Mail receiving and sending method and device, equipment and storage medium

Abstract

The invention discloses a mail receiving and sending method, device and equipment and a storage medium, and belongs to the technical field of privacy computing, and the method comprises the steps that a mail sender signcrypts a mail plaintext according to a system public parameter, a sending timestamp, a first identity label, a first private key, a second identity label and a second public key of an E-mail system, and sends the mail plaintext to a server; obtaining a mail ciphertext; the mail sender sends the first identity, the first public key, the sending timestamp and the mail ciphertext to the mail receiver through the mail receiving and sending base station; the mail receiver receives the first identity, the first public key, the sending timestamp and a mail aggregation ciphertext corresponding to the mail ciphertext, and performs signcryption verification on the mail aggregation ciphertext; and when it is determined that the mail aggregation ciphertext passes signcryption verification, the mail receiver decrypts the mail aggregation ciphertext according to the system public parameter, the second identity, the second private key and mail information corresponding to the mail aggregation ciphertext to obtain a mail plaintext sent by the mail sender.

Description

Technical Field

[0001] The present invention relates to the field of privacy computing technology, and in particular to a method, device, equipment and storage medium for sending and receiving emails. Background Art

[0002] As an indispensable communication software in the process of informatization, the email system is widely used by individual users or enterprises due to its characteristics of asynchrony, versatility and ease of use. Since emails often involve users' personal privacy information and even commercial secrets, email systems have very high security requirements and require reliable technical means to prevent the risk of privacy leakage.

[0003] However, the existing information encryption and information signing methods used in email systems have slow encryption speeds when facing emails with large contents, and the information needs to be signed separately, resulting in low email transmission efficiency and high computing costs. Summary of the invention

[0004] The present invention provides a mail sending and receiving method, device, equipment and storage medium, so as to reduce the computing cost in the mail transmission process and improve the mail transmission efficiency while ensuring the security of personal privacy information in the mail.

[0005] According to one aspect of the present invention, a method for sending and receiving mails is provided, the method comprising:

[0006] The email sender signs and encrypts the email plaintext according to the system public parameters of the email system, the sending timestamp, the first identity identifier and the first key pair of the email sender, and the second identity identifier and the second key pair of the email receiver to obtain the email ciphertext; wherein the first key pair includes the first private key and the first public key; the second key pair includes the second private key and the second public key;

[0007] The email sender sends the first identity identifier, the first public key, the sending timestamp and the email ciphertext to the email receiver via the email sending and receiving base station;

[0008] The email recipient receives the first identity identifier, the first public key, the sending timestamp, and the email aggregate ciphertext corresponding to the email ciphertext, and performs signcryption verification on the email aggregate ciphertext;

[0009] When it is determined that the mail aggregation ciphertext passes the signcryption verification, the mail recipient decrypts the mail aggregation ciphertext according to the system public parameters, the second identity identifier, the second private key and the mail information corresponding to the mail aggregation ciphertext to obtain the mail plaintext sent by the mail sender.

[0010] According to another aspect of the present invention, there is provided a mail sending and receiving device, the device comprising:

[0011] The email ciphertext determination module is used for the email sender to sign the email plaintext according to the system public parameters of the email system, the sending timestamp, the first identity identifier and the first key pair of the email sender, and the second identity identifier and the second key pair of the email receiver to obtain the email ciphertext; wherein the first key pair includes a first private key and a first public key; the second key pair includes a second private key and a second public key;

[0012] The mail ciphertext sending module is used for the mail sender to send the first identity identifier, the first public key, the sending timestamp and the mail ciphertext to the mail receiver via the mail transceiver base station;

[0013] The signcryption verification module is used for the email recipient to receive the first identity identifier, the first public key, the sending timestamp, and the email aggregate ciphertext corresponding to the email ciphertext, and perform signcryption verification on the email aggregate ciphertext;

[0014] The ciphertext decryption module is used to decrypt the email aggregation ciphertext according to the system public parameters, the second identity identifier, the second private key and the email information corresponding to the email aggregation ciphertext to obtain the email plaintext sent by the email sender when it is determined that the email aggregation ciphertext has passed the signcryption verification.

[0015] According to another aspect of the present invention, an electronic device is provided, the electronic device comprising:

[0016] at least one processor; and

[0017] a memory communicatively connected to at least one processor; wherein,

[0018] The memory stores a computer program that can be executed by at least one processor. The computer program is executed by at least one processor so that the at least one processor can execute the mail sending and receiving method of any embodiment of the present invention.

[0019] According to another aspect of the present invention, a computer-readable storage medium is provided, wherein the computer-readable storage medium stores computer instructions, and the computer instructions are used to enable a processor to implement the mail sending and receiving method of any embodiment of the present invention when executed.

[0020] According to another aspect of the present invention, a computer program product is provided, including a computer program. When the computer program is executed by a processor, the email sending and receiving method according to any embodiment of the present invention is implemented.

[0021] According to the technical solution of the embodiment of the present invention, the email sender signs and encrypts the email plaintext according to the system public parameters of the email system, the sending timestamp, the first identity identifier and the first key pair of the email sender, and the second identity identifier and the second key pair of the email receiver to obtain the email ciphertext; wherein the first key pair includes the first private key and the first public key; the second key pair includes the second private key and the second public key; the email sender sends the first identity identifier, the first public key, the sending timestamp and the email ciphertext to the email receiver via the email transceiver base station; the email receiver receives the first identity identifier, the first public key, the sending timestamp, and the email aggregate ciphertext corresponding to the email ciphertext, and performs sign and encrypt verification on the email aggregate ciphertext; when it is determined that the email aggregate ciphertext passes the sign and encrypt verification, the email receiver decrypts the email aggregate ciphertext according to the system public parameters, the second identity identifier, the second private key and the email information corresponding to the email aggregate ciphertext to obtain the email plaintext sent by the email sender. The above technical solution realizes encryption and signing of email plaintext at the same time through the signcryption technology, without the need to encrypt and sign the email plaintext separately, thereby reducing the computing cost in the email transmission process, improving the processing efficiency of the email plaintext, and further improving the email transmission efficiency; secondly, the email sender uses its own personal identity and personal private key, as well as the personal identity and personal public key of the email receiver to sign the email plaintext, so that only the email receiver with the corresponding private key can decrypt the email ciphertext and view the email content, thereby avoiding the leakage of the email content during the email transmission process, ensuring the security of personal privacy information in the email, and improving the security of the email content during the email transmission process; then, with the help of the aggregate signcryption technology, multiple email ciphertexts sent to the same email receiver are aggregated into an email aggregate ciphertext, which is sent to the email receiver at one time, further improving the email transmission efficiency; then, the email receiver performs signcryption verification on the email aggregate ciphertext, and when it is determined that the email aggregate ciphertext passes the signcryption verification, the email aggregate ciphertext is decrypted to obtain the email plaintext sent by the email sender, thereby ensuring the authenticity and integrity of the email.

[0022] It should be understood that the contents described in this section are not intended to identify the key or important features of the embodiments of the present invention, nor are they intended to limit the scope of the present invention. Other features of the present invention will become easily understood through the following description. BRIEF DESCRIPTION OF THE DRAWINGS

[0023] In order to more clearly illustrate the technical solutions in the embodiments of the present invention, the following briefly introduces the drawings required for use in the description of the embodiments. Obviously, the drawings described below are only some embodiments of the present invention. For ordinary technicians in this field, other drawings can be obtained based on these drawings without creative work.

