Method for encrypting distribution certificate and verification information

Abstract

The invention discloses a method for encrypting distribution certificates and verifying information, which comprises the following steps of: generating uniquely matched certificate content for each individual to which a certificate is to be distributed, and converting the certificate content into a hash value # imgabs0 #; generating a private key and a public key for the certificate content, and generating each certificate signature value sign by combining the private key, the public key and the hash value corresponding to the certificate content; establishing a communication relationship among the plurality of training institutions, performing cross validation on certain certificate content by using other training institutions, and storing the certificate content passing the cross validation in a local memory corresponding to the certain certificate content; verifying whether the certificate content is valid or not by using a verification system, and verifying whether the check-out score in the valid certificate content is a qualified score or not; according to the invention, anti-counterfeiting and non-tampering operations are carried out on the certificate content corresponding to each student individual, and the validity and score performance of the stored certificate content are efficiently and safely verified.

Description

Technical Field

[0001] The present invention relates to the technical field of certificate encryption, and in particular to a method for encrypting and distributing certificates and verifying information. Background Art

[0002] With the development of informatization, electronic training certificates have become an important basis for professional qualification certification. The current training certificate issuance and verification system relies on centralized management, and the training institution usually controls the generation and storage of certificate data. These systems use traditional database technology to store sensitive data, including trainees' personal identity information and performance information.

[0003] The traditional certificate generation and verification method has security risks such as certificate forgery and tampering, and students' personal privacy information is easily leaked. Although there are some certificate encryption methods that can achieve anti-counterfeiting and non-tampering, the certificate needs to be completely decrypted in the process of querying grades. Therefore, it is still easy to be tampered with during the decryption process. Summary of the invention

[0004] The purpose of the present invention is to provide a method for encrypting and distributing certificates and verifying information to solve the technical problem in the prior art that in the process of querying scores, the certificate needs to be completely decrypted, so it is still easy to be tampered with during the decryption process.

[0005] In order to solve the above technical problems, the present invention specifically provides the following technical solutions: A method for encrypting and distributing certificates and verification information, comprising the following steps: Step 100: Generate unique matching certificate content for each individual to whom the certificate is to be distributed, and convert the certificate content into a hash value. ; Step 200: Generate a private key and a public key for the certificate content, and generate a signature value sign for each certificate by combining the private key, the public key and the hash value corresponding to the certificate content; Step 300: Establish a communication relationship between multiple training institutions, use other training institutions to cross-verify a certificate content, and store the cross-verified certificate content in a local storage corresponding to a certificate content; Step 400: Use a verification system to verify whether the certificate content is valid, and verify whether the final examination results in the valid certificate content are qualified results.

[0006] As a preferred solution of the present invention, in step 200, a 256-bit random number is generated using Secure Random as a private key sk, and the private key is not disclosed to the public; The public key pk is obtained by combining the private key sk with the base point G of the secp256k1 elliptic curve. The public key pk is publicly released, pk=sk*G; Use the secp256k1 curve to generate a random unique identifier k for the certificate and calculate the point , G is the secp256k1 base point, and the horizontal coordinate of R is marked as r; Each certificate signature value is sign, ; The hash value of each certificate content is .

[0007] As a preferred solution of the present invention, in step 300, the method for cross-verifying the certificate content is as follows: Independent network nodes will be created for training institutions that distribute certificates to individuals, and multiple independent network nodes will communicate using p2p protocols; Send a broadcast message to a network node of a training institution, where the broadcast message includes the certificate signature value and the query address; The network nodes corresponding to other training institutions verify the validity of the certificate content and broadcast the valid information and signature information to other nodes; After the network node of the training institution receives the verification information of each certificate signature value from multiple other training institutions, the verified certificate content is stored locally in the training institution to form a certificate public link network.

[0008] As a preferred solution of the present invention, the certificate signature value sign of each certificate content, the certificate random identifier k and the hash value formed by converting each certificate content A storage object is formed, and the storage object serves as the query address of the certificate content.

