Encrypted information transmission method and device, equipment and storage medium

Abstract

The invention provides an encrypted information transmission method and device, equipment and a storage medium, and relates to the technical field of computers. The method comprises the following steps: acquiring information, encrypting the information based on a preset algorithm to obtain a first sub-signature, a second sub-signature and a third sub-signature, sending at least one of the first sub-signature, the second sub-signature and the third sub-signature to a receiver, and acquiring the information after the receiver decrypts, thereby improving the security of information transmission.

Description

Background Art

[0002] With the rapid development of cloud computing, big data, and computer network technology, cryptography plays an extremely important role in various fields. In the public key cryptography system, digital signature is a very important algorithm. Digital signature ensures the integrity of message transmission, identifies and authenticates the sender's identity, and prevents repudiation in transactions. Since the digital signature scheme meets the network security goals, it plays an important role in e-commerce and e-government. However, in the related technologies, the traditional public key cryptography system based on large integer decomposition and discrete logarithm problems has low security. Summary of the invention

[0003] The present disclosure provides an encrypted information transmission method, device, equipment and storage medium, which at least improve the security of information transmission to a certain extent.

[0004] Other features and advantages of the present disclosure will become apparent from the following detailed description, or may be learned in part by the practice of the present disclosure.

[0005] According to one aspect of the present disclosure, there is provided a method for transmitting encrypted information, comprising:

[0006] Get information;

[0007] Encrypt the information based on a preset algorithm to obtain a first sub-signature, a second sub-signature, and a third sub-signature;

[0008] At least one of the first sub-signature, the second sub-signature, and the third sub-signature is sent to a recipient.

[0009] In one embodiment of the present disclosure, information is encrypted based on a preset algorithm to obtain a first sub-signature, a second sub-signature, and a third sub-signature, including:

[0010] Generate encrypted information based on the first hash algorithm and the information;

[0011] Generate a first sub-signature based on a second hash algorithm, a second public key, and an encrypted information length value;

[0012] A second sub-signature is generated based on at least one of the first sub-signature, the first public key, the first private key, and a Gaussian parameter.

[0013] A third sub-signature is generated based on at least one of the encrypted information, the second private key, and a preset parameter.

[0014] In one embodiment of the present disclosure, the method further includes:

[0015] A first public key and a first private key are generated based on a trapdoor generation algorithm.

[0016] In one embodiment of the present disclosure, the method further includes:

[0017] A second public key and a second private key are generated based on at least one of the first hash algorithm, the confidentiality parameter, and the information.

[0018] According to another aspect of the present disclosure, there is provided an encrypted information transmission method, which is applied to a receiving party and includes:

[0019] receiving a verification message, the verification message including the first sub-signature, the second sub-signature and / or the third sub-signature;

[0020] Verifying the first sub-signature and the second sub-signature;

[0021] If the first sub-signature and the second sub-signature pass the verification, verify the third sub-signature;

[0022] When the third sub-signature is verified, the information is obtained.

[0023] In one embodiment of the present disclosure, a verification message is received, the verification message including a first sub-signature, a second sub-signature, and / or a third sub-signature;

[0024] Verifying the first sub-signature and the second sub-signature;

[0025] If the first sub-signature and the second sub-signature pass the verification, verify the third sub-signature;

[0026] When the third sub-signature is verified, the information is obtained.

[0027] According to another aspect of the present disclosure, there is provided an encrypted information transmission device, which is applied to a sender, and includes:

[0028] A first acquisition module, used for acquiring information;

[0029] An encryption module, used to encrypt information based on a preset algorithm to obtain a first sub-signature, a second sub-signature, and a third sub-signature;

[0030] The sending module is used to send at least one of the first sub-signature, the second sub-signature and the third sub-signature to a recipient.

[0031] In one embodiment of the present disclosure, the encryption module includes:

[0032] A first generating unit, configured to generate encrypted information based on a first Hash algorithm and information;

[0033] A second generating unit, configured to generate a first sub-signature based on a second hash algorithm, a second public key, and an encrypted information length value;

[0034] A third generating unit, configured to generate a first sub-signature based on a second hash algorithm, a second public key, and an encrypted information length value;

[0035] The fourth generating unit is used to generate a first sub-signature based on the second Hash algorithm, the second public key and the encrypted information length value.

