secret sharing multi-party aggregate access control method based on blockchain, and belongs to the technical field of blockchain. The present invention has the characteristics of decentralization, non-tamperability and privacy protection of blockchain, and the network composed of trusted hardware ensures the security of closed-loop data interaction. The secret privacy publisher publishes the data that needs to be privacy-processed and hands it over to the BPMC framework for processing, in which the embedded Pedersen algorithm performs sharing processing of secret data; the four steps within the multi-party aggregate signature processing framework perform multi-party aggregate access control processing on the secret data processed by the Pedersen algorithm. This article provides an access control method that maintains data privacy while taking into account efficient and reliable access, combining blockchain system applications, cryptographic solutions and existing technologies, and optimizes secret data access and interaction efficiency in actual business scenarios.

Description

Technical Field

[0001] The present invention relates to a Pedersen secret sharing multi-party aggregation access control method based on blockchain, and belongs to the field of information interactive access control of blockchain, secret privacy under cryptographic Pedersen algorithm and multi-party aggregation technology. Background Art

[0002] In the current Internet environment, data is generated and interacted all the time, and massive data is also the basis for the control center to make intelligent decisions. Data on the Internet is the bridge for business interaction and the core of data analysis. It connects all links of the entire production chain to achieve collaborative manufacturing. The high complexity, openness and heterogeneity of the platform have exacerbated the security risks it faces. This means that a technology that uses data as a production factor and has no central mechanism is needed to coordinate the efficient collaboration of data. The application of blockchain is a good solution. Its characteristics can be fully utilized to achieve secure interaction and access control of secret data between clouds that intelligent collaboration relies on.

[0003] Due to the feature that block data cannot be tampered with, blockchain often emphasizes the verifiability of calculations without considering the confidentiality of input information. On the other hand, secure multi-party computing emphasizes the confidentiality of messages during multi-party computing but cannot ensure the verifiability of data. Therefore, the two can complement each other, and the combination of secure multi-party computing and blockchain has begun to be included in the scope of strengthening privacy protection. On the one hand, blockchain uses secure multi-party computing to enhance privacy capabilities so that it can be implemented in more application scenarios; on the other hand, secure multi-party computing can use blockchain technology to conduct open, transparent and tamper-proof transaction verification. The orthogonality of the two technologies makes it possible to accelerate data privacy protection in distributed networks, which is also an urgent problem to be solved in the field of data collaboration.

[0004] Considering the public nature of blockchain, adding cryptographic schemes can achieve privacy protection for secret sharing. The Pedersen secret sharing scheme can be embedded in it, and with its complete, reliable, and zero-knowledge characteristics, data information can be committed and concealed on the chain. No one can obtain any sensitive data information from the commitment before the smart contract is verified. And when the smart contract is verified, except for the final aggregate signature and the common public key of the participants, no large amount of data is transmitted on the blockchain. When multi-party computing makes a combined commitment, each participant cannot obtain any private key by malicious means, thereby protecting any information in a single Pedersen commitment.

[0005] At present, a large amount of secret data has been accumulated in the fields of industry, medical care, and educational resources. How to further activate and mine the data in various industries is a major challenge facing the industry. Similarly, how to efficiently and reliably interact with massive amounts of secret data is an urgent problem to be solved, and how to allow specific groups to obtain specific secrets without destroying the overall integrity of access control is also an issue that needs attention. Summary of the invention

[0006] The technical problem to be solved by the present invention is to provide a Pedersen secret sharing multi-party aggregate access control method based on blockchain to solve the above technical problems.