[0024] Figure 1Ais a relationship topology diagram between entities in an email system according to an embodiment of the present invention;

[0025] Figure 1B is a flow chart of a method for sending and receiving emails provided according to Embodiment 1 of the present invention;

[0026] Figure 2 is a flow chart of a method for sending and receiving emails provided according to Embodiment 2 of the present invention;

[0027] Figure 3 is a structural schematic diagram of a mail sending and receiving device provided according to Embodiment 3 of the present invention;

[0028] Figure 4 It is a structural schematic diagram of an electronic device for implementing the mail sending and receiving method according to an embodiment of the present invention. DETAILED DESCRIPTION

[0029] In order to enable those skilled in the art to better understand the scheme of the present invention, the technical scheme in the embodiments of the present invention will be clearly and completely described below in conjunction with the drawings in the embodiments of the present invention. Obviously, the described embodiments are only part of the embodiments of the present invention, not all of the embodiments. Based on the embodiments of the present invention, all other embodiments obtained by ordinary technicians in this field without creative work should fall within the scope of protection of the present invention.

[0030] It should be noted that the terms "target", "first" and "second" in the specification and claims of the present invention and the above-mentioned drawings are used to distinguish similar objects, and are not necessarily used to describe a specific order or sequence. It should be understood that the data used in this way can be interchanged where appropriate, so that the embodiments of the present invention described herein can be implemented in an order other than those illustrated or described herein. In addition, the terms "including" and "having" and any variations thereof are intended to cover non-exclusive inclusions, for example, a process, method, system, product or device that includes a series of steps or units is not necessarily limited to those steps or units that are clearly listed, but may include other steps or units that are not clearly listed or inherent to these processes, methods, products or devices.

[0031] In addition, it should be noted that in the technical solution of the present invention, the collection, storage, use, processing, transmission, provision and disclosure of the system public parameters and system master private keys of the email system involved, as well as the email information corresponding to the email aggregation ciphertext, all comply with the provisions of relevant laws and regulations and do not violate public order and good morals.

[0032] For ease of understanding, firstly, the entities in the email system involved in the embodiment of the present invention are briefly introduced. Specifically, the entities in the email system involved in the embodiment of the present invention include: an email sender, an email receiver, a key generation center (Key Generation Center, KGC), an email transceiver base station and a tracking authority (Tracing Authority, TRA). Figure 1A , the mail sender communicates with the mail receiver through the mail transceiver base station; the mail sender communicates with the key generation center through the tracking agency; the mail receiver communicates with the key generation center through the tracking agency; the mail transceiver base station communicates with the key generation center through the tracking agency; the mail sender communicates with the mail transceiver base station; the mail receiver communicates with the mail transceiver base station; the tracking agency communicates with the mail sender, the mail receiver, the mail transceiver base station and the key generation center respectively. Among them, the key generation center is used to generate the system public parameters and system master private key of the email system on the one hand; on the other hand, it is used to generate and manage partial keys of the mail sender, the mail receiver, the mail transceiver base station and the tracking agency. The tracking agency is used to provide identity registration and management for the mail sender, the mail receiver and the mail transceiver base station. The mail transceiver base station refers to a device used to receive the mail ciphertext within its coverage area and perform aggregation processing on the received mail ciphertext.

[0033] Embodiment 1

[0034] Figure 1B This is a flow chart of a mail sending and receiving method provided in the first embodiment of the present invention. This embodiment is applicable to the case of encrypted transmission of emails, especially to the case of encrypted transmission of emails with large contents. The method can be executed by a mail sending and receiving device, which can be implemented in the form of hardware and / or software and can be configured in an electronic device. Figure 1B As shown, the method includes:

[0035] S101. The email sender signs the email plaintext according to the system public parameters of the email system, the sending timestamp, its own first identity and first key pair, and the email receiver's second identity and second key pair to obtain the email ciphertext; wherein the first key pair includes a first private key and a first public key; the second key pair includes a second private key and a second public key.

[0036] Among them, the email sender refers to the party that sends the email; correspondingly, the email receiver refers to the party that receives the email. The sending timestamp refers to the time when the email is sent. The first identity identifier refers to the information used to uniquely identify the identity of the email sender; correspondingly, the second identity identifier refers to the information used to uniquely identify the identity of the email receiver. The first key pair refers to the key pair of the email sender; correspondingly, the first private key refers to the private key of the email sender; the first public key refers to the public key of the email sender. The second key pair refers to the key pair of the email receiver; correspondingly, the second private key refers to the private key of the email receiver; the second public key refers to the public key of the email receiver. Signcryption refers to a technology that combines the encryption and signature functions in public key cryptography to achieve encryption and signature in one logical step.

[0037] The public parameters of the email system are generated by the key generation center. Specifically, the key generation center randomly generates an additive cyclic group G with a prime number q and a generator P. The key generation center randomly selects As the system master private key, and save the system master private key m; where, represents a number in {0,1,2,…,q-1}; then, the key generation center generates the system public key P based on the system master private key m and the generator P m , that is, P m =mP; then, the key generation center selects three hash functions, which are the first hash function H1: Second hash function H2: And the third hash function H3: Thus, we can obtain the system public parameters syspara of the email system = {q, G, P m ,H1,H2,H3}, and expose the system public parameters in the email system.

[0038] Specifically, the email sender obtains a first random number and a second random number; the email sender generates a signcryption coefficient based on the first random number, the second random number and its own first private key; the email sender signs the email plaintext based on the signcryption coefficient, the first private key, its own first identity, the system public parameters of the email system, the sending timestamp, and the email recipient's second identity and second public key to obtain the email ciphertext.

[0039] More specifically, the email sender randomly generates a first random number and a second random number based on a random number generation algorithm; then, the email sender generates a signcryption coefficient according to the first random number, the second random number, and its own first private key through the following formula:

[0040]

[0041] Wherein, k0 represents the signcryption coefficient; k1 represents the first random number; k2 represents the second random number; Represents the first private key. Afterwards, the email sender generates the first sub-ciphertext according to the signcryption coefficient and the generator in the system public parameter of the email system through the following formula:

[0042] α1=k0P;

[0043] Among them, α1 represents the first sub-ciphertext; k0 represents the signcryption coefficient; P represents the generator in the system public parameters of the email system. It should be noted that the first sub-ciphertext refers to the ciphertext used to form the first part of the email ciphertext. Afterwards, the email sender uses the first hash function in the system public parameters to perform a hash operation on the second identity identifier and the second part of the second public key of the email receiver and the system public key in the system public parameters to obtain the first hash value, that is:

[0044]

[0045] Wherein, h1 represents the first hash value; H1 represents the first hash function in the system public parameters; ID r Indicates the second identity of the email recipient; P m Represents the system public key in the system public parameters; represents the second public key; Represents the second part of the second public key. Afterwards, the email sender generates the intermediate ciphertext according to the signcryption coefficient, the first part of the second public key, the first hash value and the system public key using the following formula:

[0046]

[0047] Among them, U represents the intermediate ciphertext, Represents the first part of the second public key. Afterwards, the email sender uses the second hash function in the system public parameters to perform a hash operation on the second identity, the first sub-ciphertext, the intermediate ciphertext and the sending timestamp to obtain the second hash value, namely:

[0048] h2=H2(ID r ,α1,U,T);

[0049] Among them, h2 represents the second hash value; H2 represents the second hash function in the system public parameters; T represents the sending timestamp. After that, the email sender performs a bitwise XOR operation on the email plaintext and the second hash value to obtain the second sub-ciphertext, namely:

[0050]

[0051] Among them, α2 represents the second sub-ciphertext; M represents the email plaintext. It should be noted that the second sub-ciphertext refers to the ciphertext used to form the second part of the email ciphertext. Afterwards, the email sender uses the third hash function in the system public parameters to perform a hash operation on the email plaintext, the first identity identifier, the second public key, the first sub-ciphertext, the intermediate ciphertext and the sending timestamp to obtain the third hash value, that is:

[0052]

[0053] Wherein, h3 represents the third hash value; H3 represents the third hash function in the system public parameters; ID i Indicates the first identity; Represents the second public key. Afterwards, the email sender obtains the third sub-ciphertext according to the signcryption coefficient, the third hash value, the first private key and the order of the additive cyclic group G in the system public parameter through the following formula:

[0054]

[0055] Among them, α3 represents the third sub-ciphertext; represents the first private key; q represents the order of the additive cyclic group G in the system public parameters. Afterwards, the email sender combines the first sub-ciphertext, the second sub-ciphertext and the third sub-ciphertext according to a specific ciphertext combination method to obtain the email ciphertext, which is recorded as σ=(α1,α2,α30.