[0036] In one embodiment of the present disclosure, the device further includes:

[0037] A generation module is used to generate a second public key and a second private key based on a first hash algorithm, a confidentiality parameter, and at least one of the information.

[0038] According to another aspect of the present disclosure, there is provided an encrypted information transmission device, which is applied to a receiving party and includes:

[0039] A receiving module, configured to receive a verification message, the verification message including a first sub-signature, a second sub-signature and / or a third sub-signature;

[0040] A first verification module, used to verify the first sub-signature and the second sub-signature;

[0041] A second verification module, configured to verify the third sub-signature if the first sub-signature and the second sub-signature pass the verification;

[0042] The second acquisition module is used to acquire information when the third sub-signature passes the verification.

[0043] In one embodiment of the present disclosure, the first verification module includes:

[0044] A first determining unit, configured to determine whether the second sub-signature is not greater than a Gaussian parameter;

[0045] The second determination unit is used to determine whether the product of the second sub-signature and the first public key is equal to the result of the modulo operation of the first sub-signature and a preset parameter when the second sub-signature passes the verification.

[0046] In one embodiment of the present disclosure, the second verification module includes:

[0047] A sending unit, used to send a challenge message to a sender, so that the sender can calculate based on the challenge message and a preset formula;

[0048] A receiving unit, used to receive a challenge response message sent by a sender;

[0049] The acquisition unit is used to acquire information when the challenge response message passes the verification.

[0050] According to another aspect of the present disclosure, an electronic device is provided, comprising: a processor; and a memory for storing executable instructions of the processor; wherein the processor is configured to perform the above-mentioned encrypted information transmission method by executing the executable instructions.

[0051] According to another aspect of the present disclosure, a computer-readable storage medium is provided, on which a computer program is stored, and when the computer program is executed by a processor, the above-mentioned encrypted information transmission method is implemented.

[0052] The encrypted information transmission method, apparatus, device and storage medium provided in the embodiments of the present disclosure obtain information, encrypt the information based on a preset algorithm to obtain a first sub-signature, a second sub-signature and a third sub-signature, send at least one of the first sub-signature, the second sub-signature and the third sub-signature to a recipient, obtain the information after the recipient decrypts it, and improve the security of information transmission.

[0053] It is to be understood that the foregoing general description and the following detailed description are exemplary and explanatory only and are not restrictive of the present disclosure. BRIEF DESCRIPTION OF THE DRAWINGS

[0054] The accompanying drawings herein are incorporated into the specification and constitute a part of the specification, illustrate embodiments consistent with the present disclosure, and together with the specification are used to explain the principles of the present disclosure. Obviously, the accompanying drawings described below are only some embodiments of the present disclosure, and for ordinary technicians in this field, other accompanying drawings can be obtained based on these accompanying drawings without creative work.

[0055] Figure 1 A structural diagram of an encrypted information transmission system in an embodiment of the present disclosure is shown;

[0056] Figure 2 A flow chart of a method for transmitting encrypted information in an embodiment of the present disclosure is shown;

[0057] Figure 3 Another method flow chart of encrypted information transmission in the embodiment of the present disclosure is shown;

[0058] Figure 4 A flow chart of another method for transmitting encrypted information in an embodiment of the present disclosure is shown;

[0059] Figure 5 A flow chart of another method for transmitting encrypted information in an embodiment of the present disclosure is shown;

[0060] Figure 6 A flow chart of another method for transmitting encrypted information in an embodiment of the present disclosure is shown;

[0061] Figure 7 An architecture diagram of an encrypted information transmission device according to an embodiment of the present disclosure is shown;

[0062] Figure 8 Another structure diagram of an encrypted information transmission device according to an embodiment of the present disclosure is shown;

[0063] Fig. 9A structural block diagram of an electronic device in an embodiment of the present disclosure is shown. DETAILED DESCRIPTION

[0064] Example embodiments will now be described more fully with reference to the accompanying drawings. However, example embodiments can be implemented in a variety of forms and should not be construed as limited to the examples set forth herein; rather, these embodiments are provided so that the disclosure will be more comprehensive and complete and to fully convey the concepts of the example embodiments to those skilled in the art. The described features, structures, or characteristics may be combined in any suitable manner in one or more embodiments.