[0007] The technical solution of the present invention is: a Pedersen secret sharing multi-party aggregate access control method based on blockchain, including a secret privacy publisher, a secret privacy module, a BPMC framework, a multi-party signature aggregation processing framework block, a Pedersen algorithm, a smart contract module, a request response module, a feedback module, a signature verification and storage module, a trusted supervision module, a blockchain network and a signature verification party, each of which performs its own duties and complements each other;

[0008] Feedback module, request response module, signature verification and evidence storage module, blockchain network, trusted supervision module, multiple signature verification parties; the blockchain network is bidirectionally connected to the smart contract module; the output end of the trusted supervision module is data-connected to the blockchain network; the smart contract module is bidirectionally connected to the signature verification and evidence storage module; the output end of the request response module is connected to the input end of the smart contract module; the output end of the BPMC framework is connected to the input end of the smart contract module; the BPMC framework embeds the Pedersen algorithm and the multi-party signature aggregation processing framework; the output end of the smart contract is connected to the input end of the feedback module; the output end of the feedback module is unidirectionally connected to the input end of the secret privacy publisher and the signature verification party; the output end of the signature verification party is connected to the input end of the request response module; the output end of the secret privacy publisher is connected to the input end of the secret privacy module;

[0009] The BPMC framework has a multi-party signature aggregation processing framework and Pedersen algorithm. It includes a commitment merging module, a public key encryption module, a signature merging module, and a signature submission module. The aggregate signature step composed of the above modules utilizes the characteristics of Pedersen additive homomorphism, that is, there is no need to decrypt the commitments of three or more parties, but to use the zero-knowledge privacy commitments that have been achieved for aggregation operations, that is, to perform privacy calculations on the commitments of multiple parties. In the end, the signature submission module interacts with the smart contract in the blockchain with only a single aggregate signature, which significantly improves the efficiency of signature verification and saves resource expenditures.

[0010] The Pedersen secret sharing algorithm is used in the BPMC framework to verify the shares of secret data that need to be processed privately. Pedersen key sharing in cryptography can be divided into distribution, verification, and key recovery stages. The Pedersen scheme in blockchain is more concise and clear. In the field of blockchain, the Pedersen algorithm is currently mainly used in conjunction with elliptic curve cryptography. It has a ciphertext form with strong binding and homomorphic addition characteristics based on the discrete logarithm problem. This means that all secrets will be processed privately into smaller units of shares, and the original data cannot be reversed in any form other than a specific decryption method. This not only protects the privacy of secret data, but also can be executed in small units, improving the recovery efficiency of subsequent verifiers.

[0011] The multi-party signature operation steps are as follows: after the commitment is made to the private message DC that needs to be committed, the three-party commitment messages are aggregated to generate a unified signature for subsequent smart contract verification. The multiple participants that are processed sequentially by the commitment merging module, public key encryption module, signature merging module, and signature submission module complete the interaction off-chain, and then the corresponding values ​​are Pedersen committed. After the commitment data is multi-party aggregated and signed, no private data can be obtained in the process of on-chain operation. Due to the characteristics of the Pedersen commitment ciphertext, although the original private data cannot be launched on the blockchain chain, the constraint relationship between commitments, the validity of the signature, and the legitimacy of the business interaction can be verified. The above operation steps are specifically as follows:

[0012] Step 1: The three parties generate their respective commitments DC-1 / DC-2 / DC-3 according to formula (1);

[0013] DC-i=mi*G+seedi*H (1)

[0014] Step 2: The three parties privately generate blinding factors r1, r2, and r3, and make r1*H, r2*H, and r3*H public to each other and use them as the blinding factors r i The public key R i , i∈{1,2,3};

[0015] Step 3: According to their respective public keys R i , make a message commitment:

[0016]

[0017] Sum DC=Hash(R1||R2||R3||DC) (2)

[0018] The three parties then sign the calculated aggregate commitment, represented by: SigM-i = ri +SumDC*prkey i , where prkey i is the private key of each party;

[0019] After that, all parties will share the information i Public, and the random number seed used by itself i Delivered to the verification smart contract on the private channel, i∈{1,2,3};

[0020] Step 4: Each party submits the signature of the transaction to the last party to sign for aggregate signature:

[0021] SigM=SigM-1+SigM-2+SigM-3 (3)

[0022] Step 5: After the aggregate signature is completed, the last signing party will submit a single signature pair (R, SigM, DC) to the verification smart contract, where R = R1+R2+R3.

