A mail sending and receiving method, device, equipment and storage medium

Abstract

The application discloses a kind of mail transceiving method, device, equipment and storage medium, belong to private computing technical field, the method includes: mail sender is according to the system public parameter of electronic mail system, sending time stamp, first identity mark, first private key, second identity mark and second public key, to mail plaintext is signed and encrypted, obtains mail ciphertext;Mail sender sends first identity mark, first public key, sending time stamp and mail ciphertext to mail receiver by mail transceiving base station;Mail receiver receives first identity mark, first public key, sending time stamp, and the mail aggregate ciphertext corresponding to mail ciphertext, and carries out signed and encrypted verification to mail aggregate ciphertext;In the case where mail aggregate ciphertext is determined to pass signed and encrypted verification, mail receiver is according to system public parameter, second identity mark, second private key and the mail information corresponding to mail aggregate ciphertext, carries out decryption to mail aggregate ciphertext, obtains the mail plaintext sent by mail sender.

Description

TECHNICAL FIELD

[0001] The present application relates to the technical field of privacy computing, and in particular to a mail sending and receiving method, device, equipment and storage medium. BACKGROUND

[0002] As an indispensable communication software in the process of informatization, the email system has the characteristics of asynchrony, universality and convenience, and is widely used in personal users or enterprise units. Since the email often involves personal privacy information or business secrets of users, the email system has very high security requirements and needs reliable technical means to prevent privacy leakage risks.

[0003] However, the existing information encryption and information signature method applied to the email system has slow encryption speed when facing large content emails, and also needs to separately sign the information, which is low in email transmission efficiency and high in calculation cost. SUMMARY

[0004] The present application provides a mail sending and receiving method, device, equipment and storage medium, which can reduce the calculation cost in the process of email transmission and improve the email transmission efficiency while ensuring the safety of personal privacy information in the email.

[0005] According to an aspect of the present application, a mail sending and receiving method is provided, which comprises:

[0006] The mail sender signs and encrypts the mail plaintext according to the system public parameter of the email system, the sending timestamp, the first identity of the sender and the first key pair, and the second identity of the receiver and the second key pair, to obtain the mail ciphertext; wherein the first key pair comprises a first private key and a first public key; the second key pair comprises a second private key and a second public key;

[0007] The mail sender sends the first identity, the first public key, the sending timestamp and the mail ciphertext to the mail receiver through a mail sending and receiving base station;

[0008] The mail receiver receives the first identity, the first public key, the sending timestamp and the mail ciphertext corresponding to the mail aggregate ciphertext, and performs signature verification on the mail aggregate ciphertext;

[0009] In the case where the mail aggregate ciphertext passes the signature verification, the mail receiver decrypts the mail aggregate ciphertext according to the system public parameter, the second identity, the second private key and the mail information corresponding to the mail aggregate ciphertext, to obtain the mail plaintext sent by the mail sender.

[0010] According to another aspect of the present application, a mail sending and receiving device is provided, which comprises:

[0011] The mail ciphertext determination module is configured to determine, by the mail sender, mail ciphertext from mail plaintext according to a system public parameter of an electronic mail system, a sending timestamp, a first identity and a first key pair of the mail sender, and a second identity and a second key pair of the mail receiver, wherein the first key pair comprises a first private key and a first public key, and the second key pair comprises a second private key and a second public key;

[0012] The mail ciphertext sending module is configured to send, by the mail sender, the first identity, the first public key, the sending timestamp, and the mail ciphertext to the mail receiver via a mail base station.

[0013] The signature verification module is configured to receive, by the mail receiver, the first identity, the first public key, the sending timestamp, and mail aggregate ciphertext corresponding to the mail ciphertext, and perform signature verification on the mail aggregate ciphertext.

[0014] The ciphertext decryption module is configured to, in a case where the mail aggregate ciphertext passes the signature verification, decrypt, by the mail receiver, the mail aggregate ciphertext according to the system public parameter, the second identity, the second private key, and mail information corresponding to the mail aggregate ciphertext, to obtain mail plaintext sent by the mail sender.

[0015] According to another aspect of the present application, an electronic device is provided, which comprises:

[0016] at least one processor; and

[0017] a memory connected to the at least one processor in communication; wherein

[0018] The memory stores a computer program executable by the at least one processor, and the computer program is executed by the at least one processor to enable the at least one processor to perform the mail sending and receiving method of any one of the embodiments of the present application.

[0019] According to another aspect of the present application, a computer readable storage medium is provided, which stores computer instructions for enabling a processor to perform the mail sending and receiving method of any one of the embodiments of the present application when the processor executes the computer instructions.

[0020] According to another aspect of the present application, a computer program product is provided, which comprises a computer program for enabling a processor to perform the mail sending and receiving method of any one of the embodiments of the present application when the processor executes the computer program.

[0021] The technical scheme of the embodiment of the present application is that the mail sender signs and encrypts the mail plaintext according to the system public parameter of the electronic mail system, a sending timestamp, a first identity pair and a first key pair of the mail sender, and a second identity pair and a second key pair of the mail receiver, to obtain mail ciphertext; the first key pair comprises a first private key and a first public key; the second key pair comprises a second private key and a second public key; the mail sender sends the first identity, the first public key, the sending timestamp and the mail ciphertext to the mail receiver via a mail base station; the mail receiver receives the first identity, the first public key, the sending timestamp and the mail ciphertext corresponding to the mail aggregate ciphertext, and performs signature and encryption verification on the mail aggregate ciphertext; in the case that the mail aggregate ciphertext passes the signature and encryption verification, the mail receiver decrypts the mail aggregate ciphertext according to the system public parameter, the second identity, the second private key and the mail information corresponding to the mail aggregate ciphertext, to obtain the mail plaintext sent by the mail sender. The above technical scheme simultaneously realizes the encryption and signature of the mail plaintext through the signature and encryption technology, without the need of performing the encryption and signature operations on the mail plaintext respectively, thereby reducing the calculation cost in the mail transmission process, improving the processing efficiency of the mail plaintext, and further improving the mail transmission efficiency; secondly, the mail sender uses the personal identity and the personal private key of the mail sender and the personal identity and the personal public key of the mail receiver to sign and encrypt the mail plaintext, so that only the mail receiver with the corresponding private key can decrypt the mail ciphertext and view the mail content, thereby avoiding the leakage of the mail content in the mail transmission process, protecting the safety of the personal privacy information in the mail, and improving the security of the mail content in the mail transmission process; then, the plurality of mail ciphertexts sent to the same mail receiver are aggregated into one mail aggregate ciphertext by means of the aggregate signature and encryption technology, and are sent to the mail receiver at one time, thereby further improving the mail transmission efficiency; then, the mail receiver performs signature and encryption verification on the mail aggregate ciphertext, and in the case that the mail aggregate ciphertext passes the signature and encryption verification, decrypts the mail aggregate ciphertext to obtain the mail plaintext sent by the mail sender, thereby ensuring the authenticity and integrity of the mail.

[0022] It should be understood that the content described in this part is not intended to identify the key or important features of the embodiments of the present application, nor is it used to limit the scope of the present application. Other features of the present application will become apparent from the following description. BRIEF DESCRIPTION OF DRAWINGS

[0023] In order to more clearly illustrate the technical solutions in the embodiments of the present application, the following will briefly introduce the drawings needed to be used in the embodiment description. Obviously, the drawings in the following description are only some embodiments of the present application, and other drawings can also be obtained by those skilled in the art without creative labor.