[0065] In addition, the accompanying drawings are only schematic illustrations of the present disclosure and are not necessarily drawn to scale. The same reference numerals in the figures represent the same or similar parts, and their repeated description will be omitted. Some of the block diagrams shown in the accompanying drawings are functional entities and do not necessarily correspond to physically or logically independent entities. These functional entities can be implemented in software form, or implemented in one or more hardware modules or integrated circuits, or implemented in different networks and / or processor devices and / or microcontroller devices.

[0066] It should be understood that the various steps described in the method embodiments of the present disclosure may be performed in different orders and / or in parallel. In addition, the method embodiments may include additional steps and / or omit the steps shown. The scope of the present disclosure is not limited in this respect.

[0067] It should be noted that the concepts such as "first" and "second" mentioned in the present disclosure are only used to distinguish different devices, modules or units, and are not used to limit the order or interdependence of the functions performed by these devices, modules or units.

[0068] It should be noted that the modifications of "one" and "plurality" mentioned in the present disclosure are illustrative rather than restrictive, and those skilled in the art should understand that unless otherwise clearly indicated in the context, it should be understood as "one or more".

[0069] In order to solve the above problems, the embodiments of the present disclosure provide an encrypted information transmission method, apparatus, and device storage medium.

[0070] In order to explain the present disclosure in detail, the present disclosure first explains the encrypted information transmission system in detail. Figure 1 A schematic diagram of the structure of an encrypted information transmission system in an embodiment of the present disclosure is shown, and the system can be applied to the encrypted information transmission method and encrypted information transmission device in each embodiment of the present disclosure.

[0071] like Figure 1As shown, the encrypted information transmission system 10 may include a sender 101 and a receiver 102 .

[0072] The sender 101 is used to obtain information; encrypt the information based on a preset algorithm to obtain a first sub-signature, a second sub-signature and a third sub-signature; and send at least one of the first sub-signature, the second sub-signature and the third sub-signature to the receiver 102.

[0073] The receiver 102 is used to receive a verification message, which includes a first sub-signature, a second sub-signature and / or a third sub-signature; verify the first sub-signature and the second sub-signature; if the first sub-signature and the second sub-signature pass the verification, verify the third sub-signature; if the third sub-signature passes the verification, obtain information.

[0074] In some embodiments, the sender 101 and the receiver 102 may be located on different devices, and the sender 101 and the receiver 102 may be modules on an electronic device with data acquisition capabilities. The sender 101 and the receiver 102 may also be modules on an electronic device with data processing capabilities, such as a computer device or a server.

[0075] The network between the sender 101 and the receiver 102 realizes communication connection, and the network can be a wired network or a wireless network.

[0076] Optionally, the wireless network or wired network described above uses standard communication technology and / or protocol. The network is typically the Internet, but may also be any network, including but not limited to a local area network (LAN), a metropolitan area network (MAN), a wide area network (WAN), a mobile, wired or wireless network, a dedicated network or any combination of a virtual private network). In some embodiments, technologies and / or formats including Hyper Text Mark-up Language (HTML), Extensible Markup Language (XML), etc. are used to represent data exchanged over the network. In addition, conventional encryption technologies such as Secure Socket Layer (SSL), Transport Layer Security (TLS), Virtual Private Network (VPN), Internet Protocol Security (IPsec), etc. may be used to encrypt all or some links. In other embodiments, customized and / or dedicated data communication technologies may also be used to replace or supplement the above-mentioned data communication technologies.

[0077] Both the sender 101 and the receiver 102 may be terminal devices, and the terminal devices may be various electronic devices, including but not limited to smart phones, tablet computers, laptop computers, desktop computers, wearable devices, augmented reality devices, virtual reality devices, etc.

[0078] Optionally, the client of the application installed in different terminal devices is the same, or the client of the same type of application based on different operating systems. Based on the different terminal platforms, the specific form of the client of the application can also be different, for example, the application client can be a mobile client, a PC client, etc.

