Cryptographic-based digital signature verification method and system

Abstract

The application provides a cryptography-based digital signature verification method and system, and relates to the technical field of information security. The method comprises the following steps: a first key generation platform performs collaborative encryption verification on a second key generation platform; if the verification is successful, a predetermined data digest is obtained; a first key is obtained, the first key comprising a first private key and a first public key; a digital signature is generated; a decrypted digest is obtained; and the decrypted digest and the predetermined data digest are compared and verified. The technical problem that, in the prior art, the key setting for generating a digital signature is relatively simple, which leads to relatively simple key security and easy cracking, and thus leads to low data transmission security, is solved. The key generated based on a search optimization algorithm has stronger randomness, which reduces the regularity of the key, improves the key security, and thus improves the security of data transmission.

Description

Technical Field

[0001] This application relates to the field of information security technology, specifically to a cryptographic-based digital signature verification method and system. Background Technology

[0002] With the development of information security technology, digital signatures have emerged to achieve functions such as anti-counterfeiting and identity verification. Information is signed using a private key, and the data recipient decrypts it using the corresponding key, thus preventing data alteration. However, existing technologies suffer from a problem: the private key used to generate digital signatures is relatively simple, leading to weak key security, vulnerability to cracking, and consequently, lower data transmission security. Summary of the Invention

[0003] This application provides a cryptographic-based digital signature verification method and system to solve the technical problem in the prior art where the private key settings for generating digital signatures are relatively simple, resulting in simple key security, easy cracking, and thus low data transmission security.

[0004] According to a first aspect of this application, a cryptographic-based digital signature verification method is provided, comprising: when a first key generation platform receives predetermined transmission data, the first key generation platform performs collaborative encryption verification with a second key generation platform; if the verification is successful, the first key generation platform generates a digest of the predetermined transmission data based on a hash algorithm to obtain a predetermined data digest; the second key generation platform performs key search optimization through an encryption algorithm to obtain a first key, the first key including a first private key and a first public key; the predetermined data digest is encrypted with the first private key to generate a digital signature; when the first key generation platform decrypts the digital signature using the first public key, a decryption digest is obtained; the decryption digest is compared and verified with the predetermined data digest, and if the decryption digest matches the predetermined data digest, the verification passes.

[0005] According to a second aspect of this application, a cryptographic-based digital signature verification system is provided, comprising: a collaborative encryption verification module, wherein when a first key generation platform receives predetermined transmission data, the first key generation platform performs collaborative encryption verification with a second key generation platform; a digest generation module, wherein if verification is successful, the first key generation platform generates a digest of the predetermined transmission data based on a hash algorithm to obtain a predetermined data digest; a key search and optimization module, wherein the key search and optimization module performs key search and optimization using an encryption algorithm in the second key generation platform to obtain a first key, the first key including a first private key and a first public key; a digital signature generation module, wherein the digital signature generation module encrypts the predetermined data digest with the first private key to generate a digital signature; a decryption module, wherein when the first key generation platform decrypts the digital signature using the first public key, a decryption digest is obtained; and a comparison and verification module, wherein the comparison and verification module compares and verifies the decryption digest with the predetermined data digest, and if the decryption digest matches the predetermined data digest, the verification passes.

[0006] According to a third aspect of this application, an electronic device is provided, the electronic device including a memory and a processor, the memory storing a computer program, the computer program being executed by the processor of the steps in the first aspect.

[0007] According to a fourth aspect of this application, a computer-readable storage medium is provided, wherein a computer program is stored therein, and the computer program is executed by a processor of the steps in the first aspect.