[0056] It can be understood that, based on the system public parameters of the known email system, the email plaintext is signed according to the personal identity and personal private key of the email sender, as well as the personal identity and personal public key of the email receiver, so that only the email receiver with the corresponding private key can decrypt the email ciphertext and view the email content, thereby avoiding the leakage of the email content during the email transmission process, thereby improving the security of the email content during the email transmission process; at the same time, it simplifies the processing flow of the email plaintext, and there is no need to encrypt and sign the email plaintext separately, thereby improving the processing efficiency of the email plaintext.

[0057] S102: The email sender sends the first identity identifier, the first public key, the sending timestamp and the email ciphertext to the email receiver via the email transceiver base station.

[0058] Specifically, the email sender uses SMTP (Simple Mail Transfer Protocol) to send the first identity identifier, the first public key, the sending timestamp and the email ciphertext to the email transceiver base station. After processing by the email transceiver base station, a package file consisting of the first identity identifier, the first public key, the sending timestamp and the email ciphertext is obtained; then, the email transceiver base station uses SMTP to send the package file to the email recipient through the Internet.

[0059] S103: The email recipient receives the first identity identifier, the first public key, the sending timestamp, and the email aggregate ciphertext corresponding to the email ciphertext, and performs signcryption verification on the email aggregate ciphertext.

[0060] Among them, the mail aggregate ciphertext refers to the ciphertext obtained after the mail ciphertext is aggregated. Specifically, the mail recipient uses POP3 (Post Office Protocol version 3) or IMAP (Internet Message Access Protocol) to receive the first identity identifier, the first public key, the sending timestamp, and the mail aggregate ciphertext corresponding to the mail ciphertext from the mail transceiver base station; then, based on the preset signcryption verification equation, the mail aggregate ciphertext is signcrypted and verified; if the preset signcryption verification equation holds, it is determined that the mail aggregate ciphertext passes the signcryption verification; otherwise, it is determined that the mail aggregate ciphertext fails the signcryption verification. It should be noted that if the mail aggregate ciphertext passes the signcryption verification, it means that all the mail ciphertexts in the mail aggregate ciphertext are valid mail ciphertexts; if the mail aggregate ciphertext fails the signcryption verification, it means that there is at least one invalid mail ciphertext in the mail aggregate ciphertext.

[0061] Optionally, the mail aggregation ciphertext is generated by the mail transceiver base station through an unbounded fault-tolerant aggregation algorithm. The unbounded fault-tolerant aggregation algorithm is as follows:

[0062] Assume that there are two email ciphertext sets N1 and N2, the number of email ciphertexts aggregated by N1 is n1, the number of email ciphertexts aggregated by N2 is n2, and n1≤n2; thus, we get the set Q1 consisting of the third sub-ciphertexts of the email ciphertexts in N1 = {α 31,N1 ,...,α 3n1,N1}, the set Q2 consisting of the third sub-ciphertext of the email ciphertext in N2 = {α 31,N2 ,...,α 3n2,N2}; After that, construct the binary association matrix A corresponding to N1 that satisfies the nested family, and the binary association matrix B corresponding to N2 that satisfies the nested family. It should be noted that each row in the binary association matrix A and the binary association matrix B represents a sub-verification group, and each column represents the key information of an email ciphertext. Assume that the binary association matrix A has r1 rows and n1 columns, and r1 satisfies The binary incidence matrix B has r2 rows and n2 columns, and r2 satisfies It should be noted that the value of t1 is less than The value of t2 is less than Therefore, we can infer that r1≤r2. Then, a sub-validation group is created in the binary association matrix A. Create a new sub-validation group in the binary correlation matrix B Thus, we get the signcryption core ε1 = (ε1[0], ε1[1], ..., ε1[r1]) corresponding to N1, and the signcryption core ε2 = (ε2[0], ε2[1], ..., ε2[r2]) corresponding to N2. It should be noted that for the other sub-verification groups in ε1 except ε1[0], 1≤j≤r1. Among them, ω1 represents the total number of email ciphertexts involved in the jth sub-verification group in the binary association matrix A. Similarly, for other sub-verification groups in ε2 except ε2[0], 1≤j≤r2. Among them, ω2 represents the total number of email ciphertexts involved in the jth sub-verification group in the binary association matrix B.

[0063] Afterwards, according to the dimension of ε2, ε1 is expanded based on the following expansion rules to obtain the expanded ε1, denoted as ε k , so that ε1 and ε2 have the same dimension;

[0064]

[0065] Where i represents the binary incidence matrix A 1 The i-th sub-validation group in; binary association matrix A 1 It refers to the binary incidence matrix obtained by expanding the binary incidence matrix A. For example, if r1 = 2, r2 = 3, then ε1 = (ε1[0], ε1[1], ε1[2]), ε2 = (ε2[0], ε2[1], ε2[2], ε2[3]). According to the above expansion rules, ε1 is expanded to obtain ε k =(ε1[0],ε1[1],ε1[2],⊥).

[0066] Afterwards, kand ε2 to obtain the aggregated signcryption core ε=(ε[i]|1≤i≤r); where ε[i]=ε k [i]+ε2[i]; r=max(r1,r2). It should be noted that if ε k [i] = ⊥, then ε[i] = ε2[i]. For example, if ε k =(a+b,a+b,b,⊥), ε2=(a+b+c,a+b+c,b+c,c), then for ε k Aggregate with ε2 to obtain the aggregated signcryption core ε = (a+b+a+b+c,a+b+a+b+c,b+b+c,c).

[0067] Furthermore, according to the aggregate signcryption core ε = (ε[i]|1≤i≤r), we get the aggregated ciphertext of the emails in N1 and N2, which is recorded as Among them, N k represents the aggregated email ciphertext set formed by the email ciphertext set N1 and the email ciphertext set N2; n represents the aggregated email ciphertext set N k The number of aggregated email ciphertexts; k represents the total number of email ciphertext sets participating in the unbounded fault-tolerant aggregation operation.

[0068] It is understandable that, since the unbounded fault-tolerant aggregation algorithm realizes unbounded aggregation, when there are a large number of email ciphertexts in the email transceiver base station, it supports re-aggregation of two groups of aggregated email aggregation ciphertexts to generate a final email aggregation ciphertext, which improves the flexibility and practicality of email ciphertext aggregation, so that the email transceiver base station only needs to send the email aggregation ciphertext to the email recipient once, and can send multiple email ciphertexts sent to the same email recipient to the email recipient at one time, thereby reducing the bandwidth consumption during the email transmission process and improving the transmission efficiency of the email ciphertext. Secondly, a sub-verification group containing the key information of all email ciphertexts is added to the unbounded fault-tolerant aggregation algorithm. Therefore, when it is verified that the email aggregation ciphertext contains invalid email ciphertext, that is, when it is determined that the email aggregation ciphertext has not passed the signature verification, the valid email ciphertext in the email aggregation ciphertext can still be obtained, instead of discarding all the email ciphertexts in the email aggregation ciphertext, thereby improving the fault tolerance of the email system.