[0079] The sender 101 and the receiver 102 may both be servers, and the servers may be servers that provide various services, such as a background encrypted information transmission server that provides support for devices operated by users using terminal devices. The background encrypted information transmission server may analyze and process the received request and other data, and feed back the processing results to the terminal device.

[0080] Optionally, the server can be an independent physical server, a server cluster or distributed system composed of multiple physical servers, or a cloud server that provides basic cloud computing services such as cloud services, cloud databases, cloud computing, cloud functions, cloud storage, network services, cloud communications, middleware services, domain name services, security services, CDN (Content Delivery Network), as well as big data and artificial intelligence platforms.

[0081] Those skilled in the art will know that Figure 1 The number of senders 101 and receivers 102 is merely illustrative. According to actual needs, there may be any number of senders 101 and receivers 102. The embodiments of the present disclosure do not limit this.

[0082] The encrypted information transmission system provided by the embodiments of the present disclosure obtains information, encrypts the information based on a preset algorithm to obtain a first sub-signature, a second sub-signature and a third sub-signature, sends at least one of the first sub-signature, the second sub-signature and the third sub-signature to a recipient, obtains the information after the recipient decrypts it, and improves the security of information transmission.

[0083] Figure 2 A schematic flow chart of a method for transmitting encrypted information in an embodiment of the present disclosure is shown.

[0084] It should be noted that the encrypted information transmission method in the embodiment of the present disclosure is applied to the sender.

[0085] like Figure 2 As shown, the encrypted information transmission method in the embodiment of the present disclosure may include:

[0086] S210, obtaining information.

[0087] In some embodiments, the information may be any information. When the information is in a format other than text, the information in other formats may be converted into information in text format.

[0088] S220, encrypt the information based on a preset algorithm to obtain a first sub-signature, a second sub-signature, and a third sub-signature.

[0089] S230, sending at least one of the first sub-signature, the second sub-signature, and the third sub-signature to a recipient.

[0090] The encrypted information transmission method provided by the embodiments of the present disclosure obtains information, encrypts the information based on a preset algorithm to obtain a first sub-signature, a second sub-signature and a third sub-signature, sends at least one of the first sub-signature, the second sub-signature and the third sub-signature to a recipient, obtains the information after the recipient decrypts it, and improves the security of information transmission.

[0091] Figure 3 A schematic flow chart of a method for transmitting encrypted information in an embodiment of the present disclosure is shown.

[0092] It should be noted that the encrypted information transmission method in the embodiment of the present disclosure is applied to the sender.

[0093] like Figure 3 As shown, the encrypted information transmission method in the embodiment of the present disclosure may include:

[0094] S310, obtaining information;

[0095] S320, generating encrypted information based on the first Hash algorithm and the information.

[0096] In some embodiments, the information may be msg.

[0097] In some embodiments, a hash algorithm is a mapping function that maps input data of any length to output data of a fixed length. This output is usually called a hash value or a message digest. The principle of a hash algorithm is to map an input message of any length to a message digest of a fixed length through a hash function.

[0098] In some embodiments, the present disclosure does not specifically limit the hash algorithm.

[0099] Exemplarily, H = h(sd), where h maps the input to is a matrix of size n×m, the numbers in the matrix are from 0 to q-1, and Z is a finite field of integers.

[0100] Among them, H is the encrypted information, h is the hash algorithm, sd is the information. N is the security parameter,

[0101] m≥2n log q, n,m,k,q≥2 are integers.

[0102] S330: Generate a first sub-signature based on the second hash algorithm, the second public key, and the encrypted information length value.

[0103] In some embodiments, the second hash algorithm may be h', the second public key may be S, and the encrypted information length value may be r.

[0104] Exemplarily, s1=h'(S||r), where || represents a string concatenation operation, ie, connecting S and r together in sequence.

[0105] S340: Generate a second sub-signature based on at least one of the first sub-signature, the first public key, the first private key, and a Gaussian parameter.

[0106] In some embodiments, the second sub-signature may be S2, the first public key may be A, the first private key may be T, and the Gaussian parameter ‖T‖ is the trapdoor norm, is a growth function no less than the safety parameter log n.