[0008] The beneficial effects achievable by adopting one or more technical solutions in this application are as follows:

[0009] When the first key generation platform receives the predetermined transmission data, it performs collaborative encryption verification with the second key generation platform. If the verification is successful, the first key generation platform generates a digest of the predetermined transmission data based on a hash algorithm, obtaining a predetermined data digest. Then, it performs key search and optimization using the encryption algorithm in the second key generation platform to obtain a first key, which includes a first private key and a first public key. The first private key is used to encrypt the predetermined data digest, generating a digital signature. When the first key generation platform decrypts the digital signature using the first public key, it obtains a decryption digest. The decryption digest is compared and verified with the predetermined data digest. If the decryption digest matches the predetermined data digest, the verification passes. This process, based on the search and optimization algorithm, generates a key with stronger randomness, achieving the technical effect of reducing key regularity, improving key security, and thus enhancing the security of data transmission. Attached Figure Description

[0010] To more clearly illustrate the technical solutions in this application or the prior art, the accompanying drawings used in the description of the embodiments or the prior art will be briefly introduced below. The accompanying drawings, which constitute a part of this application, are used to provide a further understanding of this application. The illustrative embodiments of this application and their descriptions are used to explain this application and do not constitute an improper limitation of this application. For those skilled in the art, other drawings can be obtained based on the provided drawings without creative effort.

[0011] Figure 1 A flowchart illustrating the cryptography-based digital signature verification method provided in this application embodiment;

[0012] Figure 2 A schematic diagram of the structure of a cryptography-based digital signature verification system provided in this application embodiment;

[0013] Figure 3 This is a schematic diagram of the structure of an electronic device provided in an embodiment of this application.

[0014] Figure reference numerals: Collaborative encryption verification module 11, digest generation module 12, key search and optimization module 13, digital signature generation module 14, decryption module 15, comparison and verification module 16, electronic device 300, memory 301, processor 302, communication interface 303, bus architecture 304. Detailed Implementation

[0015] To make the objectives, technical solutions, and advantages of this application more apparent, exemplary embodiments of this application will be described in detail below with reference to the accompanying drawings. Obviously, the described embodiments are merely some embodiments of this application, and not all embodiments of this application. It should be understood that this application is not limited to the exemplary embodiments described herein.

[0016] The terminology used in this specification is for describing embodiments and not for limiting the application. As used in the specification, the singular terms “a,” “an,” and “the” are intended to include the plural forms as well, unless the context clearly indicates otherwise. When used in the specification, the terms “comprising” and / or “including” specify the presence of a step, operation, element, and / or component, but do not preclude the presence or addition of one or more other steps, operations, elements, components, and / or groups thereof.

[0017] Unless otherwise defined, all terms used in this specification (including technical and scientific terms) shall have the same meaning as commonly understood by one of ordinary skill in the art to which this application pertains. Terms, as defined in common dictionaries, shall not be interpreted in an idealized or overly formal sense unless expressly defined herein. Throughout this specification, the same reference numerals denote the same elements.

[0018] It should be noted that the user information (including but not limited to user device information, user personal information, etc.) and data (including but not limited to data used for display, data used for analysis, etc.) involved in this application are all information and data authorized by the user or fully authorized by all parties.

[0019] Example 1

[0020] Figure 1 A diagram illustrating a cryptographic-based digital signature verification method provided in this application embodiment is shown. The method includes:

[0021] When the first key generation platform receives the predetermined transmission data, the first key generation platform performs collaborative encryption verification with the second key generation platform;

[0022] This application provides a cryptographic-based digital signature verification method applied to a cryptographic-based digital signature verification system. The system executes the method and includes a first key generation platform and a second key generation platform, which serve as servers for data encryption. In other words, this application embodiment utilizes the collaboration between the first and second key generation platforms to perform digital signature verification, thereby enhancing data transmission security.

[0023] When the first key generation platform receives the predetermined transmission data, it performs collaborative encryption verification with the second key generation platform. That is, the first key generation platform and the second key generation platform need to perform authorization verification before jointly generating a digital signature to improve data security.

[0024] In a preferred embodiment, it further includes:

[0025] The first key generation platform sends a collaborative encryption request to the second key generation platform. After receiving the collaborative encryption request, the second key generation platform generates initial verification information and sends it to the first key generation platform. The initial verification information is a randomly generated random number. The first key generation platform performs a digital signature based on the initial verification, obtains a verification signature, and returns it to the second key generation platform. The second key generation platform parses the returned information to obtain parsed verification information, compares the parsed verification information with the initial verification information, and obtains a verification result.