[0024] Figure 1AThis is a topological diagram of relationships between entities in an email system according to an embodiment of the present invention;

[0025] Figure 1B This is a flowchart of an email sending and receiving method provided according to Embodiment 1 of the present invention;

[0026] Figure 2 This is a flowchart of an email sending and receiving method according to Embodiment 2 of the present invention;

[0027] Figure 3 This is a schematic diagram of the structure of an email sending and receiving device according to Embodiment 3 of the present invention;

[0028] Figure 4 This is a schematic diagram of the structure of an electronic device that implements the email sending and receiving method of this invention. Detailed Implementation

[0029] To enable those skilled in the art to better understand the present invention, the technical solutions of the present invention will be clearly and completely described below with reference to the accompanying drawings of the embodiments of the present invention. Obviously, the described embodiments are only some embodiments of the present invention, and not all embodiments. Based on the embodiments of the present invention, all other embodiments obtained by those skilled in the art without creative effort should fall within the scope of protection of the present invention.

[0030] It should be noted that the terms "target," "first," and "second," etc., in the specification, claims, and accompanying drawings of this invention are used to distinguish similar objects and are not necessarily used to describe a specific order or sequence. It should be understood that such data can be interchanged where appropriate so that embodiments of the invention described herein can be implemented in orders other than those illustrated or described herein. Furthermore, the terms "comprising" and "having," and any variations thereof, are intended to cover non-exclusive inclusion; for example, a process, method, system, product, or apparatus that comprises a series of steps or units is not necessarily limited to those steps or units explicitly listed, but may include other steps or units not explicitly listed or inherent to such processes, methods, products, or apparatus.

[0031] Furthermore, it should be noted that the collection, storage, use, processing, transmission, provision, and disclosure of system public parameters and system master private keys of the email system, as well as email information corresponding to email aggregate ciphertext, in the technical solution of this invention all comply with the provisions of relevant laws and regulations and do not violate public order and good morals.

[0032] For ease of understanding, the entities in the email system involved in the embodiments of the present invention will first be briefly described. Specifically, the entities in the email system involved in the embodiments of the present invention include: email sender, email receiver, key generation center (KGC), email transceiver base station, and tracing authority (TRA). See also Figure 1A The email sender communicates with the email recipient through an email transceiver base station; the email sender communicates with the key generation center through a tracking agency; the email recipient communicates with the key generation center through the tracking agency; the email transceiver base station communicates with the key generation center through the tracking agency; the email sender communicates with the email transceiver base station; the email recipient communicates with the email transceiver base station; and the tracking agency communicates with the email sender, email recipient, email transceiver base station, and key generation center. The key generation center is used to generate the email system's public parameters and master private key; it also generates and manages some keys for the email sender, email recipient, email transceiver base station, and tracking agency. The tracking agency provides identity registration and management for the email sender, email recipient, and email transceiver base station. An email transceiver base station is a device used to receive encrypted emails within its coverage area and aggregate the received encrypted emails.

[0033] Example 1

[0034] Figure 1B This is a flowchart of an email sending and receiving method provided in Embodiment 1 of the present invention. This embodiment is applicable to situations where emails are transmitted with encryption, especially emails with large content. The method can be executed by an email sending and receiving device, which can be implemented in hardware and / or software and can be configured in an electronic device. Figure 1B As shown, the method includes:

[0035] S101. The email sender uses the system public parameters of the email system, the sending timestamp, its own first identity and first key pair, and the email recipient's second identity and second key pair to sign and encrypt the plaintext of the email to obtain the encrypted email; wherein, the first key pair includes a first private key and a first public key; the second key pair includes a second private key and a second public key.

[0036] In this context, the email sender refers to the party that sends the email; correspondingly, the email recipient refers to the party that receives the email. The sending timestamp refers to the time the email was sent. The first identifier is the information used to uniquely identify the email sender; correspondingly, the second identifier is the information used to uniquely identify the email recipient. The first key pair refers to the email sender's key pair; correspondingly, the first private key is the email sender's private key; the first public key is the email sender's public key. The second key pair refers to the email recipient's key pair; correspondingly, the second private key is the email recipient's private key; the second public key is the email recipient's public key. Signcryption is a technique that combines encryption and signing functions in public-key cryptography, achieving encryption and signing within a single logical step.

[0037] The common parameters of the email system are generated by a key generation center. Specifically, the key generation center randomly generates an additive cyclic group G of prime order q and generator P; the key generation center randomly selects... This serves as the system's master private key, and the system's master private key m is stored; where, This represents a number in {0,1,2,…,q-1}; then, the key generation center generates the system public key P based on the system master private key m and the generator P. m That is, P m =mP; then, the key generation center selects three hash functions, namely the first hash function H1: Second hash function H2: And the third hash function H3: Thus, the system public parameters of the email system are obtained as syspara = {q, G, P}. m ,H1,H2,H3}, and expose the system's public parameters in the email system.

[0038] Specifically, the email sender obtains a first random number and a second random number; the email sender generates a signature coefficient based on the first random number, the second random number, and its own first private key; the email sender uses the signature coefficient, the first private key, its own first identity identifier, the system public parameters of the email system, the sending timestamp, and the email recipient's second identity identifier and second public key to signify the plaintext of the email, thus obtaining the encrypted email.

[0039] More specifically, the email sender generates a first random number and a second random number based on a random number generation algorithm; then, the email sender uses the first random number, the second random number, and its own first private key to generate a signature coefficient using the following formula:

[0040]

[0041] Where k0 represents the signature coefficient; k1 represents the first random number; and k2 represents the second random number. This represents the first private key. Then, the email sender generates the first ciphertext using the following formula, based on the signature coefficient and the generator elements in the email system's public parameters:

[0042] α1=k0P;

[0043] Where α1 represents the first sub-ciphertext; k0 represents the signature coefficient; and P represents the generator in the system public parameters of the email system. It should be noted that the first sub-ciphertext refers to the ciphertext used to form the first part of the email ciphertext. Then, the email sender uses the first hash function in the system public parameters to hash the email recipient's second identity identifier, the second part of the second public key, and the system public key in the system public parameters to obtain the first hash value, i.e.:

[0044]

[0045] Where h1 represents the first hash value; H1 represents the first hash function in the system's public parameters; ID r A secondary identifier representing the email recipient; P m This refers to the system public key in the system's public parameters; This represents the second public key; This represents the second part of the second public key. Then, the email sender generates the intermediate ciphertext using the signature coefficient, the first part of the second public key, the first hash value, and the system public key, according to the following formula:

[0046]

[0047] Where U represents the intermediate ciphertext, This represents the first part of the second public key. Then, the email sender uses the second hash function from the system's public parameters to perform a hash operation on the second identity identifier, the first sub-ciphertext, the intermediate ciphertext, and the sending timestamp, obtaining the second hash value, i.e.:

[0048] h2 = H2(ID) r ,α1,U,T);

[0049] Where h2 represents the second hash value; H2 represents the second hash function in the system's common parameters; and T represents the sending timestamp. Then, the email sender performs a bitwise XOR operation on the plaintext and the second hash value to obtain the second ciphertext, i.e.:

[0050]

[0051] Where α2 represents the second ciphertext; M represents the plaintext of the email. It should be noted that the second ciphertext refers to the ciphertext used to form the second part of the email ciphertext. Then, the email sender uses the third hash function from the system's public parameters to perform a hash operation on the email plaintext, the first identity identifier, the second public key, the first ciphertext, the intermediate ciphertext, and the sending timestamp, obtaining the third hash value, i.e.:

[0052]

[0053] Where h3 represents the third hash value; H3 represents the third hash function in the system's public parameters; ID i Indicates primary identity identifier; This represents the second public key. Then, the email sender uses the signature coefficient, the third hash value, the first private key, and the order of the additive cyclic group G in the system's public parameters to obtain the third ciphertext using the following formula:

[0054]

[0055] Where α3 represents the third ciphertext; Let represent the first private key; q represents the order of the additive cyclic group G in the system's public parameters. Then, the email sender combines the first, second, and third sub-ciphertexts according to a specific ciphertext combination method to obtain the email ciphertext, denoted as σ = (α1, α2, α30).