[0107] Exemplarily, s2←SamPre(A,T,β,s1), SamPre represents the pre-image e of S2 on the trapdoor T, the pre-image e is multiplied by A to obtain S1, and β represents the sampling range.

[0108] S350, generating a third sub-signature based on at least one of the encrypted information, the second private key, and a preset parameter.

[0109] In some embodiments, the second private key may be e, the preset parameter may be q, and the third sub-signature may be S3.

[0110] Exemplarily, s3=MeT mod q, where mod is a modulo operation, that is, finding the remainder of dividing two numbers.

[0111] S360: Send at least one of the first sub-signature, the second sub-signature, and the third sub-signature to a recipient.

[0112] The encrypted information transmission method provided by the embodiments of the present disclosure obtains information, encrypts the information based on a preset algorithm to obtain a first sub-signature, a second sub-signature and a third sub-signature, sends at least one of the first sub-signature, the second sub-signature and the third sub-signature to a recipient, obtains the information after the recipient decrypts it, and improves the security of information transmission.

[0113] Figure 4 A schematic flow chart of another method for transmitting encrypted information in an embodiment of the present disclosure is shown.

[0114] It should be noted that the encrypted information transmission method in the embodiment of the present disclosure is applied to the sender.

[0115] like Figure 4 As shown, the encrypted information transmission method in the embodiment of the present disclosure may include:

[0116] S410, obtaining information;

[0117] S420: Generate a first public key and a first private key based on a trapdoor generation algorithm.

[0118] In some embodiments, running TrapGen(1n) yields and the corresponding trapdoor T∈Z m×m , returns the public key A, sd and private key T, sd is a random value.

[0119] TrapGen refers to a trapdoor generation algorithm. A trapdoor is a special encryption technique that allows information to be decrypted in a certain way (i.e., a trapdoor) without knowing the key.

[0120] TrapGen(1n): Generates a pair (A, T) and defines a function fA:

[0121] f A (e) = Ae mod q, T is a trapdoor. n is a set, in which is the vector e. Z is a finite field.

[0122] S430, generating encrypted information based on the first hash algorithm and the information;

[0123] S440, generating a first sub-signature based on a second hash algorithm, a second public key, and an encrypted information length value;

[0124] S450: Generate a second sub-signature based on at least one of the first sub-signature, the first public key, the first private key, and a Gaussian parameter.

[0125] S460, generating a third sub-signature based on at least one of the encrypted information, the second private key, and a preset parameter.

[0126] S470: Send at least one of the first sub-signature, the second sub-signature, and the third sub-signature to a recipient.

[0127] The encrypted information transmission method provided by the embodiments of the present disclosure obtains information, encrypts the information based on a preset algorithm to obtain a first sub-signature, a second sub-signature and a third sub-signature, sends at least one of the first sub-signature, the second sub-signature and the third sub-signature to a recipient, obtains the information after the recipient decrypts it, and improves the security of information transmission.

[0128] Figure 5 A schematic flow chart of another method for transmitting encrypted information in an embodiment of the present disclosure is shown.

[0129] It should be noted that the encrypted information transmission method in the embodiment of the present disclosure is applied to the sender.

[0130] like Figure 5 As shown, the encrypted information transmission method in the embodiment of the present disclosure may include:

[0131] S510, obtaining information;

[0132] S520: Generate a second public key and a second private key based on the first hash algorithm, the confidentiality parameter, and at least one of the information.

[0133] In some embodiments, H = h(sd), where h maps the input to choose β and calculate S = HeT mod q. S is the second public key and e is the second private key.

[0134] S530, generating encrypted information based on the first Hash algorithm and the information.

[0135] S540, generating a first sub-signature based on a second hash algorithm, a second public key, and an encrypted information length value;

[0136] S550: Generate a second sub-signature based on at least one of the first sub-signature, the first public key, the first private key, and a Gaussian parameter.

[0137] S560, generating a third sub-signature based on at least one of the encrypted information, the second private key, and a preset parameter.

[0138] S570: Send at least one of the first sub-signature, the second sub-signature, and the third sub-signature to a recipient.