[0023] Furthermore, the BPMC framework described in the present invention includes a multi-party signature aggregation processing framework to perform multi-party secure computing on secret shares. Multi-party secure computing can simultaneously ensure the privacy of input and the correctness of calculation. Under the premise of no trusted third party, mathematical theory is used to ensure that the input information of all parties involved in the calculation is not exposed, and accurate calculation results can be obtained at the same time.

[0024] Furthermore, the secret privacy module will clean and classify the secret data information released by the secret privacy publisher before passing it to the BPMC framework; the preprocessing behavior is to classify the Pedersen algorithm in advance, which can greatly improve the efficiency of the algorithm's operation of dividing the overall information into partial shares. In this way, while ensuring the privacy of the data, it ensures that the source file data will not be easily obtained and changed by others, and at the same time, it can also classify specific information and non-secret information as public information for subsequent chaining.

[0025] Furthermore, in the present invention, the secret privacy publisher can connect the one-way output end of the secret data information to be shared with the input end of the secret privacy module. The secret privacy module then transmits the secret data information to the BPMC framework for packaging and handing it over to the information splitting module for further cleaning, classification and preprocessing.

[0026] Furthermore, the request response module has a one-way data connection with the signature verification party and the smart contract module; it is characterized by being the middleware that opens the first barrier of on-chain and off-chain interaction. It responds promptly to the verification secret, feedback, and evidence storage requirements issued by the signature verification party, and delivers the corresponding requirements to the smart contract module for operation instruction transmission.

[0027] Furthermore, the feedback module establishes a one-way data connection with the secret privacy publisher and the signature verifier, and the blockchain network and the trusted supervision module are connected and have a two-way data connection with the smart contract module; it is characterized in that there are three smart contracts with specific functions inside the smart contract: verification smart contract, feedback contract, and evidence storage contract, each contract has its specific role, so as to respond to and execute the unchangeable functions set inside the smart contract.

[0028] Furthermore, the request response module described in the present invention is used to respond to the secret verification and evidence storage request instructions transmitted by the signature verification party; after parsing the instructions, it feeds back to the smart contract module in a one-way manner, and selects the verification smart contract or evidence storage contract inside the module according to the instructions.

[0029] Furthermore, the smart contract module described in the present invention includes three contracts with different functions; one is used to process secret recovery verification requests initiated by multiple signature verification parties; the other is used to submit a request for subsequent feedback to the feedback module after the secret recovery verification is successful; the other is used to interact with the signature verification and evidence storage module after the secret recovery verification is successful; its characteristic is that the smart contract is an internally set unchangeable function, and the function is strictly executed spontaneously and then works in coordination with the module connected in the next step.

[0030] The multi-party signature aggregation processing framework within the BPMC framework described in the present invention is characterized in that the application based on blockchain and multi-party secure computing technology has the following advantages: First, it is easy to implement. The business logic of the technical application solution is simple, the code is easy to implement, and each participant only needs to interact with the smart contract once to complete the automatic collaborative computing. Second, it has high security. The core business process is all ciphertext operation, and the data information is saved in ciphertext. Even if the node is hacked and the account book record is obtained, it cannot be decrypted; at the same time, the smart contract has passed multi-party consensus, and the upgrade needs to be audited, which has high security. Third, it supports regulatory penetration. The regulator does not participate in the multi-party computing logic, but can be connected to the blockchain network as a regulatory node to access the bottom-level data and realize regulatory penetration. The entire solution does not require a trusted central node to participate in the core business logic, and realizes multi-party collaborative computing under decentralization. Fourth, it has strong scalability. The core computing logic and the business are loosely coupled, which is convenient for later business expansion and innovation.