[0056] Understandably, based on the known public parameters of the email system, the plaintext of the email is signed using the sender's personal identification and private key, and the recipient's personal identification and public key. This ensures that only the recipient with the corresponding private key can decrypt the email and view its content, thus preventing the leakage of email content during transmission and improving the security of the email content during transmission. At the same time, it simplifies the processing of plaintext emails, eliminating the need for separate encryption and signing operations, thereby improving the efficiency of plaintext email processing.

[0057] S102. The email sender sends the first identity identifier, the first public key, the sending timestamp, and the email ciphertext to the email recipient via the email transceiver base station.

[0058] Specifically, the email sender uses SMTP (Simple Mail Transfer Protocol) to send the first identity identifier, the first public key, the sending timestamp, and the encrypted email to the mail transceiver base station. After processing by the mail transceiver base station, a packaged file consisting of the first identity identifier, the first public key, the sending timestamp, and the encrypted email is obtained. Then, the mail transceiver base station uses SMTP to send the packaged file to the email recipient via the Internet.

[0059] S103. The email recipient receives the first identity identifier, the first public key, the sending timestamp, and the email aggregate ciphertext corresponding to the email ciphertext, and performs signature verification on the email aggregate ciphertext.

[0060] In this context, email aggregated ciphertext refers to the ciphertext obtained after aggregating and processing ciphertext from individual emails. Specifically, the email recipient uses POP3 (Post Office Protocol version 3) or IMAP (Internet Message Access Protocol) to receive a first identity identifier, a first public key, a sending timestamp, and the corresponding email aggregated ciphertext from the mail transceiver base station. Then, based on a preset signature verification equation, the email aggregated ciphertext undergoes signature verification. If the preset signature verification equation is true, the email aggregated ciphertext passes signature verification; otherwise, it fails signature verification. It should be noted that if the email aggregated ciphertext passes signature verification, it means that all ciphertext within it is valid; if it fails signature verification, it means that at least one ciphertext within it is invalid.

[0061] Optionally, the aggregated ciphertext is generated by the email sending and receiving base station using an unbounded fault-tolerant aggregation algorithm. The unbounded fault-tolerant aggregation algorithm is as follows:

[0062] Suppose we have two sets of encrypted emails, N1 and N2, where N1 contains n1 encrypted emails and N2 contains n2 encrypted emails, and n1 ≤ n2; thus, we obtain a set Q1 = {α} consisting of the third sub-encrypted emails from the encrypted emails in N1. 31,N1 ,...,α 3n1,N1}, the set Q2 = {α} consisting of the third sub-ciphertext of the ciphertext in N2. 31,N2 ,...,α 3n2,N2Next, construct binary association matrix A corresponding to N1 and satisfying the nested family, and binary association matrix B corresponding to N2 and satisfying the nested family. It should be noted that each row in binary association matrix A and binary association matrix B represents a sub-verification group, and each column represents key information of an email ciphertext. Assume that binary association matrix A has r1 rows and n1 columns, and r1 satisfies... A binary incidence matrix B has r² rows and n² columns, and r² satisfies It should be noted that the value of t1 is less than The value of t2 is less than Therefore, it can be deduced that r1 ≤ r2. Then, a new sub-verification group is created in the binary association matrix A. Create a new sub-verification group in binary association matrix B. Thus, we obtain the signature core ε1 = (ε1[0], ε1[1], ..., ε1[r1]) corresponding to N1, and the signature core ε2 = (ε2[0], ε2[1], ..., ε2[r2]) corresponding to N2. It should be noted that for the other sub-verification groups in ε1 except for ε1[0], the following conditions are met. 1≤j≤r1. Where ω1 represents the total number of email ciphertexts involved in the j-th sub-verification group in the binary association matrix A. Similarly, for the other sub-verification groups in ε2 besides ε2[0], the following condition is met: 1≤j≤r2. Where ω2 represents the total number of ciphertexts involved in the j-th sub-verification group in the binary association matrix B.

[0063] Then, according to the dimension of ε2, ε1 is extended based on the following extension rules to obtain the extended ε1, denoted as ε. k So that ε1 and ε2 have the same dimension;

[0064]

[0065] Where i represents the binary incidence matrix A 1 The i-th sub-verification group; binary association matrix A 1 This refers to the binary association matrix obtained after expanding the binary association matrix A. For example, if r1 = 2 and r2 = 3, then ε1 = (ε1[0], ε1[1], ε1[2]) and ε2 = (ε2[0], ε2[1], ε2[2], ε2[3]). According to the above expansion rules, ε1 is expanded to obtain ε k =(ε1[0],ε1[1],ε1[2],⊥).

[0066] After that, for ε kAggregating with ε2, we obtain the aggregated signature core ε=(ε[i]|1≤i≤r); where ε[i]=ε k [i]+ε2[i]; r=max(r1,r2). It should be noted that if ε k If [i] = ⊥, then ε[i] = ε2[i]. For example, if ε k =(a+b,a+b,b,⊥), ε2=(a+b+c,a+b+c,b+c,c), then for ε k Aggregate with ε2 to obtain the aggregated signature core ε=(a+b+a+b+c,a+b+a+b+c,b+b+c,c).

[0067] Furthermore, based on the core of the aggregated signature encryption ε=(ε[i]|1≤i≤r), the aggregated email ciphertext formed by aggregating the email ciphertexts in N1 and N2 is obtained, denoted as Where, N k This represents the aggregated set of encrypted emails, which is formed by combining the encrypted email sets N1 and N2; n represents the aggregated set of encrypted emails N. k The number of ciphertexts in the aggregation; k represents the total number of ciphertext sets participating in the unbounded fault-tolerant aggregation operation.

[0068] Understandably, because the unbounded fault-tolerant aggregation algorithm achieves unbounded aggregation, when the number of ciphertext messages in the mail transceiver base station is large, it supports re-aggregating two already aggregated ciphertext sets to generate a final aggregated ciphertext. This improves the flexibility and practicality of ciphertext aggregation, allowing the mail transceiver base station to send multiple ciphertext messages destined for the same recipient to the recipient only once, thereby reducing bandwidth consumption during email transmission and improving the transmission efficiency of ciphertext messages. Secondly, the unbounded fault-tolerant aggregation algorithm adds a sub-verification group containing all key information of the ciphertext messages. Therefore, when invalid ciphertext messages are detected in the aggregated ciphertext, i.e., even if the aggregated ciphertext fails the signature verification, valid ciphertext messages can still be obtained from the aggregated ciphertext, rather than discarding all ciphertext messages in the aggregated ciphertext, thus improving the fault tolerance of the email system.

[0069] Optionally, the default signature verification equation can be: Where n represents the total number of email ciphertexts contained in the email aggregate ciphertext; ε[0] represents the complete aggregation of the third sub-ciphertext of n email ciphertexts; P represents the generator in the system common parameters; α 1i h represents the first sub-ciphertext of the i-th ciphertext; 3i This represents the third hash value corresponding to the ciphertext of the i-th email; This represents the first public key of the i-th email sender; P represents the first part of the first public key of the i-th email sender; m This refers to the system public key in the system's public parameters; This represents the hash value corresponding to the i-th email sender. Here, H1 represents the first hash function in the system's common parameters; ID... i This represents the first identifier of the i-th email sender; This represents the second part of the first public key of the i-th email sender.