[0069] Optionally, the default signcryption verification equation can be: Where n represents the total number of email ciphertexts contained in the email aggregate ciphertext; ε[0] represents the complete aggregation of the third sub-ciphertext of n email ciphertexts; P represents the generator in the system public parameters; α 1i represents the first sub-ciphertext of the i-th email ciphertext; h 3i Indicates the third hash value corresponding to the i-th email ciphertext; represents the first public key of the i-th email sender; represents the first part of the first public key of the i-th email sender; P m Represents the system public key in the system public parameters; Indicates the hash value corresponding to the i-th email sender. H1 represents the first hash function in the system public parameters; ID i Represents the first identity of the i-th email sender; Represents the second part of the first public key of the i-th email sender.

[0070] S104. When it is determined that the mail aggregate ciphertext passes the signcryption verification, the mail recipient decrypts the mail aggregate ciphertext according to the system public parameters, the second identity identifier, the second private key and the mail information corresponding to the mail aggregate ciphertext to obtain the mail plaintext sent by the mail sender.

[0071] The email information corresponding to the email aggregation ciphertext includes at least the following information:

[0072] The first identity of the i-th (i=1,2,…,n) email sender, denoted as ID i ; Where n represents the sender of the email involved in the email aggregation ciphertext, and also represents the total number of email ciphertexts contained in the email aggregation ciphertext;

[0073] The first public key of the i-th email sender is denoted as

[0074] The ciphertext of the email sent by the i-th email sender is denoted by σ i =(α 1i ,α 2i ,α 3i ), where α 1i Represents σ i The first sub-ciphertext of 2i Represents σ i The second sub-ciphertext of 3i Represents σ i The third sub-ciphertext of ;

[0075] The i-th email sender sends the email ciphertext σ i The sending timestamp is denoted as T i .

[0076] Specifically, when it is determined that the email aggregation ciphertext passes the signcryption verification, the email ciphertext σ sent by the i-th email sender involved in the email aggregation ciphertext i The email recipient uses the first hash function in the system public parameters to i , Perform a hash operation with the system public key in the system public parameters to obtain the hash value corresponding to the i-th email sender, that is, Afterwards, the email recipient uses his own second private key and the email ciphertext σ i The first sub-ciphertext α 1i , the intermediate plaintext is generated by the following formula:

[0077]

[0078] Among them, U i Indicates intermediate plaintext; Represents the second private key. Afterwards, the email receiving method uses the second hash function in the system public parameter to perform a hash operation on the second identity identifier and the email ciphertext σ i The first sub-ciphertext α 1i 、Intermediate plaintext U i and sending timestamp T i Perform a hash operation to obtain the intermediate hash value corresponding to the i-th email sender, that is:

[0079] x i =H2(ID r ,α 1i ,U i ,T i );

[0080] Among them, x i represents the intermediate hash value corresponding to the i-th email sender; H2 represents the second hash function in the system public parameters. Afterwards, the email receiver performs a i The second sub-ciphertext α 2i and x i Perform bitwise XOR operation to obtain the plain text of the email sent by the i-th email sender, that is:

[0081]

[0082] Among them, M i Represents the plain text of the email sent by the i-th email sender. Based on the principle that the email receiver obtains the plain text of the email sent by the i-th email sender, the plain text of the email sent by each email sender involved in the email aggregation ciphertext can be obtained.

[0083] According to the technical solution of the embodiment of the present invention, the email sender signs and encrypts the email plaintext according to the system public parameters of the email system, the sending timestamp, the first identity identifier and the first key pair of the email sender, and the second identity identifier and the second key pair of the email receiver to obtain the email ciphertext; wherein the first key pair includes the first private key and the first public key; the second key pair includes the second private key and the second public key; the email sender sends the first identity identifier, the first public key, the sending timestamp and the email ciphertext to the email receiver via the email transceiver base station; the email receiver receives the first identity identifier, the first public key, the sending timestamp, and the email aggregate ciphertext corresponding to the email ciphertext, and performs sign and encrypt verification on the email aggregate ciphertext; when it is determined that the email aggregate ciphertext passes the sign and encrypt verification, the email receiver decrypts the email aggregate ciphertext according to the system public parameters, the second identity identifier, the second private key and the email information corresponding to the email aggregate ciphertext to obtain the email plaintext sent by the email sender. The above technical solution realizes encryption and signing of email plaintext at the same time through the signcryption technology, without the need to encrypt and sign the email plaintext separately, thereby reducing the computing cost in the email transmission process, improving the processing efficiency of the email plaintext, and further improving the email transmission efficiency; secondly, the email sender uses its own personal identity and personal private key, as well as the personal identity and personal public key of the email receiver to sign the email plaintext, so that only the email receiver with the corresponding private key can decrypt the email ciphertext and view the email content, thereby avoiding the leakage of the email content during the email transmission process, ensuring the security of personal privacy information in the email, and improving the security of the email content during the email transmission process; then, with the help of the aggregate signcryption technology, multiple email ciphertexts sent to the same email receiver are aggregated into an email aggregate ciphertext, which is sent to the email receiver at one time, further improving the email transmission efficiency; then, the email receiver performs signcryption verification on the email aggregate ciphertext, and when it is determined that the email aggregate ciphertext passes the signcryption verification, the email aggregate ciphertext is decrypted to obtain the email plaintext sent by the email sender, thereby ensuring the authenticity and integrity of the email.

[0084] On the basis of the above embodiment, as an optional method of the embodiment of the present invention, when it is determined that the email aggregate ciphertext fails the sign-cryptographic verification, the email recipient can perform an invalidation detection on the email ciphertext in the email aggregate ciphertext through a preset ciphertext invalidation detection equation to obtain invalid email ciphertext and valid email ciphertext in the email aggregate ciphertext, so that the email recipient can subsequently decrypt only the valid email ciphertext, thereby reducing the waste of computing resources in the email decryption process and improving the decryption efficiency of the email ciphertext.

[0085] Among them, the preset ciphertext invalid detection equation can be: Where ε[j] represents the j-th sub-verification group in the aggregated signcryption core; ω represents the total number of email ciphertexts involved in the j-th sub-verification group; α 1i represents the first sub-ciphertext of the i-th email ciphertext; h 3i Indicates the third hash value corresponding to the i-th email ciphertext; represents the first public key of the i-th email sender; represents the first part of the first public key of the i-th email sender; P m Represents the system public key in the system public parameters; Indicates the hash value corresponding to the i-th email sender. H1 represents the first hash function in the system public parameters; ID i Represents the first identity of the i-th email sender; Represents the second part of the first public key of the i-th email sender.

[0086] Specifically, when it is determined that the email aggregate ciphertext has not passed the signcryption verification, for the jth sub-verification group in the aggregate signcryption core corresponding to the email aggregate ciphertext, the email recipient can perform invalidity detection on the email ciphertext involved in the sub-verification group through a preset invalid ciphertext detection equation; if the preset invalid ciphertext detection equation holds, it means that the email ciphertexts involved in the sub-verification group are all valid email ciphertexts; if the preset invalid ciphertext detection equation does not hold, it means that there is at least one invalid email ciphertext in the email ciphertext involved in the sub-verification group. After the email recipient has detected all the sub-verification groups in the aggregate signcryption core, the invalid email ciphertext and the valid email ciphertext in the email aggregate ciphertext can be obtained.

[0087] Embodiment 2

[0088] Figure 2 This is a flowchart of a method for sending and receiving emails provided in Embodiment 2 of the present invention. Based on the above embodiments, this embodiment provides a method for generating a key pair for an email sender or email receiver. It should be noted that for the parts not described in detail in the embodiments of the present invention, reference may be made to the relevant descriptions of other embodiments. Figure 2 As shown, the method includes:

[0089] S201. The tracking agency generates a first false identity corresponding to the first identity authentication value according to the tracking agency information, the system public parameters of the email system, and the receiving timestamp of the first identity authentication value, and sends the first false identity to the key generation center.

[0090] The first identity verification value refers to a value used to uniquely verify the identity of the email sender; optionally, the first identity verification value can be determined based on the random number selected by the email sender and the generator in the system public parameters, that is, R1 = β1P. R1 represents the first identity verification value; β1 represents the random number selected by the email sender; and P represents the generator in the system public parameters. It should be noted that the first identity verification value is sent by the email sender to the tracking agency.