[0026] In a preferred embodiment, it further includes:

[0027] The parsed verification information is a random number extracted from the returned information; the parsed verification information and the initial verification information are compared for consistency, and the consistency includes 0 and 1; if the consistency is 0, the verification result is verification failure, and the second key generation platform rejects the collaborative encryption request; if the consistency is 1, the verification result is verification success, and the second key generation platform agrees to the collaborative encryption request.

[0028] Specifically, the scheduled transmission data is determined by the user and uploaded to the first key generation platform. When the first key generation platform receives the scheduled transmission data, it sends a collaborative encryption request to the second key generation platform. Upon receiving the collaborative encryption request, the second key generation platform generates initial verification information, which is a randomly generated random number, and sends this initial verification information back to the first key generation platform. This initial verification information is used to ensure basic security and authentication between the first and second key generation platforms before they begin generating keys for encrypted data. Further, the first key generation platform uses the initial verification information to perform a digital signature. This digital signature ensures the integrity and source authentication of the initial verification information. A public key is generated simultaneously with the digital signature. The verification signature is obtained and returned to the second key generation platform. The second key generation platform parses the returned information; that is, the user decrypts the verification signature using the public key to obtain the parsed verification information. Finally, the parsed verification information is compared with the initial verification information. If the parsed verification information matches the initial verification information, the verification is successful; otherwise, the verification fails. This process obtains the verification result, improving the credibility and security of the encryption process.

[0029] Specifically, the process of comparing the parsed verification information with the initial verification information to obtain the verification result is as follows:

[0030] The parsed verification information is a random number extracted from the returned information, specifically a random number extracted after decrypting the digital signature in the returned information using the public key. A consistency comparison is performed between the parsed verification information and the initial verification information. This consistency includes 0 and 1; if the parsed verification information and the initial verification information are the same, the consistency is 1; otherwise, the consistency is 0. If the consistency is 0, the verification result is verification failure, and the second key generation platform rejects the collaborative encryption request. If the consistency is 1, the verification result is verification success, and the second key generation platform agrees to the collaborative encryption request. Collaborative encryption can then be performed through both the first and second key generation platforms, improving encryption security.

[0031] If the verification is successful, the first key generation platform generates a digest of the predetermined transmission data based on a hash algorithm to obtain a predetermined data digest.

[0032] Specifically, if the verification is successful, the first key generation platform generates a digest of the predetermined transmission data based on a hash algorithm to obtain a predetermined data digest. The hash algorithm converts data of arbitrary length into a hash value of fixed length. This hash value serves as the predetermined data digest and can be used to verify the integrity and uniqueness of the data. The specific acquisition process is detailed below.

[0033] In a preferred embodiment, it further includes:

[0034] The first key generation platform embeds multiple hash algorithms with security strength identifiers and processing efficiency identifiers; obtains the predetermined confidentiality level and data volume of the predetermined transmission data; based on the predetermined confidentiality level and data volume, and in combination with the security strength identifier and processing efficiency identifier, matches the hash algorithms to obtain a matching hash algorithm; and uses the matching hash algorithm to generate a digest of the predetermined transmission data to obtain the predetermined data digest.

[0035] Specifically, the first key generation platform embeds multiple hash algorithms with security strength and processing efficiency indicators, all of which are existing hash algorithms such as MD2, MD4, MD5, and SHA-1. The predetermined confidentiality level and data volume of the predetermined transmission data are obtained. The predetermined confidentiality level is set by the user, and the data volume needs to be determined based on actual conditions. Based on the predetermined confidentiality level and data volume, hash algorithms are matched using the security strength and processing efficiency indicators. The higher the predetermined confidentiality level, the stronger the security strength indicator of the hash algorithm is selected; the larger the data volume, the faster the processing efficiency indicator of the hash algorithm is selected. This yields a matching hash algorithm, which is used to generate a digest of the predetermined transmission data, providing support for subsequent digital signature verification.