[0070] S104. If it is determined that the email aggregate ciphertext has passed the signature verification, the email recipient decrypts the email aggregate ciphertext according to the system public parameters, the second identity identifier, the second private key and the email information corresponding to the email aggregate ciphertext to obtain the plaintext email sent by the email sender.

[0071] The email information corresponding to the email aggregation ciphertext includes at least the following information:

[0072] The first identifier of the i-th (i = 1, 2, ..., n) email sender is denoted as ID. i Where n represents the sender of the email in the email aggregation ciphertext, and also represents the total number of email ciphertexts contained in the email aggregation ciphertext.

[0073] The first public key of the i-th email sender is denoted as .

[0074] The encrypted message sent by the i-th email sender is denoted as σ. i =(α 1i ,α 2i ,α 3i ); where α 1i σ i First ciphertext; α 2i σ i The second ciphertext; α 3i σ i The third ciphertext;

[0075] The i-th email sender sends the encrypted email σ. i The sending timestamp, denoted as T i .

[0076] Specifically, assuming the email aggregated ciphertext has passed signature verification, for the ciphertext σ sent by the i-th email sender involved in the email aggregated ciphertext... i The email recipient uses the first hash function from the system's public parameters to hash the ID. i , The hash value corresponding to the i-th email sender is obtained by performing a hash operation with the system public key in the system public parameters. Then, the email recipient uses their second private key and the encrypted email σ i First ciphertext α 1i The intermediate plaintext is generated using the following formula:

[0077]

[0078] Among them, U i Indicates plaintext in the middle; This represents the second private key. Subsequently, the email receiving method uses the second hash function from the system's public parameters to hash the second identity and the email ciphertext σ. i First ciphertext α 1i Plaintext U in the middle i and sending timestamp T i Perform a hash operation to obtain the intermediate hash value corresponding to the i-th email sender, i.e.:

[0079] x i =H2(ID) r ,α 1i U i ,T i );

[0080] Where, x i H1 represents the intermediate hash value corresponding to the i-th email sender; H2 represents the second hash function in the system's common parameters. Afterwards, the email recipient processes the encrypted email σ... i The second ciphertext α 2i and x i Perform a bitwise XOR operation to obtain the plaintext of the email sent by the i-th email sender, i.e.:

[0081]

[0082] Among them, M i This represents the plaintext of the email sent by the i-th email sender. Based on the principle that the email recipient obtains the plaintext of the email sent by the i-th email sender, the plaintext of the emails sent by each email sender involved in the email aggregation ciphertext can be obtained.

[0083] The technical solution of this invention involves the email sender signing and decrypting the plaintext of the email based on the system public parameters of the email system, the sending timestamp, its own first identity identifier and first key pair, and the email recipient's second identity identifier and second key pair to obtain the ciphertext of the email. The first key pair includes a first private key and a first public key; the second key pair includes a second private key and a second public key. The email sender sends the first identity identifier, the first public key, the sending timestamp, and the ciphertext of the email to the email recipient via an email transceiver base station. The email recipient receives the first identity identifier, the first public key, the sending timestamp, and the email aggregate ciphertext corresponding to the ciphertext of the email, and performs sign-crypto verification on the email aggregate ciphertext. If the email aggregate ciphertext passes the sign-crypto verification, the email recipient decrypts the email aggregate ciphertext based on the system public parameters, the second identity identifier, the second private key, and the email information corresponding to the email aggregate ciphertext to obtain the plaintext of the email sent by the email sender. The above technical solution simultaneously encrypts and signs plaintext emails using signature encryption technology, eliminating the need for separate encryption and signing operations on plaintext emails. This reduces computational costs during email transmission, improves the efficiency of plaintext processing, and consequently enhances email transmission efficiency. Secondly, the email sender uses their personal identifier and private key, while the email recipient uses their personal identifier and public key to signify the plaintext email. This ensures that only the recipient with the corresponding private key can decrypt the encrypted email and view its content, preventing leakage of email content during transmission and protecting the security of personal privacy information. Thirdly, aggregate signature encryption technology combines multiple encrypted emails sent to the same recipient into a single aggregated encrypted email, which is then sent to the recipient all at once, further improving transmission efficiency. Finally, the recipient verifies the aggregated encrypted email through signature encryption and, upon successful verification, decrypts it to obtain the plaintext email sent by the sender, ensuring the authenticity and integrity of the email.

[0084] Based on the above embodiments, as an optional embodiment of the present invention, if it is determined that the email aggregated ciphertext has failed the signature verification, the email recipient can use a preset ciphertext invalidity detection equation to perform invalidity detection on the email ciphertext in the email aggregated ciphertext, thereby obtaining invalid email ciphertext and valid email ciphertext in the email aggregated ciphertext. This allows the email recipient to subsequently only decrypt the valid email ciphertext, thereby reducing the waste of computing resources during the email decryption process and improving the decryption efficiency of email ciphertext.

[0085] The preset equation for invalid ciphertext detection can be: Where ε[j] represents the j-th sub-verification group in the aggregated signature core; ω represents the total number of email ciphertexts involved in the j-th sub-verification group; α 1i h represents the first sub-ciphertext of the i-th ciphertext; 3i This represents the third hash value corresponding to the ciphertext of the i-th email; This represents the first public key of the i-th email sender; P represents the first part of the first public key of the i-th email sender; m This refers to the system public key in the system's public parameters; This represents the hash value corresponding to the i-th email sender. Here, H1 represents the first hash function in the system's common parameters; ID... i This represents the first identifier of the i-th email sender; This represents the second part of the first public key of the i-th email sender.

[0086] Specifically, if the aggregated ciphertext fails the signature verification, for the j-th sub-verification group in the aggregated signature core corresponding to the aggregated ciphertext, the email recipient can use a preset invalidity detection equation to perform invalidity checks on the ciphertexts involved in that sub-verification group. If the preset invalidity detection equation is true, it means that all the ciphertexts involved in that sub-verification group are valid ciphertexts; if the preset invalidity detection equation is false, it means that at least one of the ciphertexts involved in that sub-verification group is invalid. After the email recipient has checked all the sub-verification groups in the aggregated signature core, they can obtain the invalid and valid ciphertexts in the aggregated ciphertext.

[0087] Example 2

[0088] Figure 2 This is a flowchart of an email sending and receiving method provided in Embodiment 2 of the present invention. Based on the above embodiments, this embodiment provides a method for generating a key pair for the email sender or email receiver. It should be noted that parts not described in detail in this embodiment can be referred to in the relevant descriptions of other embodiments. For example... Figure 2 As shown, the method includes:

[0089] S201. The tracking agency generates a first fake identity corresponding to the first authentication value based on the tracking agency information, the system public parameters of the email system, and the receiving timestamp of the first authentication value, and sends the first fake identity to the key generation center.

[0090] The first authentication value is a numerical value used to uniquely verify the identity of the email sender. Optionally, the first authentication value can be determined based on a random number selected by the email sender and a generator in the system's public parameters, i.e., R1 = β1P. Here, R1 represents the first authentication value; β1 represents the random number selected by the email sender; and P represents the generator in the system's public parameters. It should be noted that the first authentication value is sent by the email sender to the tracking organization.