[0139] The encrypted information transmission method provided by the embodiments of the present disclosure obtains information, encrypts the information based on a preset algorithm to obtain a first sub-signature, a second sub-signature and a third sub-signature, sends at least one of the first sub-signature, the second sub-signature and the third sub-signature to a recipient, obtains the information after the recipient decrypts it, and improves the security of information transmission.

[0140] Figure 6 A schematic flow chart of another method for transmitting encrypted information in an embodiment of the present disclosure is shown.

[0141] It should be noted that the encrypted information transmission method in the embodiment of the present disclosure is applied to the receiving party.

[0142] like Figure 6 As shown, the encrypted information transmission method in the embodiment of the present disclosure may include:

[0143] S610, receiving a verification message, where the verification message includes a first sub-signature, a second sub-signature and / or a third sub-signature;

[0144] S620: Verify the first sub-signature and the second sub-signature.

[0145] In some embodiments, verifying the first sub-signature and the second sub-signature includes:

[0146] determining whether the second sub-signature is not greater than the Gaussian parameter;

[0147] If the second sub-signature passes the verification, it is determined whether the product of the second sub-signature and the first public key is equal to the result of the modulo operation of the first sub-signature and the preset parameter.

[0148] Exemplarily, determining whether the second sub-signature is not greater than the Gaussian parameter includes:

[0149] Verify whether

[0150] Exemplarily, determining whether the product of the second sub-signature and the first public key is equal to a result of a modulo operation of the first sub-signature and a preset parameter includes:

[0151] Determine As2 = s1 mod q.

[0152] S630: If the first sub-signature and the second sub-signature pass the verification, verify the third sub-signature.

[0153] In some embodiments, verifying the third sub-signature includes:

[0154] Send a challenge message to the sender, so that the sender can calculate based on the challenge message and a preset formula;

[0155] Receive the challenge response message sent by the sender;

[0156] When the challenge response message passes verification, the third sub-signature passes verification.

[0157] In some embodiments, verifying the third sub-signature may include:

[0158] The sender and receiver use the hash function h to calculate H and M.

[0159] The sender chooses a permutation π on (1,2...,m) and u∈ and calculates the following formula:

[0160] C1=h(π‖Hu T mod q),

[0161] C2=h(π(u)),

[0162] C3=h(π(u+e)),

[0163] C4=h(π‖Mu T mod q)

[0164] Now, the receiver sends a challenge c∈{0,1,2} to the sender.

[0165] The sender gives his response to the challenge c as follows: if c = 0, the sender sends π,u; if c = 1, S sends π,u+e; if c = 2, the sender sends π(u),π(e).

[0166] After receiving the response, the receiver checks the validity of the promise as follows:

[0167] If c=0, the receiver checks whether commitments C1, C2 and C4 are computed honestly.

[0168] If c=1, the recipient checks the validity of commitments C1, C3 and C4.

[0169] If C4 = h(π||M(u+e)T-s3 mod q), the receiver confirms;

[0170] If C4≠h(π||M(u+e)T-s3 mod q), the receiver rejects.

[0171] If c=2, then V checks the validity of C2, C3 and.

[0172] If all checks are valid, the receiver accepts the signature, otherwise it rejects it.

[0173] S640: When the third sub-signature passes the verification, obtain information.

[0174] The encrypted information transmission method provided by the embodiments of the present disclosure obtains information, encrypts the information based on a preset algorithm to obtain a first sub-signature, a second sub-signature and a third sub-signature, sends at least one of the first sub-signature, the second sub-signature and the third sub-signature to a recipient, obtains the information after the recipient decrypts it, and improves the security of information transmission.

[0175] In order to explain the present disclosure in detail, the present disclosure provides an exemplary embodiment of an encrypted information transmission method.

[0176] 1. KeyGen(λ): Given a secure input λ, the algorithm outputs a signing key sk and a verification key vk.

[0177] 2. SignGen(sk,msg): It takes the signing key and the message msg as input and returns the signature σ.

[0178] 3. Confirmation: The confirmation protocol is an interactive protocol between the signer S and the verifier V, which takes the (msg,σ) pair as input. Finally, if the signature σ is valid, it returns acceptance, otherwise ⊥. The signer can be the sender and the verifier can be the receiver.

[0179] 4. Rejection: The rejection protocol also runs as an interaction between the signer and the verifier, accepting when the completion returns if the signature σ is invalid, otherwise ⊥.