[0036] In a preferred embodiment, it further includes:

[0037] Multiple hash algorithms are obtained using data mining techniques; the hash value length records, data processing rate records, and resource usage records of the multiple hash algorithms are retrieved; the first storage space of the first key generation platform is obtained, and algorithm filtering is performed based on the first storage space and resource usage records to obtain the target hash algorithm; the average hash value length and average processing efficiency are calculated based on the hash value length records and the data processing rate records to obtain the security strength identifier and the processing efficiency identifier.

[0038] Multiple hash algorithms are obtained using data mining techniques. These algorithms are existing, previously used hash algorithms, such as MD2, MD4, MD5, and SHA-1. Further, the hash value length records, data processing rate records, and resource usage records of these algorithms are retrieved. Specifically, these records can be obtained by retrieving historical usage records of the hash algorithms. The resource usage record refers to the storage space usage record. The first storage space of the first key generation platform is obtained; this first storage space is the available space for data storage. Algorithm selection is performed based on the first storage space and the resource usage record, selecting hash algorithms with a first storage space larger than the resource usage record as target hash algorithms. Then, the average hash value length and average processing efficiency are calculated based on the hash value length records and data processing rate records. The security strength identifier and processing efficiency identifier are generated using the average calculation results. This provides a basis for subsequent hash algorithm selection.

[0039] The first key is obtained by searching and optimizing the key through the encryption algorithm in the second key generation platform. The first key includes a first private key and a first public key.

[0040] In a preferred embodiment, it further includes:

[0041] A first initial key is obtained by randomly generating a key using an encryption algorithm in a second key generation platform. The first initial key includes a first initial private key and a first initial public key. Key attack samples are collected. The first initial key is then subjected to attack and cracking simulation using the key attack samples. Based on the attack simulation results, the key is updated and optimized to obtain the first key.

[0042] In a preferred embodiment, it further includes:

[0043] The network protocol and network architecture of the second key generation platform are collected to establish a digital twin key generation platform; the first initial key in the digital twin key generation platform is attacked using the key attack sample; if the test result is that the attack fails, the first key is generated using the first initial key; if the test result is that the attack succeeds, the first initial key is randomly updated, and a second initial key is obtained for attack testing until the test result is that the attack fails; wherein, the key attack sample is multiple attack samples with different attack strengths.

[0044] The first key is obtained by searching and optimizing the key through the encryption algorithm in the second key generation platform. The first key includes a first private key and a first public key. The specific method for obtaining the first key is detailed below.

[0045] Specifically, in the second key generation platform, a first initial key is randomly generated using an encryption algorithm. This key includes a first initial private key and a first initial public key, which are used for the generation and decryption verification of digital signatures. Key attack samples are collected based on existing technology. These samples may include already encrypted or decrypted data, as well as attack samples attempting to crack the key. The collected key attack samples are used to simulate attacks on the first initial key; that is, by simulating the attack behavior of the attack samples, attempts are made to crack the first initial key. Based on the attack simulation results, the first initial key is updated and optimized, including modifying the private or public key to increase the difficulty of cracking. After updating and optimization, a first key is obtained, which has higher security and can better resist key attacks.

[0046] A first initial key is obtained by randomly generating a key using an encryption algorithm in a second key generation platform. The first initial key includes a first initial private key and a first initial public key. Key attack samples are collected. The first initial key is then subjected to attack and cracking simulation using the key attack samples. Based on the attack simulation results, the key is updated and optimized to obtain the first key.