[0091] The tracking organization information refers to information related to the tracking organization; optionally, it includes the tracking organization's identity identifier and private key. The tracking organization's identity identifier is information used to uniquely identify the tracking organization; the tracking organization's private key is the tracking organization's private key. Additionally, the tracking organization information may also include the tracking organization's public key and partial key; the tracking organization's public key is the tracking organization's public key; the tracking organization's partial key is a portion of the tracking organization's key. The receipt timestamp refers to the time when the tracking organization receives the first authentication value. The first false identity refers to the false identity of the email sender.

[0092] Specifically, the tracking agency generates a first intermediate fake identity based on the received first authentication value; the tracking agency generates a target hash value based on the email system's public parameters, the tracking agency's identity identifier, the tracking agency's private key, and the timestamp of receiving the first authentication value; the tracking agency generates a second intermediate fake identity based on the first authentication value and the target hash value; the tracking agency generates a first fake identity corresponding to the first authentication value based on the first intermediate fake identity, the second intermediate fake identity, and the timestamp; the tracking agency sends the first fake identity to the key generation center, so that the key generation center can generate a partial key for the email sender based on the first fake identity. Both the first and second intermediate fake identities are required to generate the first fake identity, but the first and second intermediate fake identities are different.

[0093] More specifically, the tracking agency directly uses the first received authentication value as the first intermediate false identity, i.e., FI. ID,1 =R1; where FI ID,1 This represents the first intermediate fake identity; subsequently, the tracking agency uses the second hash function from the system's public parameters to perform a hash operation on the tracking agency's identity identifier, the first authentication value, the tracking agency's private key, and the receiving timestamp, to obtain the target hash value, i.e.:

[0094]

[0095] Where, x ID H2 represents the target hash value; H2 represents the second hash function in the system's common parameters; ID TRAR1 represents the tracking organization's identity identifier; R1 represents the first identity verification value. Indicates the tracking organization's private key; T ID This indicates the received timestamp. Afterwards, the tracking agency performs a bitwise XOR operation on the first authentication value and the target hash value to obtain the second intermediate fake identity, i.e.:

[0096]

[0097] Among them, FI ID,2 This represents the second intermediate fake identity. Subsequently, the tracking agency combines the first intermediate fake identity, the second intermediate fake identity, and the receiving timestamp according to a specific fake identity combination method to obtain the first fake identity corresponding to the first authentication value, denoted as FI. ID =(FI) ID,1 ,FI ID,2 ,T ID The tracking agency then sends the first fake identity to the key generation center, which then generates a partial key for the email sender based on the first fake identity.

[0098] Understandably, the email sender sends their authentication value (i.e., the initial authentication value) to the tracking agency, which then generates a false identity (i.e., the initial false identity). This prevents anyone other than the email sender and the tracking agency from obtaining the sender's true identity through the initial false identity, thus avoiding the leakage of the email sender's personal privacy information and improving its security. Simultaneously, it facilitates subsequent anonymous email sending by the sender.

[0099] Optionally, the tracking agency can also send a first fake identity to the email sender so that the email sender can send emails using the first fake identity in the future, thereby protecting the security of the email sender's personal privacy information.

[0100] S202. The key generation center receives the first fake identity and generates a sender's partial key based on the first fake identity, system public parameters, and system master private key.

[0101] Here, the sender's partial key refers to a portion of the email sender's key. Specifically, the key generation center receives the first fake identity from the tracking agency, and after receiving the first fake identity, it generates the first intermediate key using the generator element in the system's public parameters and a specified random number, according to the following formula:

[0102] D ID =d ID P;

[0103] Among them, D ID Indicates the first intermediate key; d IDThis indicates a specified random number; P represents the generator in the system's public parameters. It should be noted that the specified random number refers to the random number specified by the key generation center. Then, the key generation center uses the first hash function from the system's public parameters to perform a hash operation on the first fake identity, the first intermediate key, and the system public key from the system's public parameters to obtain the hash value corresponding to the first fake identity, i.e.:

[0104]

[0105] in, This represents the hash value corresponding to the first fake identity; FI ID Indicates the first false identity; P m This represents the system public key in the system's public parameters. Then, the key generation center, based on a specified random number, the first intermediate key, the system master private key, the hash value corresponding to the first fake identity, and the order of the additive cyclic group G in the system's public parameters, obtains the second intermediate key using the following formula:

[0106]

[0107] Among them, b ID Let represent the second intermediate key; m represent the system master private key; and q represent the order of the additive cyclic group G in the system public parameters. Then, the key generation center combines the first and second intermediate keys according to a specific partial key combination method to obtain the sender's partial key, denoted as (b...). ID D ID ).

[0108] S203. The key generation center sends part of the sender's key to the email sender through a tracking agency.

[0109] Specifically, the key generation center first sends part of the sender's key to the tracking agency; then, the tracking agency sends part of the sender's key to the email sender.

[0110] S204. The email sender generates a first key pair based on the received sender partial key and system public parameters.

[0111] Specifically, the email sender generates a random key number based on a randomization algorithm; the email sender generates a first private key based on the random key number and the received partial key from the sender; the email sender generates public key parameters based on the random key number and system public parameters; and the email sender generates a first public key based on the public key parameters and the partial key from the sender. Here, the random key number refers to the random number used to generate the first key pair. The public key parameters refer to the parameters required to generate the first public key.

[0112] More specifically, the email sender generates a random key number based on a random generation algorithm; then, the email sender combines the random key number with a second intermediate key from the sender's partial key according to a specific private key combination method to obtain the first private key, denoted as SK1 = (a ID ,b ID ); where a ID b represents a key random number; ID This represents the second intermediate key in the sender's partial key. Then, the email sender generates the public key parameters using the following formula, based on the key random number and the generator in the system's public parameters:

[0113] A ID =a ID P;

[0114] Among them, A ID represents the public key parameter; P represents the generator in the system's public parameters. Then, the email sender generates a partial public key based on the public key parameter and the first intermediate key from the sender's partial key, using the following formula:

[0115] C ID =A ID +D ID ;

[0116] Among them, C ID Represents a portion of the public key; D ID This represents the first intermediate key in the sender's partial key. Then, the email sender combines the partial public key and the first intermediate key according to a specific public key combination method to obtain the first public key, denoted as PK1 = (C ID D ID ).

[0117] It should be noted that the first private key is known only to the email sender and is kept secret by the email sender; while the first public key is published by the email sender in the email system.

[0118] Understandably, the email sender generates the first key pair based on the sender's partial key obtained from the first fake identity and the system's public parameters. This increases the complexity of the first key pair generation process. Furthermore, since the generation of the first key pair is not directly related to the email sender's real identity, it reduces the risk of the first key pair being cracked due to the leakage of the email sender's real identity, thereby enhancing the security of the first key pair.

[0119] Optionally, to prevent unauthorized tracking of email senders and to further protect the security of their personal privacy, before generating the first key pair based on the received sender partial key and system public parameters, the email sender can also perform an expiration check on the first fake identity using the following fake identity expiration verification equation:

[0120]

[0121] Among them, b ID D represents the second intermediate key in the sender's partial key; ID The first intermediate key in the sender's partial key; P represents the generator in the system common parameters; h FIID P represents the hash value corresponding to the first fake identity. m This represents the system public key in the system's public parameters.