[0031] Furthermore, the Pedersen algorithm and the multi-party signature aggregation processing framework in the BPMC framework use three verification parties to represent multiple parties. First, they need to exchange their own random numbers, and then use their own signature private keys to sign the same data message M separately. Then, the single signatures are aggregated to generate a new signature, and finally the verifier verifies it using the verification key. In this process, for the verifier, the representation on the blockchain is a smart contract for verifying the signature. The contract verifies the combined signature using a predefined verification key to ensure the legitimacy of the signature. The formula used in this article is: DC-i=mi*G+seedi*H. Among them, G and H are two fixed points with different positions on the finite field elliptic curve; mi is the message signed by each party; seedi is a different random number seed, i∈{1,2,3}. After the private message DC that needs to be committed is committed, the three-party commitment messages are aggregated to generate a unified signature for subsequent smart contract verification.

[0032] Furthermore, the trusted supervision module and blockchain network within the overall system work efficiently with all the above modules to break the barriers to data interaction between the chain and the chain, maintain an absolutely safe environment through hardware characteristics, and ensure the interactive security of commitment, encryption, signature, verification and other aspects of secret and private data without losing efficiency.

[0033] The present invention provides a new blockchain-based Pedersen secret sharing multi-party aggregate access control method, which has the characteristics of decentralization, immutability and privacy protection of blockchain, and a network composed of trusted hardware to ensure the security of closed-loop data interaction. The secret privacy publisher publishes the data that needs to be privacy-processed and hands it over to the BPMC framework for processing, in which the embedded Pedersen algorithm performs sharing processing of secret data; the four steps within the multi-party aggregate signature processing framework perform multi-party aggregate access control processing on the secret data processed by the Pedersen algorithm. This article provides an access control method that maintains data privacy while taking into account efficiency and reliability. It combines blockchain system applications, cryptographic solutions and existing technologies to optimize secret data access and interaction efficiency in actual business scenarios.

[0034] The beneficial effects of the present invention are:

[0035] (1) Within the overall framework, a differential, trusted, access-controlled, and multi-party sharing system framework for secret privacy data can be established through the secret privacy module, the BPMC framework, and its internal Pedersen algorithm and multi-party signature aggregation processing framework. After preprocessing, the secret privacy data is passed to the BPMC framework for secret sharing share allocation and multi-party aggregate signature encryption processing, and then handed over to the smart contract for responsive secret recovery verification and evidence storage on the blockchain. At the same time, it has a rapid feedback mechanism to interact with the privacy publisher and the signature verifier in a friendly manner. This paper reasonably proposes an access control protocol scheme that can realize multi-party aggregate signatures for multiple parties and multiple different data information and has the ability to perform efficient signature verification on the blockchain. This paper creatively integrates the secure multi-party computing protocol with the blockchain, the Pedersen secret sharing scheme, and the aggregate signature, and while ensuring security, it has significantly improved the signature verification rate compared with the existing BLS, BLSMultiSig, and Shamir algorithms. All data on the blockchain interact under the supervision of a trusted supervision module supported by relevant hardware, ensuring the security and consistency of the data. The calling process of the immutable contract corresponding to different requirements in the smart contract module is also quite safe and reliable. BRIEF DESCRIPTION OF THE DRAWINGS

[0036] Figure 1 It is a schematic diagram of the overall architecture of the system of the present invention;

[0037] Figure 2 It is a schematic diagram of the multi-party signature aggregation processing framework within the BPMC framework of the present invention;

[0038] Figure 3 This is a comparison chart of the average time effectiveness of 50 experiments conducted by BPMC / BLSMultiSig / Shamir in the present invention. DETAILED DESCRIPTION

[0039] The present invention will be further described below in conjunction with the accompanying drawings and specific implementation methods.