[0047] Using existing network scanning tools or related technologies, obtain network protocol information of the second key generation platform, including the type of network protocol used, port number, and transport layer protocol. Using existing network topology analysis tools or related technologies, obtain network architecture information of the second key generation platform, including network devices, network connections, and network routing. Based on the collected network protocol and architecture information, construct a digital twin key generation platform similar to the second key generation platform. This platform should be able to simulate the network environment and behavior of the second key generation platform for subsequent attack testing. Further, use multiple attack samples with varying attack strengths to attack the first initial key within the digital twin key generation platform. If the attack fails, it indicates that the first initial key has a certain level of security and can be used as the first key. If the attack succeeds, it indicates that the first initial key has security vulnerabilities. In this case, the first initial key can be randomly updated to generate a new initial key, which is designated as the second initial key.

[0048] The key attack samples are multiple attack samples with different attack strengths. This means that during the attack testing process, samples with different attack strengths are used for testing to improve the effectiveness of the attack testing.

[0049] The updated second initial key is then tested again. If the attack is still successful, random updates and attack tests continue until the test fails. By using the above method, a relatively secure first key can be obtained, thereby improving the security of data transmission.

[0050] The predetermined data digest is encrypted using the first private key to generate a digital signature;

[0051] The predetermined data digest is encrypted using the first private key. This step is a common technique used by those skilled in the art and will not be elaborated here, thereby generating a digital signature.

[0052] When the first key generation platform decrypts the digital signature using the first public key, it obtains the decryption digest;

[0053] The decryption digest is compared and verified with the predetermined data digest. If the decryption digest matches the predetermined data digest, the verification passes.

[0054] When the first key generation platform decrypts the digital signature using the first public key to obtain a decryption digest, it compares and verifies the decryption digest with the predetermined data digest. If the decryption digest matches the predetermined data digest, the verification passes and the first key generation platform can extract the predetermined transmission data; otherwise, the verification fails.

[0055] Based on the above analysis, the beneficial effects that one or more technical solutions provided in this application can achieve are as follows:

[0056] When the first key generation platform receives the predetermined transmission data, it performs collaborative encryption verification with the second key generation platform. If the verification is successful, the first key generation platform generates a digest of the predetermined transmission data based on a hash algorithm, obtaining a predetermined data digest. Then, it performs key search and optimization using the encryption algorithm in the second key generation platform to obtain a first key, which includes a first private key and a first public key. The first private key is used to encrypt the predetermined data digest, generating a digital signature. When the first key generation platform decrypts the digital signature using the first public key, it obtains a decryption digest. The decryption digest is compared and verified with the predetermined data digest. If the decryption digest matches the predetermined data digest, the verification passes. This method utilizes different key generation platforms to search and optimize keys, thereby reducing key regularity, improving key security, and ultimately enhancing the security of data transmission.

[0057] Example 2

[0058] Based on the same inventive concept as the cryptography-based digital signature verification method in the foregoing embodiments, such as Figure 2 As shown, this application also provides a cryptographic-based digital signature verification system, the system comprising:

[0059] The collaborative encryption verification module 11 is used to perform collaborative encryption verification between the first key generation platform and the second key generation platform when the first key generation platform receives predetermined transmission data.

[0060] The digest generation module 12 is used to generate a digest of the predetermined transmission data based on a hash algorithm if the verification is successful, so as to obtain a predetermined data digest.

[0061] The key search and optimization module 13 is used to perform key search and optimization through the encryption algorithm in the second key generation platform to obtain a first key, the first key including a first private key and a first public key.

[0062] Digital signature generation module 14, which uses the first private key to encrypt the predetermined data digest and generate a digital signature;

[0063] Decryption module 15, the decryption module 15 is used to obtain a decryption digest when the first key generation platform decrypts the digital signature using the first public key;

[0064] The comparison and verification module 16 is used to compare and verify the decryption digest with the predetermined data digest. If the decryption digest is consistent with the predetermined data digest, the verification is successful.

[0065] Furthermore, the collaborative encryption verification module 11 also includes:

[0066] The first key generation platform sends a collaborative encryption request to the second key generation platform. After receiving the collaborative encryption request, the second key generation platform generates initial verification information and sends it to the first key generation platform. The initial verification information is a randomly generated random number.