[0091] Among them, the tracking agency information refers to information related to the tracking agency; optionally, the tracking agency information includes the tracking agency identity and the tracking agency private key. Among them, the tracking agency identity refers to information used to uniquely identify the identity of the tracking agency; the tracking agency private key refers to the private key of the tracking agency. In addition, the tracking agency information may also include the tracking agency public key and the tracking agency partial key; among them, the tracking agency public key refers to the public key of the tracking agency; the tracking agency partial key refers to the partial key of the tracking agency. The receiving timestamp refers to the time when the tracking agency receives the first identity authentication value. The first false identity refers to the false identity of the sender of the email.

[0092] Specifically, the tracking agency generates a first intermediate false identity based on the received first identity authentication value; the tracking agency generates a target hash value based on the system public parameters of the email system, the tracking agency identity, the tracking agency private key, and the receiving timestamp of the first identity authentication value; the tracking agency generates a second intermediate false identity based on the first identity authentication value and the target hash value; the tracking agency generates a first false identity corresponding to the first identity authentication value based on the first intermediate false identity, the second intermediate false identity, and the receiving timestamp; the tracking agency sends the first false identity to the key generation center, so that the key generation center generates a partial key of the email sender based on the first false identity. Among them, the first intermediate false identity and the second intermediate false identity are both identities required to generate the first false identity, but the first intermediate false identity is different from the second intermediate false identity.

[0093] More specifically, the tracking agency directly uses the received first identity verification value as the first intermediate false identity, i.e., FI ID,1 =R1; where FI ID,1 represents the first intermediate false identity; then, the tracking agency uses the second hash function in the system public parameters to perform a hash operation on the tracking agency identity, the first identity verification value, the tracking agency private key and the receiving timestamp to obtain the target hash value, that is:

[0094]

[0095] Among them, x ID Indicates the target hash value; H2 indicates the second hash function in the system public parameters; ID TRARepresents the tracking organization identity; R1 represents the first identity verification value; Represents the tracking agency private key; T ID Represents the receiving timestamp. Afterwards, the tracking agency performs a bitwise XOR operation on the first authentication value and the target hash value to obtain the second intermediate false identity, namely:

[0096]

[0097] Among them, FI ID,2 After that, the tracking agency combines the first intermediate false identity, the second intermediate false identity and the receiving timestamp according to a specific false identity combination method to obtain the first false identity corresponding to the first identity authentication value, which is recorded as FI ID =(FI ID,1 ,FI ID,2 ,T ID ). Afterwards, the tracking agency sends the first false identity to the key generation center, so that the key generation center generates a partial key of the email sender according to the first false identity.

[0098] It is understandable that the email sender sends its own identity verification value (i.e., the first identity verification value) to the tracking agency, and generates a false identity of its own (i.e., the first false identity) with the help of the tracking agency, so that no one except the email sender and the tracking agency can obtain the real identity of the email sender through the first false identity, thereby avoiding the leakage of the email sender's personal privacy information and improving the security of the email sender's personal privacy information. At the same time, it is convenient for the subsequent email sender to send emails anonymously.

[0099] Optionally, the tracking agency may also send the first false identity to the email sender so that the email sender can subsequently send emails with the first false identity, thereby ensuring the security of the email sender's personal privacy information.

[0100] S202: The key generation center receives the first pseudo identity, and generates a sender partial key according to the first pseudo identity, system public parameters and system master private key.

[0101] Specifically, the key generation center receives the first pseudo identity from the tracking agency, and after receiving the first pseudo identity, generates the first intermediate key according to the generator in the system public parameters and the specified random number through the following formula:

[0102] D ID =d ID P;

[0103] Among them, D ID represents the first intermediate key; d IDrepresents a specified random number; P represents a generator in the system public parameters. It should be noted that the specified random number refers to a random number specified by the key generation center. Afterwards, the key generation center uses the first hash function in the system public parameters to perform a hash operation on the first pseudo identity, the first intermediate key, and the system public key in the system public parameters to obtain the hash value corresponding to the first pseudo identity, that is:

[0104]

[0105] in, Indicates the hash value corresponding to the first false identity; FI ID represents the first false identity; P m Represents the system public key in the system public parameters. Afterwards, the key generation center obtains the second intermediate key according to the specified random number, the first intermediate key, the system master private key, the hash value corresponding to the first pseudo identity, and the order of the additive cyclic group G in the system public parameters through the following formula:

[0106]

[0107] Among them, b ID represents the second intermediate key; m represents the system master private key; q represents the order of the additive cyclic group G in the system public parameters. Afterwards, the key generation center combines the first intermediate key and the second intermediate key according to a specific partial key combination method to obtain the sender's partial key, which is recorded as (b ID ,D ID ).

[0108] S203: The key generation center sends the sender's partial key to the email sender via the tracking agency.

[0109] Specifically, the key generation center first sends the sender's partial key to the tracking agency; then, the tracking agency sends the sender's partial key to the email sender.

[0110] S204: The email sender generates a first key pair according to the received sender's partial key and system public parameters.

[0111] Specifically, the email sender generates a key random number based on a random generation algorithm; the email sender generates a first private key based on the key random number and the received sender's partial key; the email sender generates a public key parameter based on the key random number and the system public parameter; the email sender generates a first public key based on the public key parameter and the sender's partial key. The key random number refers to the random number required to generate the first key pair. The public key parameter refers to the parameter required to generate the first public key.

[0112] More specifically, the email sender generates a key random number based on a random generation algorithm; then, the email sender combines the key random number and the second intermediate key in the sender's partial key according to a specific private key combination method to obtain a first private key, which is recorded as SK1=(a ID ,b ID ), where a ID Indicates the key random number; b ID Represents the second intermediate key in the sender's partial key. Afterwards, the email sender generates the public key parameters according to the key random number and the generator in the system public parameter using the following formula:

[0113] A ID =a ID P;

[0114] Among them, A ID Represents the public key parameter; P represents the generator in the system public parameter. Afterwards, the email sender generates a partial public key according to the public key parameter and the first intermediate key in the sender's partial key using the following formula:

[0115] C ID =A ID +D ID ;

[0116] Among them, C ID Indicates part of the public key; D ID represents the first intermediate key in the partial key of the sender. Afterwards, the sender of the email combines the partial public key and the first intermediate key according to a specific public key combination method to obtain the first public key, which is recorded as PK1=(C ID ,D ID ).

[0117] It should be noted that the first private key is only known to the sender of the email and is kept secret by the sender of the email; while the first public key is published by the sender of the email in the email system.

[0118] It can be understood that the email sender generates the first key pair based on the sender's partial key obtained by the first false identity and the system public parameters, which enhances the complexity of the first key pair generation process. Since the generation of the first key pair has no direct connection with the real identity of the email sender, the risk of the first key pair being cracked due to the leakage of the real identity of the email sender is reduced, thereby enhancing the security of the first key pair.

[0119] Optionally, in order to prevent the email sender from being illegally tracked when sending emails, and to further protect the security of the email sender's personal privacy information, before generating the first key pair based on the received sender's partial key and system public parameters, the email sender may also perform an expiration check on the first fake identity through the following fake identity expiration check equation:

[0120]

[0121] Among them, b ID Indicates the second intermediate key in the sender's partial key; D ID represents the first intermediate key in the sender's partial key; P represents the generator in the system public parameter; h FIID represents the hash value corresponding to the first false identity; m Indicates the system public key in the system public parameters.