[0009] As a preferred solution of the present invention, the implementation method of the network nodes corresponding to other training institutions verifying the validity of the certificate content is: Query certificate content: Based on the provided certificate signature value sign, query the certificate content by inputting the certificate signature value sign into the certificate public link network; Calculate the validation parameters: ; ; Calculate the verification point: ; Will The horizontal coordinate v and the calculation point If v=r, the verification is successful, indicating that the data is authentic and valid and has not been tampered with; if v≠r, the verification is successful, indicating that the data is not authentic and valid and has been tampered with.

[0010] As a preferred solution of the present invention, when the network nodes corresponding to other training institutions verify the validity of the certificate content, all of them are v=r, then the above certificate content is valid; When there is at least one network node corresponding to a training institution that verifies the validity of the certificate content, and v≠r exists, the above certificate content is invalid.

[0011] As a preferred solution of the present invention, in step 400, the implementation method of using the verification system to verify whether the certificate content is valid is the same as the implementation method of the network nodes corresponding to other training institutions to verify the validity of the certificate content.

[0012] As a preferred solution of the present invention, a verification system is used to verify whether the final examination result in the valid certificate content is a qualified result. The specific implementation method is: Combine the elliptic curve base point G in the elliptic curve secp256r1 to generate the public key P; The verification system receives the verification request and generates a random number r, and obtains the horizontal coordinate Rx of R through R = r G; Determine the minimum required score msg for a passing grade, and the random number r generated by the verification system each time it receives a verification request, and generate a hash value e; Where e = hash(Rx P ); The verification system calculates the final examination score in the certificate content and obtains the final examination score s; ; The verification system is based on the obtained final examination score s, the elliptic curve base point G, and the calculation point , hash value e and public key P to verify whether the final examination result in the valid certificate is a qualified result. The specific verification formula is: s*G =R + e*P; As a preferred solution of the present invention, if the formula s*G = R + e*P holds true, it proves that the final examination result is a qualified result; If the formula s*G = R + e*P does not hold, it means that the final examination result does not reach the passing score.

[0013] As a preferred solution of the present invention, the calculation formula for generating the public key P using the elliptic curve base point G in the elliptic curve secp256r1 is: P = k * G; Among them, k = x-msg, x represents the final examination score in the certificate content, and msg is the minimum required score for a passing score.

[0014] Compared with the prior art, the present invention has the following beneficial effects: The present invention can realize anti-counterfeiting and non-tampering operations on the certificate content corresponding to each individual student. The specific implementation method is: a valid certificate can only be generated through the private key of the institution, and the certificate must be cross-validated before it can be stored locally. Once the verification is passed, it cannot be modified.

[0015] In addition, this implementation can also realize efficient and secure verification of the validity of the stored certificate content. By pulling student data through the nearest network node, the certificate information can be quickly located and the authenticity can be verified through the certificate signature value provided by the student. The verification system is independent of the certificate storage network and does not need to obtain specific scores. The demander only needs to provide the required minimum score. The rationality of the test score is reversely verified through the public key. Using the properties of the elliptic curve, if the test score does not meet the minimum required score, the final verification will fail. BRIEF DESCRIPTION OF THE DRAWINGS

[0016] In order to more clearly illustrate the implementation methods of the present invention or the technical solutions in the prior art, the following briefly introduces the drawings required for the implementation methods or the description of the prior art. Obviously, the drawings in the following description are only exemplary, and for ordinary technicians in this field, other implementation drawings can be derived from the provided drawings without creative work.

[0017] Figure 1 A schematic diagram of a flow chart of a method for encrypting and distributing certificates and verifying information according to an embodiment of the present invention; DETAILED DESCRIPTION

[0018] The following will be combined with the drawings in the embodiments of the present invention to clearly and completely describe the technical solutions in the embodiments of the present invention. Obviously, the described embodiments are only part of the embodiments of the present invention, not all of the embodiments. Based on the embodiments of the present invention, all other embodiments obtained by ordinary technicians in this field without creative work are within the scope of protection of the present invention.