[0122] Specifically, the email sender can input the first and second intermediate keys from the received sender partial key, the generator and system public key from the system public parameters, and the hash value corresponding to the first fake identity into the above fake identity expiration verification equation. If the fake identity expiration verification equation is true, it means that the first fake identity has not expired, and the email sender generates the first key pair based on the received sender partial key and system public parameters. If the fake identity expiration verification equation is false, it means that the first fake identity has expired, and S201-S203 are executed again, that is, the email sender re-receives the sender partial key regenerated by the key generation center.

[0123] Based on the similar principle of generating the first key pair, namely S201 to S204, the tracking agency generates a second fake identity corresponding to the second authentication value according to the tracking agency information, the system public parameters of the email system, and the receiving timestamp of the received second authentication value, and sends the second fake identity to the key generation center; wherein, the second authentication value refers to the value used to uniquely verify the identity of the email recipient; the key generation center receives the second fake identity and generates a partial key for the recipient according to the first fake identity, the system public parameters, and the system master private key; the key generation center sends the partial key for the recipient to the email recipient through the tracking agency; the email recipient generates a second key pair according to the received partial key for the recipient and the system public parameters.

[0124] S205. The email sender uses the system public parameters of the email system, the sending timestamp, its own first identity and first key pair, and the email recipient's second identity and second key pair to sign and encrypt the plaintext of the email to obtain the encrypted email; wherein, the first key pair includes a first private key and a first public key; and the second key pair includes a second private key and a second public key.

[0125] S206. The email sender sends the first identity identifier, the first public key, the sending timestamp, and the email ciphertext to the email recipient via the email transceiver base station.

[0126] S207. The email recipient receives the first identity identifier, the first public key, the sending timestamp, and the email aggregate ciphertext corresponding to the email ciphertext, and performs signature verification on the email aggregate ciphertext.

[0127] S208. If it is determined that the email aggregate ciphertext has passed the signature verification, the email recipient decrypts the email aggregate ciphertext according to the system public parameters, the second identity identifier, the second private key and the email information corresponding to the email aggregate ciphertext to obtain the plaintext email sent by the email sender.

[0128] The technical solution of this invention involves a tracking agency generating a first fake identity corresponding to the first authentication value based on tracking agency information, system public parameters of the email system, and the receiving timestamp of the first authentication value, and sending the first fake identity to a key generation center. The key generation center receives the first fake identity and generates a sender's partial key based on the first fake identity, system public parameters, and the system master private key. The key generation center sends the sender's partial key to the email sender via the tracking agency. The email sender generates a first key pair based on the received sender's partial key and system public parameters. The email sender then uses the system public parameters of the email system, the sending timestamp, its own first identity identifier and first key pair, and the email recipient's first authentication value... A first key pair (first private key and second public key) is used to signify the plaintext email to obtain the ciphertext. The first key pair includes a first private key and a first public key; the second key pair includes a second private key and a second public key. The email sender transmits the first identity, first public key, sending timestamp, and ciphertext to the email recipient via a mail transceiver base station. The email recipient receives the first identity, first public key, sending timestamp, and the corresponding aggregated ciphertext, and performs sign-cryptography verification on the aggregated ciphertext. If the aggregated ciphertext passes the sign-cryptography verification, the email recipient decrypts it using system public parameters, the second identity, the second private key, and the corresponding email information to obtain the plaintext email sent by the email sender. The above technical solution provides a method for generating a first key pair or a second key pair, providing data support for subsequent aggregated signature encryption and decryption of emails. Subsequently, signature encryption technology simultaneously encrypts and signs the plaintext of the email, eliminating the need for separate encryption and signing operations on the plaintext, thereby reducing computational costs during email transmission, improving the efficiency of plaintext processing, and ultimately enhancing email transmission efficiency. Furthermore, the email sender uses their personal identification and private key, while the email recipient uses their personal identification and public key to signature encryption the plaintext, ensuring that only the recipient with the corresponding private key can decrypt the encrypted email. The system allows users to view email content, thus preventing leaks during transmission and ensuring the security of personal information. It also enhances the overall security of emails during transmission. Next, using aggregated signature encryption technology, multiple encrypted emails sent to the same recipient are combined into a single aggregated encrypted email, which is then sent to the recipient all at once, further improving transmission efficiency. Finally, the recipient verifies the aggregated encrypted email by signing it. Once the verification is successful, the recipient decrypts the aggregated encrypted email to obtain the plaintext email from the sender, ensuring the authenticity and integrity of the email.

[0129] Based on the above embodiments, as an optional embodiment of the present invention, in order to periodically generate a first fake identity and further prevent the email sender's real identity from being stolen, the email sender can periodically generate a new first identity verification value and send the new first identity verification value to the tracking agency.

[0130] Specifically, the email sender can periodically generate a first verification coefficient and a second verification coefficient using a timed random number generation algorithm. Then, based on the existing first private key, the first verification coefficient, and the second verification coefficient, the email sender generates a new first authentication value using the following formula:

[0131]

[0132] in, η1 represents the existing first private key; η2 represents the first verification coefficient; η2 represents the second verification coefficient; This represents the new first authentication value. The email sender then sends the new first authentication value to the tracking agency. The timed random number generation algorithm is used to generate random numbers periodically; optionally, the timed random number generation algorithm can be pre-set according to actual business needs, and this embodiment of the invention does not specifically limit it.

[0133] Example 3

[0134] Figure 3 This is a schematic diagram of an email sending and receiving device according to Embodiment 3 of the present invention. This embodiment is applicable to the encrypted transmission of emails, especially to the encrypted transmission of emails with large content. The device can be implemented in hardware and / or software and can be configured in an electronic device. Figure 3 As shown, the device includes:

[0135] The email ciphertext determination module 301 is used by the email sender to sign and encrypt the plaintext of the email based on the system public parameters of the email system, the sending timestamp, its own first identity and first key pair, and the email recipient's second identity and second key pair to obtain the email ciphertext; wherein, the first key pair includes a first private key and a first public key; and the second key pair includes a second private key and a second public key.

[0136] The email encrypted sending module 302 is used by the email sender to send the first identity identifier, the first public key, the sending timestamp and the email encrypted text to the email receiver via the email transceiver base station.

[0137] The signature verification module 303 is used for the email recipient to receive the first identity identifier, the first public key, the sending timestamp, and the email aggregate ciphertext corresponding to the email ciphertext, and to perform signature verification on the email aggregate ciphertext.

[0138] The ciphertext decryption module 304 is used to decrypt the email aggregate ciphertext according to the system public parameters, the second identity identifier, the second private key and the email information corresponding to the email aggregate ciphertext, when it is determined that the email aggregate ciphertext has passed the signature verification, so as to obtain the plaintext of the email sent by the email sender.

[0139] The technical solution of this invention involves the email sender signing and decrypting the plaintext of the email based on the system public parameters of the email system, the sending timestamp, its own first identity identifier and first key pair, and the email recipient's second identity identifier and second key pair to obtain the ciphertext of the email. The first key pair includes a first private key and a first public key; the second key pair includes a second private key and a second public key. The email sender sends the first identity identifier, the first public key, the sending timestamp, and the ciphertext of the email to the email recipient via an email transceiver base station. The email recipient receives the first identity identifier, the first public key, the sending timestamp, and the email aggregate ciphertext corresponding to the ciphertext of the email, and performs sign-crypto verification on the email aggregate ciphertext. If the email aggregate ciphertext passes the sign-crypto verification, the email recipient decrypts the email aggregate ciphertext based on the system public parameters, the second identity identifier, the second private key, and the email information corresponding to the email aggregate ciphertext to obtain the plaintext of the email sent by the email sender. The above technical solution simultaneously encrypts and signs plaintext emails using signature encryption technology, eliminating the need for separate encryption and signing operations for each plaintext message. This reduces computational costs during email transmission, improves the efficiency of plaintext processing, and consequently enhances email transmission efficiency. Secondly, the sender uses their personal identifier and private key, while the recipient uses their personal identifier and public key to signify the plaintext. This ensures that only the recipient with the corresponding private key can decrypt the encrypted email and view its content, preventing leakage and protecting personal privacy during transmission. Furthermore, aggregate signature encryption technology combines multiple encrypted emails sent to the same recipient into a single aggregated ciphertext, sending it all at once and further improving transmission efficiency. Finally, the recipient verifies the aggregated ciphertext through signature encryption and, if successful, decrypts it to obtain the original plaintext email, ensuring the authenticity and integrity of the email.