[0040] A new blockchain-based Pedersen secret sharing multi-party aggregate access control method, including a secret privacy publisher, secret privacy data, a secret privacy module, a BPMC framework and its internal Pedersen algorithm, a multi-party signature aggregation processing framework, a smart contract module and its internal three smart contracts with different functions, a feedback module, a request response module, a signature verification and storage module, a blockchain network, a trusted supervision module, and multiple signature verification parties;

[0041] The blockchain network is connected to the smart contract module in a two-way data manner; the output end of the trusted supervision module is connected to the blockchain network in a data manner; the smart contract module is connected to the signature verification and evidence storage module in a two-way data manner; that is, the output end of the smart contract module is connected to the input end of the signature verification and evidence storage module, and the input end of the smart contract module is connected to the output end of the signature verification and evidence storage module; the output end of the request response module is connected to the input end of the smart contract module; the output end of the BPMC framework is connected to the input end of the smart contract module; the BPMC framework is embedded with the Pedersen algorithm and the multi-party signature aggregation processing framework ; That is, the Pedersen algorithm inside the BPMC framework is bidirectionally data-bound with the internal multi-party signature aggregation processing framework; the input end of the smart contract module is connected to the output end of the signature verification and evidence storage module; the output end of the smart contract is connected to the input end of the feedback module; the output end of the feedback module is unidirectionally connected to the input end of the secret privacy publisher and the signature verification party; that is, the output end of the feedback module is connected to the input end of the secret privacy publisher and the signature verification party; the output end of the signature verification party is connected to the input end of the request response module; the output end of the secret privacy publisher is connected to the input end of the secret privacy module;

[0042] The Pedersen secret sharing algorithm is used in the BPMC framework to verify the shares of secret data that need to be processed privately. Pedersen key sharing in cryptography can be divided into distribution, verification, and key recovery stages. The Pedersen scheme in blockchain is more concise and clear. In the field of blockchain, the Pedersen algorithm is currently mainly used in conjunction with elliptic curve cryptography. It has a ciphertext form with strong binding and homomorphic addition characteristics based on the discrete logarithm problem. This means that all secrets will be processed privately into smaller units of shares, and the original data cannot be reversed in any form other than a specific decryption method. This not only protects the privacy of secret data, but also can be executed in small units, improving the recovery efficiency of subsequent verifiers.

[0043] The BPMC framework described in this embodiment includes a multi-party signature aggregation processing framework to perform multi-party secure computing on secret shares. Multi-party secure computing can ensure the privacy of input and the correctness of calculation at the same time. Under the premise of no trusted third party, mathematical theory is used to ensure that the input information of all parties involved in the calculation is not exposed, and accurate calculation results can be obtained at the same time.

[0044] The secret privacy module described in this embodiment cleans and classifies the secret data information released by the secret privacy publisher and then passes it to the BPMC framework; the preprocessing behavior is to classify the Pedersen algorithm in advance, which can greatly improve the efficiency of the algorithm's operation of dividing the overall information into partial shares. In this way, while ensuring the privacy of the data, it ensures that the source file data will not be easily obtained and changed by others, and at the same time, it can also classify specific information and non-secret information as public information for subsequent chaining.

[0045] In this embodiment, the secret privacy publisher can connect the one-way output end of the secret data information to be shared with the input end of the secret privacy module. The secret privacy module will then pass the secret data information into the BPMC framework for packaging and hand it over to the information splitting module for further cleaning, classification and pre-processing.

[0046] The request response module described in this embodiment has a one-way data connection with the signature verification party and the smart contract module; it is characterized by being a middleware that opens the first barrier of on-chain and off-chain interaction. It promptly responds to the verification secret, feedback, and evidence storage requirements issued by the signature verification party, and delivers the corresponding requirements to the smart contract module for operation instruction transmission.

[0047] The feedback module described in this embodiment establishes a one-way data connection with the secret privacy publisher and the signature verifier, and establishes a two-way data connection with the blockchain network and the trusted supervision module, and establishes a two-way data connection with the smart contract module; it is characterized in that there are three smart contracts with specific functions inside the smart contract: verification smart contract, feedback contract, and evidence storage contract, each contract has its specific role, so as to respond to the execution of unchangeable functions set inside the smart contract.

[0048] The request response module described in the present invention is used to respond to the secret verification and evidence storage request instructions transmitted by the signature verification party; after parsing the instructions, it feeds back to the smart contract module in a one-way manner, and selects the verification smart contract or evidence storage contract inside the module according to the instructions.