[0019] like Figure 1 As shown, the present invention provides a method for encrypting and distributing certificates and verification information, comprising the following steps: Step 100: Generate unique matching certificate content for each individual to whom the certificate is to be distributed, and convert the certificate content into a hash value. ; Step 200: Generate a private key and a public key for the certificate content, and generate a signature value sign for each certificate by combining the private key, the public key and the hash value corresponding to the certificate content; Step 300: Establish a communication relationship between multiple training institutions, use other training institutions to cross-verify a certificate content, and store the cross-verified certificate content in a local storage corresponding to a certificate content; Step 400: Use a verification system to verify whether the certificate content is valid, and verify whether the final examination results in the valid certificate content are qualified results.

[0020] The present invention aims to solve the problems of privacy leakage, forgery and tampering in traditional methods, and enhances the security, immutability and privacy protection of training certification data by introducing decentralized storage and encrypted authentication.

[0021] The specific implementation principle is: The training institution uses SHA-256 to generate a unique hash value H(m) based on the student's performance information (including student name, training course name, certificate number, final examination result, timestamp, and final examination subject).

[0022] The training institution obtains the certificate signature value of each individual student through the private key. Therefore, after the training institution forms the certificate signature value through the undisclosed secret private key, it generates valid and complete certificate content.

[0023] The certificate content must be cross-verified. Only when the certificate content passes the cross-verification operation, indicating that the data is authentic and valid and has not been tampered with, can the certificate content be stored locally. Once the verification is passed, it cannot be modified and the certificate content is set to read-only mode.

[0024] In addition, through a verification system independent of the certificate storage network, the certificate information can be quickly queried and located, and the authenticity can be verified based on the certificate signature value provided by the students.

[0025] Furthermore, when determining whether the student's assessment score meets the passing score, there is no need to obtain the specific score. The demander only needs to provide the required minimum score, and reversely verify the rationality of x (score) through the public key P. By using the properties of the elliptic curve secp256r1, if x (score) does not meet the set minimum requirement score msg, the final verification will fail.

[0026] Therefore, the present invention encrypts the certificate content by designing a certificate signature value including a private key for each student, and before storing the certificate content, cross-validates the certificate content multiple times, stores the certificate content that has passed multiple cross-validations, and sets the stored certificate content to read-only mode.

[0027] When individual trainees check whether their training results are qualified, they can first use the certificate signature value provided by the trainees to quickly locate the certificate content and verify the authenticity of the certificate content. After verifying that the certificate content is authentic, they can then verify whether the results meet the minimum required score, thereby improving the effectiveness and authenticity of verifying whether the results are qualified.

[0028] In step 200, the implementation method of forming a certificate signature value sign for each certificate content is: using SecureRandom to generate a 256-bit random number as a private key sk, and the private key is not disclosed to the public; The public key pk is obtained by combining the private key sk with the base point G of the secp256k1 elliptic curve. The public key pk is publicly released, pk=sk*G; Use the secp256k1 curve to generate a random unique identifier k for the certificate and calculate the point , G is the secp256k1 base point, and the horizontal coordinate of R is marked as r; Each certificate signature value is sign, , where the hash value of each certificate content is .

[0029] Among them, the training institution uses SHA-256 to generate a unique hash value H(m) based on the student's performance information (including student name, training course name, certificate number, final examination results, timestamp, and final examination subjects) and the hash value of the previous block.

[0030] The certificate signature value sign of each student is random data and contains the private key sk. Since the private key sk is not open to the public, the certificate signature value sign of each student is different.

[0031] After designing a matching certificate signature value for each student's corresponding certificate content, the certificate content needs to be cross-verified before storage to prevent the certificate content from being tampered with.

[0032] In step 300, the method for cross-verifying the certificate content is as follows: Independent network nodes will be created for training institutions that distribute certificates to individuals, and multiple independent network nodes will communicate using p2p protocols; Send a broadcast message to a network node of a training institution, where the broadcast message includes the certificate signature value and the query address. Specifically, the certificate signature value sign of each certificate content, the certificate random identifier k, and the hash value formed by converting each certificate content A storage object is formed, and the storage object serves as a query address for the certificate content; The network nodes corresponding to other training institutions verify the validity of the certificate content and broadcast the valid information and signature information to other nodes; After the network node of the training institution receives the verification information of each certificate signature value from multiple other training institutions, the verified certificate content is stored locally in the training institution to form a certificate public link network.