[0140] Optionally, the device further includes a first key pair generation module, the first key pair generation module comprising:

[0141] The first fake identity generation unit is used by the tracking agency to generate a first fake identity corresponding to the first authentication value based on the tracking agency information, the system public parameters of the email system, and the receiving timestamp of the first authentication value, and send the first fake identity to the key generation center; wherein, the first authentication value refers to the value used to uniquely verify the identity of the email sender;

[0142] The sender partial key generation unit is used by the key generation center to receive the first fake identity and generate the sender partial key based on the first fake identity, system public parameters and system master private key;

[0143] The sender's partial key sending unit is used by the key generation center to send a portion of the sender's key to the email sender via a tracking agency.

[0144] The first key pair generation unit is used by the email sender to generate a first key pair based on the received sender partial key and system public parameters.

[0145] Optionally, the tracking organization information includes the tracking organization's identity identifier and the tracking organization's private key;

[0146] The first fake identity generation unit is specifically used for:

[0147] The tracking agency generates a first intermediate false identity based on the first identity verification value received;

[0148] The tracking agency generates a target hash value based on the email system's public parameters, the tracking agency's identity identifier, the tracking agency's private key, and the timestamp of the received first authentication value.

[0149] The tracking agency generates a second intermediate false identity based on the first authentication value and the target hash value;

[0150] The tracking agency generates a first fake identity corresponding to the first identity verification value based on the first intermediate fake identity, the second intermediate fake identity, and the receiving timestamp.

[0151] Optionally, the first key pair generation unit is specifically used for:

[0152] The email sender generates a random key number based on a random generation algorithm;

[0153] The email sender generates a first private key based on a key random number and a portion of the sender's key received from the sender;

[0154] The email sender generates public key parameters based on the key random number and system public parameters;

[0155] The email sender generates the first public key based on the public key parameters and part of the sender's key.

[0156] Optional, the email ciphertext verification module 301 is specifically used for:

[0157] The email sender obtains the first and second random numbers;

[0158] The email sender generates a signature coefficient based on a first random number, a second random number, and their own first private key;

[0159] The email sender uses the signature coefficient, the first private key, their own first identity identifier, the email system's public parameters, the sending timestamp, and the email recipient's second identity identifier and second public key to signify the plaintext of the email, thus obtaining the encrypted email.

[0160] Optionally, the email aggregated ciphertext is generated by the email sending and receiving base station using an unbounded fault-tolerant aggregation algorithm.

[0161] The email sending and receiving device provided in the embodiments of the present invention can execute the email sending and receiving methods provided in any embodiment of the present invention, and has the corresponding functional modules and beneficial effects for executing each email sending and receiving method.

[0162] According to embodiments of the present invention, the present invention also provides an electronic device, a readable storage medium, and a computer program product.

[0163] Example 4

[0164] Figure 4 A schematic diagram of an electronic device 10 that can be used to implement embodiments of the present invention is shown. The electronic device is intended to represent various forms of digital computers, such as laptop computers, desktop computers, workstations, personal digital assistants, servers, blade servers, mainframe computers, and other suitable computers. The electronic device can also represent various forms of mobile devices, such as personal digital processors, cellular phones, smartphones, wearable devices (e.g., helmets, glasses, watches, etc.), and other similar computing devices. The components shown herein, their connections and relationships, and their functions are merely illustrative and are not intended to limit the implementation of the invention described and / or claimed herein.

[0165] like Figure 4As shown, the electronic device 10 includes at least one processor 11 and a memory, such as a read-only memory (ROM) 12 or a random access memory (RAM) 13, communicatively connected to the at least one processor 11. The memory stores computer programs executable by the at least one processor. The processor 11 can perform various appropriate actions and processes based on the computer program stored in the ROM 12 or loaded from storage unit 18 into the RAM 13. The RAM 13 can also store various programs and data required for the operation of the electronic device 10. The processor 11, ROM 12, and RAM 13 are interconnected via a bus 14. An input / output (I / O) interface 15 is also connected to the bus 14.

[0166] Multiple components in electronic device 10 are connected to I / O interface 15, including: input unit 16, such as keyboard, mouse, etc.; output unit 17, such as various types of displays, speakers, etc.; storage unit 18, such as disk, optical disk, etc.; and communication unit 19, such as network card, modem, wireless transceiver, etc. Communication unit 19 allows electronic device 10 to exchange information / data with other devices through computer networks such as the Internet and / or various telecommunications networks.

[0167] Processor 11 can be a variety of general-purpose and / or special-purpose processing components with processing and computing capabilities. Some examples of processor 11 include, but are not limited to, a central processing unit (CPU), a graphics processing unit (GPU), various special-purpose artificial intelligence (AI) computing chips, various processors running machine learning model algorithms, a digital signal processor (DSP), and any suitable processor, controller, microcontroller, etc. Processor 11 performs the various methods and processes described above, such as email sending and receiving methods.

[0168] In some embodiments, the email sending and receiving method may be implemented as a computer program tangibly contained in a computer-readable storage medium, such as storage unit 18. In some embodiments, part or all of the computer program may be loaded and / or installed on electronic device 10 via ROM 12 and / or communication unit 19. When the computer program is loaded into RAM 13 and executed by processor 11, one or more steps of the email sending and receiving method described above may be performed. Alternatively, in other embodiments, processor 11 may be configured to perform the email sending and receiving method by any other suitable means (e.g., by means of firmware).

[0169] Various embodiments of the systems and techniques described above herein can be implemented in digital electronic circuit systems, integrated circuit systems, field-programmable gate arrays (FPGAs), application-specific integrated circuits (ASICs), application-specific standard products (ASSPs), systems-on-a-chip (SoCs), payload-programmable logic devices (CPLDs), computer hardware, firmware, software, and / or combinations thereof. These various embodiments may include implementations in one or more computer programs that can be executed and / or interpreted on a programmable system including at least one programmable processor, which may be a dedicated or general-purpose programmable processor, capable of receiving data and instructions from a storage system, at least one input device, and at least one output device, and transmitting data and instructions to the storage system, the at least one input device, and the at least one output device.

[0170] Computer programs used to implement the methods of the present invention may be written in any combination of one or more programming languages. These computer programs may be provided to a processor of a general-purpose computer, a special-purpose computer, or other programmable data processing device, such that when executed by the processor, the computer programs cause the functions / operations specified in the flowcharts and / or block diagrams to be performed. The computer programs may be executed entirely on a machine, partially on a machine, or as a standalone software package, partially on a machine and partially on a remote machine, or entirely on a remote machine or server.