[0122] Specifically, the email sender can input the first intermediate key and the second intermediate key in the obtained sender partial key, the generator and the system public key in the system public parameters, and the hash value corresponding to the first false identity into the above-mentioned false identity expiration verification equation; if the false identity expiration verification equation holds, it means that the first false identity has not expired, and the email sender generates a first key pair based on the received sender partial key and the system public parameters; if the false identity expiration verification equation does not hold, it means that the first false identity has expired, and S201-S203 is re-executed, that is, the email sender re-receives the sender partial key regenerated by the key generation center.

[0123] Based on the similar principle of generating the first key pair mentioned above, i.e., S201 to S204, the tracking agency generates a second false identity corresponding to the second identity authentication value according to the tracking agency information, the system public parameters of the email system, and the receiving timestamp of receiving the second identity authentication value, and sends the second false identity to the key generation center; wherein, the second identity authentication value refers to a numerical value used to uniquely verify the identity of the email recipient; the key generation center receives the second false identity, and generates a partial key of the recipient according to the first false identity, the system public parameters and the system master private key; the key generation center sends the partial key of the recipient to the email recipient via the tracking agency; the email recipient generates a second key pair according to the received partial key of the recipient and the system public parameters.

[0124] S205. The email sender signs the email plaintext according to the system public parameters of the email system, the sending timestamp, its own first identity and first key pair, and the email receiver's second identity and second key pair to obtain the email ciphertext; wherein the first key pair includes a first private key and a first public key; and the second key pair includes a second private key and a second public key.

[0125] S206: The email sender sends the first identity identifier, the first public key, the sending timestamp and the email ciphertext to the email receiver via the email transceiver base station.

[0126] S207: The email recipient receives the first identity identifier, the first public key, the sending timestamp, and the email aggregate ciphertext corresponding to the email ciphertext, and performs signcryption verification on the email aggregate ciphertext.

[0127] S208. When it is determined that the mail aggregate ciphertext passes the signcryption verification, the mail recipient decrypts the mail aggregate ciphertext according to the system public parameters, the second identity identifier, the second private key and the mail information corresponding to the mail aggregate ciphertext to obtain the mail plaintext sent by the mail sender.

[0128] According to the technical solution of the embodiment of the present invention, the tracking agency generates a first false identity corresponding to the first identity authentication value according to the tracking agency information, the system public parameters of the email system, and the receiving timestamp of the first identity authentication value, and sends the first false identity to the key generation center; the key generation center receives the first false identity, and generates a sender partial key according to the first false identity, the system public parameters and the system master private key; the key generation center sends the sender partial key to the email sender via the tracking agency; the email sender generates a first key pair according to the received sender partial key and the system public parameters; the email sender generates a first key pair according to the system public parameters of the email system, the sending timestamp, its own first identity identifier and the first key pair, and the email receiver's first The first key pair includes a first private key and a first public key; the second key pair includes a second private key and a second public key; the email sender sends the first identity, the first public key, the sending timestamp and the email ciphertext to the email receiver via the email transceiver base station; the email receiver receives the first identity, the first public key, the sending timestamp and the email aggregate ciphertext corresponding to the email ciphertext, and performs signcryption verification on the email aggregate ciphertext; when it is determined that the email aggregate ciphertext passes the signcryption verification, the email receiver decrypts the email aggregate ciphertext according to the system public parameters, the second identity, the second private key and the email information corresponding to the email aggregate ciphertext to obtain the email plaintext sent by the email sender. The above technical scheme provides a method for generating a first key pair or a second key pair, which provides data support for the aggregate signcryption and decryption of subsequent emails; then, the encryption and signing of the email plaintext are simultaneously realized through the signcryption technology, and there is no need to encrypt and sign the email plaintext separately, thereby reducing the computing cost in the email transmission process, improving the processing efficiency of the email plaintext, and thus improving the email transmission efficiency; secondly, the email sender uses his own personal identity and personal private key, as well as the personal identity and personal public key of the email recipient to sign the email plaintext, so that only the email recipient with the corresponding private key can decrypt the email ciphertext. And check the email content, thereby avoiding the leakage of email content during email transmission, ensuring the security of personal privacy information in emails, and improving the security of email content during email transmission; then, with the help of aggregate signcryption technology, multiple email ciphertexts sent to the same email recipient are aggregated into an email aggregate ciphertext and sent to the email recipient at one time, further improving email transmission efficiency; then, the email recipient performs signcryption verification on the email aggregate ciphertext, and when it is determined that the email aggregate ciphertext has passed the signcryption verification, it decrypts the email aggregate ciphertext to obtain the email plaintext sent by the email sender, ensuring the authenticity and integrity of the email.

[0129] On the basis of the above embodiment, as an optional method of the embodiment of the present invention, in order to periodically generate a first false identity and further prevent the real identity of the email sender from being stolen, the email sender can periodically generate a new first identity authentication value and send the new first identity authentication value to the tracking agency.

[0130] Specifically, the email sender may generate the first verification coefficient and the second verification coefficient according to a timing random number generation algorithm; then the email sender generates a new first identity authentication value according to the existing first private key, the first verification coefficient and the second verification coefficient through the following formula:

[0131]

[0132] in, represents the existing first private key; η1 represents the first verification coefficient; η2 represents the second verification coefficient; Represents a new first identity authentication value. Afterwards, the email sender sends the new first identity authentication value to the tracking agency. Among them, the timed random number generation algorithm is used to generate random numbers at regular intervals; optionally, the timed random number generation algorithm can be pre-set according to actual business needs, and the embodiment of the present invention does not specifically limit it.

[0133] Embodiment 3

[0134] Figure 3 This is a schematic diagram of the structure of a mail sending and receiving device provided in the third embodiment of the present invention. This embodiment is applicable to the case of encrypted transmission of emails, especially to the case of encrypted transmission of emails with large contents. The device can be implemented in the form of hardware and / or software and can be configured in an electronic device. Figure 3 As shown, the device comprises:

[0135] The email ciphertext determination module 301 is used for the email sender to sign the email plaintext according to the system public parameters of the email system, the sending timestamp, the first identity identifier and the first key pair of the email sender, and the second identity identifier and the second key pair of the email receiver to obtain the email ciphertext; wherein the first key pair includes a first private key and a first public key; and the second key pair includes a second private key and a second public key;

[0136] The email ciphertext sending module 302 is used for the email sender to send the first identity identifier, the first public key, the sending timestamp and the email ciphertext to the email receiver via the email transceiver base station;

[0137] The signcryption verification module 303 is used for the email recipient to receive the first identity identifier, the first public key, the sending timestamp, and the email aggregate ciphertext corresponding to the email ciphertext, and perform signcryption verification on the email aggregate ciphertext;

[0138] The ciphertext decryption module 304 is used to, when it is determined that the email aggregation ciphertext has passed the signcryption verification, decrypt the email aggregation ciphertext according to the system public parameters, the second identity identifier, the second private key and the email information corresponding to the email aggregation ciphertext to obtain the email plaintext sent by the email sender.