[0033] Furthermore, the implementation method for the network nodes corresponding to other training institutions to verify the validity of the certificate content is: Query certificate content: Based on the provided certificate signature value sign, query the certificate content by inputting the certificate signature value sign into the certificate public link network; Calculate the validation parameters: ; ; Calculate the verification point: ; Will The horizontal coordinate v and the calculation point If v=r, the verification is successful, indicating that the data is authentic and valid and has not been tampered with; if v≠r, the verification is successful, indicating that the data is not authentic and valid and has been tampered with.

[0034] Furthermore, when the network nodes corresponding to other training institutions verify the validity of the certificate content, they are all v=r, and the above certificate content is valid; When there is at least one network node corresponding to a training institution that verifies the validity of the certificate content, and v≠r exists, the above certificate content is invalid.

[0035] Assume that there are 2n training institutions constituting a network node. When the certificate content of a training institution is verified to be valid by n+1 training institutions according to the certificate signature value, the certificate content is finally stored in the local network node. If one of the n+1 training institutions verifies that the certificate content is invalid according to the certificate signature value, it means that the certificate content data is not authentic and valid and has been tampered with, and will not be stored.

[0036] In step 400, the method for implementing the verification of whether the certificate content is valid by using the verification system is the same as the method for implementing the verification of the validity of the certificate content by the network nodes corresponding to other training institutions. The verification system is used to verify whether the final examination results in the valid certificate are qualified results. The specific implementation method is as follows: Combine the elliptic curve base point G in the elliptic curve secp256r1 to generate the public key P; The verification system receives the verification request and generates a random number r, and obtains the horizontal coordinate Rx of R through R = r G; Determine the minimum required score msg for a passing grade, and the random number r generated by the verification system each time it receives a verification request, and generate a hash value e; Where e = hash(Rx P ); The verification system calculates the final examination score in the certificate content and obtains the final examination score s; ; The verification system is based on the obtained final examination score s, the elliptic curve base point G, and the calculation point , hash value e and public key P to verify whether the final examination result in the valid certificate is a qualified result. The specific verification formula is: s*G =R + e*P; If the formula s*G = R + e*P holds true, then the final examination result is a passing score; If the formula s*G = R + e*P does not hold, it means that the final examination result does not reach the passing score.

[0037] The calculation formula for generating the public key P using the elliptic curve base point G in the elliptic curve secp256r1 is: P = k * G; Among them, k = x-msg, x represents the final examination score in the certificate content, and msg is the minimum required score for a passing score.

[0038] This implementation method can realize anti-counterfeiting and non-tampering operations on the certificate content corresponding to each individual student. The specific implementation method is: a valid certificate can only be generated through the institution's private key sk, and the certificate must be cross-validated before it can be stored locally. Once verified, it cannot be modified.

[0039] In addition, this implementation can also realize efficient and secure verification of the validity of the stored certificate content. By pulling the student data through the nearest network node, the certificate information can be quickly located and the authenticity can be verified through the certificate signature value provided by the student. The verification system is independent of the certificate storage network and does not need to obtain specific scores. The demander only needs to provide the required minimum score and reversely verify the rationality of x (score) through the public key. By using the properties of the elliptic curve secp256r1, if x (score) does not meet the minimum required score, the final verification will fail.

[0040] The above embodiments are only exemplary embodiments of the present application and are not intended to limit the present application. The protection scope of the present application is defined by the claims. Those skilled in the art may make various modifications or equivalent substitutions to the present application within the essence and protection scope of the present application, and such modifications or equivalent substitutions shall also be deemed to fall within the protection scope of the present application.

Claims

1. A method for encrypting and distributing certificates and verification information, characterized in that: The following steps are involved: Step 100: Generate unique matching certificate content for each individual to whom the certificate is to be distributed, and convert the certificate content into a hash value. ; Step 200: Generate a private key and a public key for the certificate content, and generate a signature value sign for each certificate by combining the private key, the public key and the hash value corresponding to the certificate content; Step 300: Establish a communication relationship between multiple training institutions, use other training institutions to cross-verify a certificate content, and store the cross-verified certificate content in a local storage corresponding to a certificate content; Step 400: Use a verification system to verify whether the certificate content is valid, and verify whether the final examination results in the valid certificate content are qualified results.