[0067] The first key generation platform performs digital signing based on the initial verification, obtains a verification signature, and returns it to the second key generation platform;

[0068] The second key generation platform parses the returned information to obtain parsed verification information, and compares the parsed verification information with the initial verification information to obtain the verification result.

[0069] Furthermore, the collaborative encryption verification module 11 also includes:

[0070] The parsed verification information is a random number extracted from the returned information;

[0071] The parsed verification information and the initial verification information are compared for consistency, where consistency includes 0 and 1;

[0072] If the consistency is 0, the verification result is a verification failure, and the second key generation platform rejects the collaborative encryption request;

[0073] If the consistency is 1, the verification result is successful, and the second key generation platform agrees to the collaborative encryption request.

[0074] Furthermore, the first encryption algorithm 12 also includes:

[0075] Obtain the data encryption reference conditions for the predetermined transmitted data, wherein the data encryption reference conditions include data type and data source;

[0076] The encryption level is matched with the data encryption reference conditions, and when the encryption level meets the predetermined encryption level threshold, an encryption start command is generated.

[0077] The encryption start command controls the first key generation platform to search and optimize the predetermined transmission data using the first encryption template, thereby generating the first encryption private key.

[0078] Furthermore, the summary generation module 12 also includes:

[0079] The first key generation platform embeds multiple hash algorithms with security strength and processing efficiency indicators;

[0080] Obtain the predetermined confidentiality level and data volume of the predetermined transmission data;

[0081] Based on the predetermined confidentiality level and data volume, and in conjunction with the security strength identifier and processing efficiency identifier, a hash algorithm is matched to obtain the matching hash algorithm.

[0082] The predetermined data digest is obtained by generating a digest of the predetermined data using the matching hash algorithm.

[0083] Furthermore, the summary generation module 12 also includes:

[0084] Multiple hash algorithms were obtained based on data mining techniques;

[0085] Retrieve the hash value length records, data processing rate records, and resource usage records of the multiple hash algorithms;

[0086] Obtain the first storage space of the first key generation platform, and perform algorithm filtering based on the first storage space and resource usage records to obtain the target hash algorithm;

[0087] Based on the hash value length record and the data processing rate record, the average hash value length and the average processing efficiency are calculated to obtain the security strength identifier and the processing efficiency identifier.

[0088] Furthermore, the key search and optimization module 13 also includes:

[0089] The first initial key is obtained by randomly generating a key using the encryption algorithm in the second key generation platform. The first initial key includes a first initial private key and a first initial public key.

[0090] Collect key attack samples;

[0091] The first initial key is simulated by attacking the key with the key attack sample. The key is then updated and optimized based on the attack simulation results to obtain the first key.

[0092] Furthermore, the key search and optimization module 13 also includes:

[0093] Collect the network protocol and network architecture of the second key generation platform to establish a digital twin key generation platform;

[0094] The attack sample is used to test the first initial key in the digital twin key generation platform. If the test result is an attack failure, the first key is generated using the first initial key.

[0095] If the test result is a successful attack, the first initial key is randomly updated, and a second initial key is obtained for attack testing, until the test result is a failed attack.

[0096] The key attack samples are multiple attack samples with different attack strengths.

[0097] The specific example of the cryptography-based digital signature verification method in Embodiment 1 above is also applicable to the cryptography-based digital signature verification system in this embodiment. Through the detailed description of the cryptography-based digital signature verification method above, those skilled in the art can clearly understand the cryptography-based digital signature verification system in this embodiment. Therefore, for the sake of brevity, it will not be described in detail here.

[0098] Example 3

[0099] Based on the same inventive concept as the cryptography-based digital signature verification method in the foregoing embodiments, such as Figure 3 As shown, this application also provides an electronic device 300, which includes a memory 301 and a processor 302. The memory 301 stores a computer program, and when the calculator program is executed by the processor 302, it implements the steps of a method of the embodiment.