[0049] The smart contract module described in the present invention includes three contracts with different functions; one is used to process secret recovery verification requests initiated by multiple signature verification parties; the other is used to submit a request for subsequent feedback to the feedback module after the secret recovery verification is successful; the other is used to interact with the signature verification and evidence storage module after the secret recovery verification is successful; its characteristic is that the smart contract is an internally set unchangeable function, and the function is strictly executed spontaneously to work in coordination with the module connected in the next step.

[0050] The multi-party signature aggregation processing framework within the BPMC framework described in the present invention is characterized in that the application based on blockchain and multi-party secure computing technology has the following advantages: First, it is easy to implement. The business logic of the technical application solution is simple, the code is easy to implement, and each participant only needs to interact with the smart contract once to complete the automatic collaborative computing. Second, it has high security. The core business process is all ciphertext operation, and the data information is saved in ciphertext. Even if the node is hacked and the account book record is obtained, it cannot be decrypted; at the same time, the smart contract has passed multi-party consensus, and the upgrade needs to be audited, which has high security. Third, it supports regulatory penetration. The regulator does not participate in the multi-party computing logic, but can be connected to the blockchain network as a regulatory node to access the bottom-level data and realize regulatory penetration. The entire solution does not require a trusted central node to participate in the core business logic, and realizes multi-party collaborative computing under decentralization. Fourth, it has strong scalability. The core computing logic and the business are loosely coupled, which is convenient for later business expansion and innovation.

[0051] In the Pedersen algorithm and multi-party signature aggregation processing framework within the BPMC framework described in this embodiment, three verification parties represent multiple parties. First, they need to exchange their respective random numbers, and then use their respective signature private keys to sign the same data message M separately. Then, the single signatures are aggregated to generate a new signature, and finally the verifier verifies it using the verification key. In this process, for the verifier, the representation on the blockchain is a smart contract for verifying the signature. The contract verifies the combined signature using a predefined verification key to ensure the legitimacy of the signature. The formula used in this article is: DC-i=mi*G+seedi*H(1). Where G and H are two fixed points at different positions on the finite field elliptic curve; mi is the message signed by each party; seedi is a different random number seed, i∈{1,2,3}. After the private message DC that needs to be committed is committed, the three-party commitment messages are aggregated to generate a unified signature for subsequent smart contract verification.

[0052] The specific steps are as follows:

[0053] Step 1: The three parties B, C, and D generate their respective commitments DC-1 / DC-2 / DC-3 according to formula (1);

[0054] DC-i=mi*G+seedi*H (1)

[0055] Step 2: The three parties privately generate blinding factors r1, r2, and r3, and disclose r1*H, r2*H, and r3*H to each other, and use them as the blinding factors r i The public key R i , i∈{1,2,3};

[0056] Step 3: According to their respective public keys R i , make a message commitment:

[0057]

[0058] Sum DC=Hash(R1||R2||R3||DC) (2)

[0059] The three parties then sign the calculated aggregate commitment, represented by: SigM-i = r i +SumDC*prkey i , where prkey i is the private key of each party;

[0060] After that, all parties will share the information i Public, and the random number seed used by itself i Delivered to the verification smart contract on the private channel, i∈{1,2,3};

[0061] Step 4: Each party submits the signature of the transaction to the last party to sign for aggregate signature:

[0062] SigM=SigM-1+SigM-2+SigM-3 (3)

[0063] Step 5: After the aggregate signature is completed, the last signing party will submit a single signature pair (R, SigM, DC) to the verification smart contract, where R = R1+R2+R3.

[0064] The trusted supervision module and blockchain network in the overall system described in this embodiment work efficiently with all the above modules to break the barriers between on-chain and off-chain data interaction, maintain an absolutely safe environment through hardware characteristics, and ensure the security of electronic signature information and signature verification interaction without losing efficiency. The identification information of the contract function scheduling obtains the required corresponding data from the off-chain index addressing.