[0180] The proposal is as follows:

[0181] n,m,k,q≥2 are integers, n is a safety parameter, q=poly(n),m≥2nlog q, Gaussian parameter The scheme is performed with two collision-resistant hash functions h: The scheme has the following four algorithmic processes:

[0182] 1. KeyGen(1n): Whenever the signer is asked to sign a new message, only the second step (for convenience, we call it ExtraKeyGen) is performed.

[0183] 1) Run TrapGen(1n) to get and the corresponding trapdoor T∈Z m×m , returns the public key A,sd and the private key T.

[0184] TrapGen(1n): Generates a pair (A, T) and defines a function fA:

[0185] f A (e) = Ae mod q, T is a trapdoor.

[0186] 2) ExtraKeyGen(sd): Calculate H = h(sd), where h maps the input to choose β and calculate S = HeT mod q. S is the public key and e is the secret key.

[0187] 2. SignGen(msg,sd,S,A):

[0188] 1) First run ExtraKeyGen(sd) and get (e,S) for random value sd∈{0,1}n.

[0189] 2) Calculate M = h(msg) and randomly select an r∈{0,1}n.

[0190] 3) Compute s3 = MeT mod q, s1 = h'(S||r) and s2←SampPre(A,T,β,s1), where h' maps the input to.

[0191] SamPre(A,T,y): Returns the preimage e of y, such that fA(e) = y for any y chosen uniformly from the range Rn.

[0192] Output signature σ = (s1, s2, s3).

[0193] 3. Verification(msg,σ): Parse σ into (s1,s2,s3). First, the verifier checks the validity of (s1,s2).

[0194] ① Verify whether

[0195] ②As2=s1 mod q.

[0196] 4. Confirmation / Rejection Protocol: If both are true, then it is a valid pair, otherwise V returns 0. Now, to check the validity of s3, the signer and the verifier perform the following protocol.

[0197] 1) The signer S and the verifier V use the hash function h to calculate H and M.

[0198] 2) S chooses a permutation π on (1,2...,m) and u∈ and calculates the following formula:

[0199] C1=h(π‖Hu T mod q),

[0200] C2=h(π(u)),

[0201] C3=h(π(u+e)),

[0202] C4=h(π‖Mu T mod q).

[0203] 3) Now, V sends a challenge c∈{0,1,2} to the signer.

[0204] 4) S gives his response to challenge c as follows: if c = 0, S sends π,u; if c = 1, S sends π,u+e; if c = 2, S sends π(u), π(e).

[0205] 5) After receiving the response, V checks the validity of the promise as follows:

[0206] ① If c = 0, V checks whether commitments C1, C2 and C4 are calculated honestly.

[0207] ②If c=1, V checks the validity of commitments C1, C3 and C4.

[0208] If C4 = h(π||M(u+e)T-s3 mod q), it is confirmed;

[0209] If C4≠h(π||M(u+e)T-s3 mod q), it is rejected.

[0210] ③If c=2, then V checks the validity of C2, C3 and.

[0211] If all checks are valid, V accepts the signature, otherwise rejects it.

[0212] Based on the same inventive concept, the present disclosure also provides an encrypted information transmission device, such as the following embodiment. Since the principle of solving the problem in the device embodiment is similar to that in the above method embodiment, the implementation of the device embodiment can refer to the implementation of the above method embodiment, and the repeated parts will not be repeated.

[0213] Figure 7 A structural diagram of an encrypted information transmission device in an embodiment of the present disclosure is shown.

[0214] It should be noted that the encrypted information transmission device 700 in the embodiment of the present disclosure is applied to the sender.

[0215] like Figure 7 As shown, the encrypted information transmission device 700 in the embodiment of the present disclosure may include:

[0216] A first acquisition module 710, used to acquire information;

[0217] The encryption module 720 is used to encrypt the information based on a preset algorithm to obtain a first sub-signature, a second sub-signature and a third sub-signature;

[0218] The sending module 730 is configured to send at least one of the first sub-signature, the second sub-signature, and the third sub-signature to a recipient.