[0100] The electronic device 300 includes a processor 302, a communication interface 303, and a memory 301. Optionally, the electronic device 300 may also include a bus architecture 304. The communication interface 303, processor 302, and memory 301 can be interconnected via the bus architecture 304; the bus architecture 304 can be a peripheral component interconnect (PCI) bus or an extended industry standard architecture (EISA) bus, etc. The bus architecture 304 can be divided into an address bus, a data bus, a control bus, etc. For ease of representation, Figure 3 The bus is represented by a single thick line, but this does not mean that there is only one bus or one type of bus.

[0101] Processor 302 may be a CPU, microprocessor, ASIC, or one or more integrated circuits used to control the execution of programs according to the present application.

[0102] Communication interface 303 uses any transceiver-like device for communicating with other devices or communication networks, such as Ethernet, radio access network (RAN), wireless local area network (WLAN), wired access network, etc.

[0103] Memory 301 can be ROM or other types of static storage devices capable of storing static information and instructions, RAM or other types of dynamic storage devices capable of storing information and instructions, or electrically erasable programmable read-only memory (EEPROM), compact disc read-only memory (CD ROM) or other optical disc storage, optical disc storage (including compressed optical discs, laser discs, optical discs, digital universal optical discs, Blu-ray discs, etc.), magnetic disk storage media or other magnetic storage devices, or any other medium capable of carrying or storing desired program code in the form of instructions or data structures and accessible by a computer, but not limited thereto. Memory can exist independently and be connected to the processor via bus architecture 304. Memory can also be integrated with the processor.

[0104] The memory 301 stores computer execution instructions for implementing the scheme of this application, and the processor 302 controls the execution. The processor 302 executes the computer execution instructions stored in the memory 301 to implement the steps of the method in the above embodiment one of this application.

[0105] Example 4

[0106] Based on the same inventive concept as the cryptography-based digital signature verification method in the foregoing embodiments, this application also provides a computer-readable storage medium storing a computer program, which, when executed by a processor, implements the steps of the method in Embodiment 1.

[0107] It should be understood that various forms of processes shown above can be used, with steps rearranged, added, or deleted, as long as the desired result of the technical solution disclosed in this application can be achieved, and this document does not impose any restrictions.

[0108] Note that the above are merely preferred embodiments and the technical principles employed in this application. Those skilled in the art will understand that this application is not limited to the specific embodiments described herein, and various obvious changes, readjustments, and substitutions can be made without departing from the scope of protection of this application. Therefore, although this application has been described in detail through the above embodiments, this application is not limited to the above embodiments, and may include many other equivalent embodiments without departing from the concept of this application, the scope of which is determined by the scope of the appended claims.

Claims

1. A cryptographic-based digital signature verification method, characterized in that, An application is made in a cryptographic-based digital signature verification system, the system comprising a first key generation platform and a second key generation platform, the method comprising: When the first key generation platform receives the predetermined transmission data, the first key generation platform performs collaborative encryption verification with the second key generation platform; If the verification is successful, the first key generation platform generates a digest of the predetermined transmission data based on a hash algorithm to obtain a predetermined data digest. The first key is obtained by searching and optimizing the key using the encryption algorithm in the second key generation platform. The first key includes a first private key and a first public key, specifically including: The first initial key is obtained by randomly generating a key using the encryption algorithm in the second key generation platform. The first initial key includes a first initial private key and a first initial public key. Collect key attack samples; The first initial key is simulated to be attacked and cracked using the key attack sample. The key is then updated and optimized based on the attack simulation results to obtain the first key. The process includes simulating an attack on the first initial key using the key attack sample, updating and optimizing the key based on the attack simulation results, and obtaining the first key, including: Collect the network protocol and network architecture of the second key generation platform to establish a digital twin key generation platform; The attack sample is used to test the first initial key in the digital twin key generation platform. If the test result is that the attack fails, the first key is generated using the first initial key. The second key generation platform encrypts the predetermined data digest using the first private key to generate a digital signature; The first key generation platform decrypts the digital signature using the first public key to obtain a decryption digest; The decryption digest is compared and verified with the predetermined data digest. If the decryption digest matches the predetermined data digest, the verification passes.