[0171] In the context of this invention, a computer-readable storage medium can be a tangible medium that may contain or store a computer program for use by or in conjunction with an instruction execution system, apparatus, or device. A computer-readable storage medium may include, but is not limited to, electronic, magnetic, optical, electromagnetic, infrared, or semiconductor systems, apparatus, or devices, or any suitable combination thereof. Alternatively, a computer-readable storage medium may be a machine-readable signal medium. More specific examples of machine-readable storage media include electrical connections based on one or more wires, portable computer disks, hard disks, random access memory (RAM), read-only memory (ROM), erasable programmable read-only memory (EPROM or flash memory), optical fibers, portable compact disk read-only memory (CD-ROM), optical storage devices, magnetic storage devices, or any suitable combination thereof.

[0172] To provide interaction with a user, the systems and techniques described herein can be implemented on an electronic device having: a display device (e.g., a CRT (cathode ray tube) or LCD (liquid crystal display) monitor) for displaying information to the user; and a keyboard and pointing device (e.g., a mouse or trackball) through which the user provides input to the electronic device. Other types of devices can also be used to provide interaction with the user; for example, feedback provided to the user can be any form of sensory feedback (e.g., visual feedback, auditory feedback, or tactile feedback); and input from the user can be received in any form (including sound input, voice input, or tactile input).

[0173] The systems and technologies described herein can be implemented in computing systems that include backend components (e.g., as data servers), or computing systems that include middleware components (e.g., application servers), or computing systems that include frontend components (e.g., user computers with graphical user interfaces or web browsers through which users can interact with implementations of the systems and technologies described herein), or any combination of such backend, middleware, or frontend components. The components of the system can be interconnected via digital data communication of any form or medium (e.g., communication networks). Examples of communication networks include local area networks (LANs), wide area networks (WANs), blockchain networks, and the Internet.

[0174] A computing system can include clients and servers. Clients and servers are generally located far apart and typically interact through communication networks. The client-server relationship is created by computer programs running on the respective computers and having a client-server relationship with each other. The server can be a cloud server, also known as a cloud computing server or cloud host, which is a hosting product within the cloud computing service system to address the shortcomings of traditional physical hosts and VPS services, such as high management difficulty and weak business scalability.

[0175] It should be understood that the various forms of processes shown above can be used, with steps reordered, added, or deleted. For example, the steps described in this invention can be executed in parallel, sequentially, or in different orders, as long as the desired result of the technical solution of this invention can be achieved, and this is not limited herein.

[0176] The specific embodiments described above do not constitute a limitation on the scope of protection of this invention. Those skilled in the art should understand that various modifications, combinations, sub-combinations, and substitutions can be made according to design requirements and other factors. Any modifications, equivalent substitutions, and improvements made within the spirit and principles of this invention should be included within the scope of protection of this invention.

Claims

1. A method for sending and receiving emails, characterized in that, include: The email sender uses the email system's public parameters, the sending timestamp, its own first identity and first key pair, and the email recipient's second identity and second key pair to sign and encrypt the plaintext of the email, thus obtaining the encrypted email; wherein, the first key pair includes a first private key and a first public key; and the second key pair includes a second private key and a second public key. The email sender sends the first identity identifier, the first public key, the sending timestamp, and the email ciphertext to the email recipient via the email transceiver base station; The email recipient receives the first identity identifier, the first public key, the sending timestamp, and the email aggregate ciphertext corresponding to the email ciphertext, and performs signature verification on the email aggregate ciphertext; If the email aggregate ciphertext passes the signature verification, the email recipient decrypts the email aggregate ciphertext based on the system public parameters, the second identity identifier, the second private key, and the email information corresponding to the email aggregate ciphertext to obtain the plaintext email sent by the email sender.

2. The method according to claim 1, characterized in that, The generation process of the first key pair is as follows: The tracking agency generates a first fake identity corresponding to the first authentication value based on the tracking agency information, the system public parameters of the email system, and the receiving timestamp of the first authentication value, and sends the first fake identity to the key generation center; wherein, the first authentication value refers to a value used to uniquely verify the identity of the email sender; The key generation center receives the first fake identity and generates a sender's partial key based on the first fake identity, the system public parameters, and the system master private key. The key generation center sends a portion of the sender's key to the email sender via the tracking agency; The email sender generates a first key pair based on the received sender partial key and the system public parameters.

3. The method according to claim 2, characterized in that, The tracking organization information includes the tracking organization's identity identifier and the tracking organization's private key; The tracking agency generates a first fake identity corresponding to the first authentication value based on the tracking agency information, the system public parameters of the email system, and the timestamp of receiving the first authentication value, including: The tracking agency generates a first intermediate false identity based on the first identity verification value received; The tracking agency generates a target hash value based on the system public parameters of the email system, the tracking agency's identity identifier, the tracking agency's private key, and the timestamp of receiving the first authentication value. The tracking agency generates a second intermediate fake identity based on the first authentication value and the target hash value; The tracking agency generates a first fake identity corresponding to the first authentication value based on the first intermediate fake identity, the second intermediate fake identity, and the receiving timestamp.

4. The method according to claim 2, characterized in that, The email sender generates a first key pair based on the received sender partial key and the system public parameters, including: The email sender generates a random key number based on a random generation algorithm; The email sender generates a first private key based on the key random number and the received partial key from the sender; The email sender generates public key parameters based on the key random number and the system public parameters; The email sender generates a first public key based on the public key parameters and the sender's partial key.

5. The method according to claim 1, characterized in that, The email sender, based on the email system's public parameters, the sending timestamp, its own first identity identifier and first key pair, and the email recipient's second identity identifier and second key pair, signs and encrypts the plaintext of the email to obtain the encrypted email, including: The email sender obtains a first random number and a second random number; The email sender generates a signature coefficient based on the first random number, the second random number, and its own first private key; The email sender uses the signature coefficient, the first private key, its own first identity identifier, the system public parameters of the email system, the sending timestamp, and the email recipient's second identity identifier and second public key to signify the plaintext of the email, thus obtaining the encrypted email.

6. The method according to claim 1, characterized in that, The aggregated ciphertext of the email is generated by the email sending and receiving base station using an unbounded fault-tolerant aggregation algorithm.

7. An email sending and receiving device, characterized in that, include: The email ciphertext determination module is used by the email sender to sign and encrypt the plaintext of the email based on the system public parameters of the email system, the sending timestamp, its own first identity and first key pair, and the email recipient's second identity and second key pair to obtain the email ciphertext; wherein, the first key pair includes a first private key and a first public key; and the second key pair includes a second private key and a second public key. The email encrypted sending module is used by the email sender to send the first identity identifier, the first public key, the sending timestamp, and the email encrypted text to the email receiver via an email transceiver base station; The signature verification module is used for the email recipient to receive the first identity identifier, the first public key, the sending timestamp, and the email aggregate ciphertext corresponding to the email ciphertext, and to perform signature verification on the email aggregate ciphertext. The ciphertext decryption module is used to, when it is determined that the email aggregated ciphertext has passed the signature verification, decrypt the email aggregated ciphertext according to the system public parameters, the second identity identifier, the second private key and the email information corresponding to the email aggregated ciphertext to obtain the plaintext email sent by the email sender.

8. An electronic device, characterized in that, The electronic device includes: At least one processor; and A memory communicatively connected to the at least one processor; wherein, The memory stores a computer program that can be executed by the at least one processor, the computer program being executed by the at least one processor to enable the at least one processor to perform the email sending and receiving method according to any one of claims 1-6.

9. A computer-readable storage medium, characterized in that, The computer-readable storage medium stores computer instructions that cause a processor to execute the email sending and receiving method according to any one of claims 1-6.

10. A computer program product comprising a computer program that, when executed by a processor, implements the email sending and receiving method according to any one of claims 1-6.

Images