[0139] According to the technical solution of the embodiment of the present invention, the email sender signs and encrypts the email plaintext according to the system public parameters of the email system, the sending timestamp, the first identity identifier and the first key pair of the email sender, and the second identity identifier and the second key pair of the email receiver to obtain the email ciphertext; wherein the first key pair includes the first private key and the first public key; the second key pair includes the second private key and the second public key; the email sender sends the first identity identifier, the first public key, the sending timestamp and the email ciphertext to the email receiver via the email transceiver base station; the email receiver receives the first identity identifier, the first public key, the sending timestamp, and the email aggregate ciphertext corresponding to the email ciphertext, and performs sign and encrypt verification on the email aggregate ciphertext; when it is determined that the email aggregate ciphertext passes the sign and encrypt verification, the email receiver decrypts the email aggregate ciphertext according to the system public parameters, the second identity identifier, the second private key and the email information corresponding to the email aggregate ciphertext to obtain the email plaintext sent by the email sender. The above technical solution realizes encryption and signing of email plaintext at the same time through the signcryption technology, without the need to encrypt and sign the email plaintext separately, thereby reducing the computing cost in the email transmission process, improving the processing efficiency of the email plaintext, and further improving the email transmission efficiency; secondly, the email sender uses its own personal identity and personal private key, as well as the personal identity and personal public key of the email receiver to sign the email plaintext, so that only the email receiver with the corresponding private key can decrypt the email ciphertext and view the email content, thereby avoiding the leakage of the email content during the email transmission process, ensuring the security of personal privacy information in the email, and improving the security of the email content during the email transmission process; then, with the help of the aggregate signcryption technology, multiple email ciphertexts sent to the same email receiver are aggregated into an email aggregate ciphertext, which is sent to the email receiver at one time, further improving the email transmission efficiency; then, the email receiver performs signcryption verification on the email aggregate ciphertext, and when it is determined that the email aggregate ciphertext passes the signcryption verification, decrypts the email aggregate ciphertext to obtain the email plaintext sent by the email sender, thereby ensuring the authenticity and integrity of the email.

[0140] Optionally, the device further includes a first key pair generating module, wherein the first key pair generating module includes:

[0141] A first false identity generating unit is used for the tracking organization to generate a first false identity corresponding to the first identity authentication value according to the tracking organization information, the system public parameters of the email system, and the receiving timestamp of receiving the first identity authentication value, and send the first false identity to the key generation center; wherein the first identity authentication value refers to a value used to uniquely verify the identity of the email sender;

[0142] The sender partial key generation unit is used for the key generation center to receive the first pseudo identity and generate the sender partial key according to the first pseudo identity, the system public parameter and the system master private key;

[0143] The sender's partial key sending unit is used for the key generation center to send the sender's partial key to the mail sender via the tracking agency;

[0144] The first key pair generating unit is used for the email sender to generate a first key pair according to the received sender's partial key and system public parameters.

[0145] Optionally, the tracking organization information includes a tracking organization identity and a tracking organization private key;

[0146] The first false identity generating unit is specifically used for:

[0147] The tracking mechanism generates a first intermediate false identity based on the received first identity verification value;

[0148] The tracking agency generates a target hash value based on the system public parameters of the email system, the tracking agency identity, the tracking agency private key, and a receiving timestamp of receiving the first identity verification value;

[0149] The tracking agency generates a second intermediate false identity based on the first authentication value and the target hash value;

[0150] The tracking mechanism generates a first false identity corresponding to the first identity authentication value according to the first intermediate false identity, the second intermediate false identity and the receiving timestamp.

[0151] Optionally, the first key pair generating unit is specifically used to:

[0152] The email sender generates a random key number based on a random generation algorithm;

[0153] The email sender generates a first private key based on the key random number and the received sender's partial key;

[0154] The email sender generates public key parameters based on the key random number and system public parameters;

[0155] The email sender generates a first public key according to the public key parameters and the sender's partial key.

[0156] Optionally, the email ciphertext determination module 301 is specifically configured to:

[0157] The email sender obtains the first random number and the second random number;

[0158] The email sender generates a signcryption coefficient according to the first random number, the second random number and its own first private key;

[0159] The email sender signs the email plaintext according to the signcryption coefficient, the first private key, its own first identity, the system public parameters of the email system, the sending timestamp, and the second identity and second public key of the email receiver to obtain the email ciphertext.

[0160] Optionally, the mail aggregation ciphertext is generated by the mail transceiver base station through an unbounded fault-tolerant aggregation algorithm.

[0161] The mail sending and receiving device provided in the embodiment of the present invention can execute the mail sending and receiving method provided in any embodiment of the present invention, and has the corresponding functional modules and beneficial effects for executing each mail sending and receiving method.

[0162] According to an embodiment of the present invention, the present invention also provides an electronic device, a readable storage medium and a computer program product.

[0163] Embodiment 4

[0164] Figure 4 A schematic diagram of the structure of an electronic device 10 that can be used to implement an embodiment of the present invention is shown. The electronic device is intended to represent various forms of digital computers, such as laptop computers, desktop computers, workstations, personal digital assistants, servers, blade servers, mainframe computers, and other suitable computers. The electronic device can also represent various forms of mobile devices, such as personal digital processing, cellular phones, smart phones, wearable devices (such as helmets, glasses, watches, etc.) and other similar computing devices. The components shown herein, their connections and relationships, and their functions are merely examples and are not intended to limit the implementation of the present invention described and / or required herein.

[0165] like Figure 4As shown, the electronic device 10 includes at least one processor 11, and a memory connected to the at least one processor 11, such as a read-only memory (ROM) 12, a random access memory (RAM) 13, etc., wherein the memory stores a computer program that can be executed by at least one processor, and the processor 11 can perform various appropriate actions and processes according to the computer program stored in the read-only memory (ROM) 12 or the computer program loaded from the storage unit 18 to the random access memory (RAM) 13. In the RAM 13, various programs and data required for the operation of the electronic device 10 can also be stored. The processor 11, ROM 12 and RAM 13 are connected to each other through a bus 14. An input / output (I / O) interface 15 is also connected to the bus 14.

[0166] A number of components in the electronic device 10 are connected to the I / O interface 15, including: an input unit 16, such as a keyboard, a mouse, etc.; an output unit 17, such as various types of displays, speakers, etc.; a storage unit 18, such as a disk, an optical disk, etc.; and a communication unit 19, such as a network card, a modem, a wireless communication transceiver, etc. The communication unit 19 allows the electronic device 10 to exchange information / data with other devices through a computer network such as the Internet and / or various telecommunication networks.

[0167] The processor 11 may be a variety of general and / or special processing components with processing and computing capabilities. Some examples of the processor 11 include, but are not limited to, a central processing unit (CPU), a graphics processing unit (GPU), various special artificial intelligence (AI) computing chips, various processors running machine learning model algorithms, a digital signal processor (DSP), and any appropriate processor, controller, microcontroller, etc. The processor 11 executes the various methods and processes described above, such as the email sending and receiving method.

[0168] In some embodiments, the mail sending and receiving method may be implemented as a computer program, which is tangibly contained in a computer-readable storage medium, such as a storage unit 18. In some embodiments, part or all of the computer program may be loaded and / or installed on the electronic device 10 via the ROM 12 and / or the communication unit 19. When the computer program is loaded into the RAM 13 and executed by the processor 11, one or more steps of the mail sending and receiving method described above may be performed. Alternatively, in other embodiments, the processor 11 may be configured to execute the mail sending and receiving method in any other appropriate manner (e.g., by means of firmware).

[0169] Various implementations of the systems and techniques described above herein can be implemented in digital electronic circuit systems, integrated circuit systems, field programmable gate arrays (FPGAs), application specific integrated circuits (ASICs), application specific standard products (ASSPs), systems on chips (SOCs), load programmable logic devices (CPLDs), computer hardware, firmware, software, and / or combinations thereof. These various implementations can include: being implemented in one or more computer programs that can be executed and / or interpreted on a programmable system including at least one programmable processor, which can be a special purpose or general purpose programmable processor that can receive data and instructions from a storage system, at least one input device, and at least one output device, and transmit data and instructions to the storage system, the at least one input device, and the at least one output device.

[0170] Computer programs for implementing the methods of the present invention may be written in any combination of one or more programming languages. These computer programs may be provided to a processor of a general-purpose computer, a special-purpose computer, or other programmable data processing device, so that when the computer program is executed by the processor, the functions / operations specified in the flow chart and / or block diagram are implemented. The computer program may be executed entirely on the machine, partially on the machine, partially on the machine and partially on a remote machine as a stand-alone software package, or entirely on a remote machine or server.