2. The method as described in claim 1, characterized in that, When the first key generation platform receives the predetermined transmission data, the first key generation platform performs collaborative encryption verification with the second key generation platform, including: The first key generation platform sends a collaborative encryption request to the second key generation platform. After receiving the collaborative encryption request, the second key generation platform generates initial verification information and sends it to the first key generation platform. The initial verification information is a randomly generated random number. The first key generation platform performs digital signing based on the initial verification, obtains a verification signature, and returns it to the second key generation platform; The second key generation platform parses the returned information to obtain parsed verification information, and compares the parsed verification information with the initial verification information to obtain the verification result.

3. The method as described in claim 2, characterized in that, The step of comparing the parsed verification information and the initial verification information to obtain the verification result includes: The parsed verification information is a random number extracted from the returned information; The parsed verification information and the initial verification information are compared for consistency, where consistency includes 0 and 1; If the consistency is 0, the verification result is a verification failure, and the second key generation platform rejects the collaborative encryption request; If the consistency is 1, the verification result is successful, and the second key generation platform agrees to the collaborative encryption request.

4. The method as described in claim 1, characterized in that, The first key generation platform generates a digest of the predetermined transmission data based on a hash algorithm, resulting in a predetermined data digest, including: The first key generation platform embeds multiple hash algorithms with security strength and processing efficiency indicators; Obtain the predetermined confidentiality level and data volume of the predetermined transmission data; Based on the predetermined confidentiality level and data volume, and in conjunction with the security strength identifier and processing efficiency identifier, a hash algorithm is matched to obtain the matching hash algorithm. The predetermined data digest is obtained by generating a digest of the predetermined data using the matching hash algorithm.

5. The method as described in claim 4, characterized in that, The method further includes: Multiple hash algorithms were obtained based on data mining techniques; Retrieve the hash value length records, data processing rate records, and resource usage records of the multiple hash algorithms; Obtain the first storage space of the first key generation platform, and perform algorithm filtering based on the first storage space and resource usage records to obtain the target hash algorithm; Based on the hash value length record and the data processing rate record, the average hash value length and the average processing efficiency are calculated to obtain the security strength identifier and the processing efficiency identifier.

6. The method as described in claim 1, characterized in that, The step of simulating an attack on the first initial key using the key attack sample, and updating and optimizing the key based on the attack simulation results to obtain the first key includes: If the test result is a successful attack, the first initial key is randomly updated, and a second initial key is obtained for attack testing, until the test result is a failed attack. The key attack samples are multiple attack samples with different attack strengths.

7. A cryptographic-based digital signature verification system, characterized in that, The system is used to perform the steps of the method according to any one of claims 1 to 6, the system comprising a first key generation platform and a second key generation platform, the system comprising: A collaborative encryption verification module is used to perform collaborative encryption verification between the first key generation platform and the second key generation platform when the first key generation platform receives predetermined transmission data. The digest generation module is used to generate a digest of the predetermined transmission data based on a hash algorithm if the verification is successful, so as to obtain a predetermined data digest. A key search and optimization module is used to perform key search and optimization through the encryption algorithm in the second key generation platform to obtain a first key, the first key including a first private key and a first public key; A digital signature generation module, which uses the first private key to encrypt the predetermined data digest and generate a digital signature; A decryption module, used to obtain a decryption digest when the first key generation platform decrypts the digital signature using the first public key; The comparison and verification module is used to compare and verify the decryption digest with the predetermined data digest. If the decryption digest is consistent with the predetermined data digest, the verification is successful.

8. An electronic device, characterized in that, The electronic device includes a memory and a processor, wherein the memory stores a computer program that, when executed by the processor, implements the steps of any one of claims 1-6.

9. A computer-readable storage medium, characterized in that, The computer-readable storage medium stores a computer program that, when executed by a processor, implements the steps of any one of claims 1-6.

Images