2. A method for encrypting and distributing certificates and verification information according to claim 1, characterized in that: In step 200, a 256-bit random number is generated using Secure Random as a private key sk, and the private key is not disclosed to the public; The public key pk is obtained by combining the private key sk with the base point G of the secp256k1 elliptic curve. The public key pk is publicly released, pk=sk*G; Use the secp256k1 curve to generate a random unique identifier k for the certificate and calculate the point , G is the secp256k1 base point, and the horizontal coordinate of R is marked as r; Each certificate signature value is sign, ; The hash value of each certificate content is .

3. A method for encrypting and distributing certificates and verification information according to claim 2, characterized in that: In step 300, the method for cross-verifying the certificate content is as follows: Independent network nodes will be created for training institutions that distribute certificates to individuals, and multiple independent network nodes will communicate using p2p protocols; Send a broadcast message to a network node of a training institution, where the broadcast message includes the certificate signature value and the query address; The network nodes corresponding to other training institutions verify the validity of the certificate content and broadcast the valid information and signature information to other nodes; After the network node of the training institution receives the verification information of each certificate signature value from multiple other training institutions, the verified certificate content is stored locally in the training institution to form a certificate public link network.

4. A method for encrypting and distributing certificates and verification information according to claim 3, characterized in that: The hash value formed by converting the certificate signature value sign of each certificate content, the certificate random identifier k and each certificate content A storage object is formed, and the storage object serves as the query address of the certificate content.

5. A method for encrypting and distributing certificates and verification information according to claim 3, characterized in that: The implementation method for the network nodes corresponding to other training institutions to verify the validity of the certificate content is as follows: Query certificate content: Based on the provided certificate signature value sign, query the certificate content by inputting the certificate signature value sign into the certificate public link network; Calculate the validation parameters: ； ； Calculate the verification point: ; Will The horizontal coordinate v and the calculation point If v=r, the verification is successful, indicating that the data is authentic and valid and has not been tampered with; if v≠r, the verification is successful, indicating that the data is not authentic and valid and has been tampered with.

6. A method for encrypting and distributing certificates and verification information according to claim 3, characterized in that: When the network nodes corresponding to other training institutions verify the validity of the certificate content, all of them are v=r, then the above certificate content is valid; When there is at least one network node corresponding to a training institution that verifies the validity of the certificate content, and v≠r exists, the above certificate content is invalid.

7. A method for encrypting and distributing certificates and verification information according to claim 5, characterized in that: In step 400, the implementation method of using the verification system to verify whether the certificate content is valid is the same as the implementation method of using the network nodes corresponding to other training institutions to verify the validity of the certificate content.

8. A method for encrypting and distributing certificates and verification information according to claim 7, characterized in that: The verification system is used to verify whether the final examination results in the valid certificate are qualified results. The specific implementation method is as follows: Combine the elliptic curve base point G in the elliptic curve secp256r1 to generate the public key P; The verification system receives the verification request and generates a random number r, and obtains the horizontal coordinate Rx of R through R = r G; Determine the minimum required score msg for a passing grade, and the random number r generated by the verification system each time it receives a verification request, and generate a hash value e; Where e = hash(Rx P ); The verification system calculates the final examination score in the certificate content and obtains the final examination score s; ； The verification system is based on the obtained final examination score s, the elliptic curve base point G, and the calculation point , hash value e and public key P to verify whether the final examination result in the valid certificate is a qualified result. The specific verification formula is: s*G = R + e*P.

9. A method for encrypting and distributing certificates and verification information according to claim 8, characterized in that: If the formula s*G = R + e*P holds true, then the final examination result is a passing score; If the formula s*G = R + e*P does not hold, it means that the final examination result does not reach the passing score.

10. A method for encrypting and distributing certificates and verification information according to claim 8, characterized in that: The calculation formula for generating the public key P using the elliptic curve base point G in the elliptic curve secp256r1 is: P = k * G; Among them, k = x-msg, x represents the final examination score in the certificate content, and msg is the minimum required score for a passing score.

Images