[0065] The method described in this embodiment can establish a differential, trusted, access-controlled, secret privacy data multi-party sharing system framework through the secret privacy module, BPMC framework and its internal Pedersen algorithm and multi-party signature aggregation processing framework within the overall framework. The secret privacy data is passed to the BPMC framework after pre-processing for secret sharing share allocation and multi-party aggregate signature encryption processing, and then handed over to the smart contract for responsive secret recovery verification and evidence storage on the blockchain. At the same time, it has a rapid feedback mechanism to interact friendly with the privacy publisher and the verification party. This article reasonably proposes an access control protocol scheme that can realize multi-party aggregation signatures for multiple parties and multiple different data information and has the ability to perform efficient verification on the blockchain. This article creatively integrates the secure multi-party computing protocol with the blockchain, the Pedersen secret sharing scheme, and the aggregate signature, and while ensuring security, it has a significant improvement compared to the existing BLS, BLSMultiSig, and Shamir algorithm verification rates. All data on the blockchain interact under the supervision of a trusted supervision module supported by relevant hardware, ensuring the security and consistency of the data. The calling process of the immutable contract corresponding to different requirements in the smart contract module is also quite safe and reliable.

[0066] Through the smart contract module, feedback module and signature verification and evidence storage module, under the involvement of the request response module, reasonable signature verification and evidence storage requirements will be optimized and executed by the smart contract on the chain, and the whole process is transparent and visible. The share splitting of secret data greatly improves the efficiency of restoring the original data, while ensuring anonymity. The Pedersen secret sharing scheme is also used to propose a new multi-party aggregate signature method. Starting from the actual scenario, it takes into account the mutual anonymity of multiple suppliers when they want to obtain corresponding information on the blockchain, while ensuring the need for openness and transparency. The secret sharing scheme is allocated to individuals to prevent the occurrence of malicious behavior. At the same time, the multi-party aggregate signature scheme is used to generate corresponding signatures from multiple parties through their respective secret keys and then aggregate them into one. While taking into account the efficiency of smart contract verification on the chain, security and privacy are achieved under the discussion of mathematical theory and threat model. The efficiency of aggregate signature is 97.5% higher than that of BLS, and the efficiency of signature verification is 93.2% and 68.5% higher than that of BLS / Shamir algorithm, respectively, as shown in the attached figure. Figure 3 as shown in .

[0067] The relevant modules involved in the present invention are all hardware system modules or functional modules that combine computer software programs or protocols with hardware in the prior art. The computer software programs or protocols involved in the functional modules are themselves technologies well known to those skilled in the art and are not improvements of the present system. The improvements of the present system are the interaction or connection relationships between the modules, that is, improvements to the overall structure of the system to solve the corresponding technical problems to be solved by the present system.

[0068] The specific implementation modes of the present invention are described in detail above in conjunction with the accompanying drawings, but the present invention is not limited to the above implementation modes, and various changes can be made within the knowledge scope of ordinary technicians in this field without departing from the purpose of the present invention.

Claims

1. A Pedersen secret sharing multi-party aggregate access control method based on blockchain, characterized by: Step 1: The three parties generate their respective commitments DC-1 / DC-2 / DC-3 according to formula (1); DC-i=mi*G+seedi*H (1) Step 2: The three parties privately generate blinding factors r1, r2, and r3, and make r1*H, r2*H, and r3*H public to each other and use them as the blinding factors r i The public key R i , i∈{1,2,3}; Step 3: According to their respective public keys R i , make a message commitment: Sum DC=Hash(R1||R2||R3||DC) (2) The three parties then sign the calculated aggregate commitment, represented by: SigM-i = r i +SumDC*prkey i , where prkey i is the private key of each party; After that, all parties will share the information i Public, and the random number seed used by itself i Delivered to the verification smart contract on the private channel, i∈{1,2,3}; Step 4: Each party submits the signature of the transaction to the last party to sign for aggregate signature: SigM=SigM-1+SigM-2+SigM-3 (3) Step 5: After the aggregate signature is completed, the last signing party will submit a single signature pair (R, SigM, DC) to the verification smart contract, where R = R1+R2+R3.

Images