[0171] In the context of the present invention, a computer-readable storage medium may be a tangible medium that may contain or store a computer program for use by or in combination with an instruction execution system, device or equipment. A computer-readable storage medium may include, but is not limited to, electronic, magnetic, optical, electromagnetic, infrared, or semiconductor systems, devices or equipment, or any suitable combination of the foregoing. Alternatively, a computer-readable storage medium may be a machine-readable signal medium. A more specific example of a machine-readable storage medium may include an electrical connection based on one or more lines, a portable computer disk, a hard disk, a random access memory (RAM), a read-only memory (ROM), an erasable programmable read-only memory (EPROM or flash memory), an optical fiber, a portable compact disk read-only memory (CD-ROM), an optical storage device, a magnetic storage device, or any suitable combination of the foregoing.

[0172] To provide interaction with a user, the systems and techniques described herein may be implemented on an electronic device having: a display device (e.g., a CRT (cathode ray tube) or LCD (liquid crystal display) monitor) for displaying information to the user; and a keyboard and a pointing device (e.g., a mouse or trackball) through which the user can provide input to the electronic device. Other types of devices may also be used to provide interaction with the user; for example, the feedback provided to the user may be any form of sensory feedback (e.g., visual feedback, auditory feedback, or tactile feedback); and input from the user may be received in any form (including acoustic input, voice input, or tactile input).

[0173] The systems and techniques described herein may be implemented in a computing system that includes backend components (e.g., as a data server), or a computing system that includes middleware components (e.g., an application server), or a computing system that includes frontend components (e.g., a user computer with a graphical user interface or a web browser through which a user can interact with implementations of the systems and techniques described herein), or a computing system that includes any combination of such backend components, middleware components, or frontend components. The components of the system may be interconnected by any form or medium of digital data communication (e.g., a communication network). Examples of communication networks include: a local area network (LAN), a wide area network (WAN), a blockchain network, and the Internet.

[0174] A computing system may include a client and a server. The client and the server are generally remote from each other and usually interact through a communication network. The client and server relationship is generated by computer programs running on the corresponding computers and having a client-server relationship with each other. The server may be a cloud server, also known as a cloud computing server or cloud host, which is a host product in the cloud computing service system to solve the defects of difficult management and weak business scalability in traditional physical hosts and VPS services.

[0175] It should be understood that the various forms of processes shown above can be used to reorder, add or delete steps. For example, the steps described in the present invention can be executed in parallel, sequentially or in different orders, as long as the desired results of the technical solution of the present invention can be achieved, and this document does not limit this.

[0176] The above specific implementations do not constitute a limitation on the protection scope of the present invention. It should be understood by those skilled in the art that various modifications, combinations, sub-combinations and substitutions can be made according to design requirements and other factors. Any modification, equivalent substitution and improvement made within the spirit and principle of the present invention should be included in the protection scope of the present invention.

Claims

1. A method for sending and receiving mails, characterized in that: include: The email sender signs and encrypts the email plaintext according to the system public parameters of the email system, the sending timestamp, the first identity identifier and the first key pair of the email sender, and the second identity identifier and the second key pair of the email receiver to obtain the email ciphertext; wherein the first key pair includes a first private key and a first public key; and the second key pair includes a second private key and a second public key; The email sender sends the first identity identifier, the first public key, the sending timestamp and the email ciphertext to the email receiver via the email sending and receiving base station; The email recipient receives the first identity identifier, the first public key, the sending timestamp, and the email aggregation ciphertext corresponding to the email ciphertext, and performs signcryption verification on the email aggregation ciphertext; When it is determined that the email aggregation ciphertext passes the signcryption verification, the email recipient decrypts the email aggregation ciphertext according to the system public parameters, the second identity identifier, the second private key and the email information corresponding to the email aggregation ciphertext to obtain the email plaintext sent by the email sender.

2. The method according to claim 1, characterized in that The generation process of the first key pair is as follows: The tracking agency generates a first false identity corresponding to the first identity authentication value according to the tracking agency information, the system public parameters of the email system, and the receiving timestamp of receiving the first identity authentication value, and sends the first false identity to the key generation center; wherein the first identity authentication value refers to a value used to uniquely verify the identity of the email sender; The key generation center receives the first pseudo identity, and generates a sender partial key according to the first pseudo identity, the system public parameter and the system master private key; The key generation center sends the sender's partial key to the email sender via the tracking mechanism; The email sender generates a first key pair according to the received sender partial key and the system public parameters.

3. The method according to claim 2, characterized in that The tracking agency information includes a tracking agency identity and a tracking agency private key; The tracking agency generates a first false identity corresponding to the first identity verification value according to the tracking agency information, the system public parameters of the email system, and the receiving timestamp of receiving the first identity verification value, including: The tracking mechanism generates a first intermediate false identity based on the received first identity verification value; The tracking mechanism generates a target hash value according to a system public parameter of the email system, the tracking mechanism identity, the tracking mechanism private key, and a reception timestamp of receiving the first identity authentication value; The tracking mechanism generates a second intermediate false identity based on the first identity verification value and the target hash value; The tracking mechanism generates a first false identity corresponding to the first identity authentication value according to the first intermediate false identity, the second intermediate false identity and the receiving timestamp.

4. The method according to claim 2, characterized in that The email sender generates a first key pair according to the received sender partial key and the system public parameter, including: The email sender generates a random key number based on a random generation algorithm; The email sender generates a first private key according to the key random number and the received sender's partial key; The email sender generates a public key parameter according to the key random number and the system public parameter; The email sender generates a first public key according to the public key parameters and the sender's partial key.

5. The method according to claim 1, characterized in that: The email sender signs and encrypts the email plaintext according to the system public parameters of the email system, the sending timestamp, its own first identity and first key pair, and the second identity and second key pair of the email receiver to obtain the email ciphertext, including: The email sender obtains a first random number and a second random number; The email sender generates a signcryption coefficient according to the first random number, the second random number and its own first private key; The email sender signs the email plaintext according to the signcryption coefficient, the first private key, its own first identity, the system public parameters of the email system, the sending timestamp, and the second identity and second public key of the email receiver to obtain the email ciphertext.

6. The method according to claim 1, characterized in that The mail aggregation ciphertext is generated by the mail transceiver base station through an unbounded fault-tolerant aggregation algorithm.

7. A mail sending and receiving device, characterized in that: include: The email ciphertext determination module is used for the email sender to sign the email plaintext according to the system public parameters of the email system, the sending timestamp, the first identity and the first key pair of the email sender, and the second identity and the second key pair of the email receiver to obtain the email ciphertext; wherein the first key pair includes a first private key and a first public key; the second key pair includes a second private key and a second public key; An email ciphertext sending module, used for the email sender to send the first identity identifier, the first public key, the sending timestamp and the email ciphertext to the email receiver via an email transceiver base station; A signcryption verification module, configured for the email recipient to receive the first identity identifier, the first public key, the sending timestamp, and the email aggregate ciphertext corresponding to the email ciphertext, and to perform signcryption verification on the email aggregate ciphertext; The ciphertext decryption module is used to, when it is determined that the email aggregation ciphertext passes the signcryption verification, decrypt the email aggregation ciphertext according to the system public parameters, the second identity identifier, the second private key and the email information corresponding to the email aggregation ciphertext to obtain the email plaintext sent by the email sender.

8. An electronic device, characterized in that: The electronic device comprises: at least one processor; and a memory communicatively connected to the at least one processor; wherein, The memory stores a computer program executable by the at least one processor, and the computer program is executed by the at least one processor so that the at least one processor can execute the mail sending and receiving method according to any one of claims 1 to 6.

9. A computer-readable storage medium, characterized in that: The computer-readable storage medium stores computer instructions, and the computer instructions are used to enable a processor to implement the mail sending and receiving method according to any one of claims 1 to 6 when executed.

10. A computer program product, comprising a computer program, wherein when the computer program is executed by a processor, the mail sending and receiving method according to any one of claims 1 to 6 is implemented.

Images