[0219] In one embodiment of the present disclosure, the encryption module includes:

[0220] A first generating unit, configured to generate encrypted information based on a first Hash algorithm and information;

[0221] A second generating unit, configured to generate a first sub-signature based on a second hash algorithm, a second public key, and an encrypted information length value;

[0222] A third generating unit, configured to generate a first sub-signature based on a second hash algorithm, a second public key, and an encrypted information length value;

[0223] The fourth generating unit is used to generate a first sub-signature based on the second Hash algorithm, the second public key and the encrypted information length value.

[0224] In one embodiment of the present disclosure, the device further includes:

[0225] A generation module is used to generate a second public key and a second private key based on a first hash algorithm, a confidentiality parameter, and at least one of the information.

[0226] The encrypted information transmission device provided in the embodiments of the present disclosure obtains information, encrypts the information based on a preset algorithm to obtain a first sub-signature, a second sub-signature and a third sub-signature, sends at least one of the first sub-signature, the second sub-signature and the third sub-signature to a recipient, obtains the information after the recipient decrypts it, and improves the security of information transmission.

[0227] Based on the same inventive concept, the present disclosure also provides an encrypted information transmission device, such as the following embodiment. Since the principle of solving the problem in the device embodiment is similar to that in the above method embodiment, the implementation of the device embodiment can refer to the implementation of the above method embodiment, and the repeated parts will not be repeated.

[0228] Figure 8 A structural diagram of an encrypted information transmission device in an embodiment of the present disclosure is shown.

[0229] It should be noted that the encrypted information transmission device 800 in the embodiment of the present disclosure is applied to the receiving party.

[0230] like Figure 8 As shown, the encrypted information transmission device 800 in the embodiment of the present disclosure may include:

[0231] A receiving module 810 is configured to receive a verification message, where the verification message includes a first sub-signature, a second sub-signature and / or a third sub-signature;

[0232] A first verification module 820, configured to verify the first sub-signature and the second sub-signature;

[0233] A second verification module 830, configured to verify the third sub-signature if the first sub-signature and the second sub-signature pass the verification;

[0234] The second acquisition module 840 is used to acquire information when the third sub-signature passes the verification.

[0235] The encrypted information transmission device provided in the embodiments of the present disclosure obtains information, encrypts the information based on a preset algorithm to obtain a first sub-signature, a second sub-signature and a third sub-signature, sends at least one of the first sub-signature, the second sub-signature and the third sub-signature to a recipient, obtains the information after the recipient decrypts it, and improves the security of information transmission.

[0236] In one embodiment of the present disclosure, the first verification module includes:

[0237] A first determining unit, configured to determine whether the second sub-signature is not greater than a Gaussian parameter;

[0238] The second determination unit is used to determine whether the product of the second sub-signature and the first public key is equal to the result of the modulo operation of the first sub-signature and a preset parameter when the second sub-signature passes the verification.

[0239] In one embodiment of the present disclosure, the second verification module includes:

[0240] A sending unit, used to send a challenge message to a sender, so that the sender can calculate based on the challenge message and a preset formula;

[0241] A receiving unit, used to receive a challenge response message sent by a sender;

[0242] The acquisition unit is used to acquire information when the challenge response message passes the verification.

[0243] The encrypted information transmission device provided in the embodiments of the present disclosure obtains information, encrypts the information based on a preset algorithm to obtain a first sub-signature, a second sub-signature and a third sub-signature, sends at least one of the first sub-signature, the second sub-signature and the third sub-signature to a recipient, obtains the information after the recipient decrypts it, and improves the security of information transmission.

[0244] The encrypted information transmission device provided in the embodiments of the present disclosure can be used to execute the encrypted information transmission methods provided in the above-mentioned method embodiments. The implementation principles and technical effects are similar and will not be described herein for the sake of simplicity.

[0245] Those skilled in the art will appreciate that various aspects of the present disclosure may be implemented as systems, methods or program products. Therefore, various aspects of the present disclosure may be specifically implemented in the following forms, namely: complete hardware implementation, complete software implementation (including firmware, microcode, etc.), or a combination of hardware and software, which may be collectively referred to herein as "circuits", "modules" or "systems".

[0246] Refer to the following Fig. 9 The electronic device 900 according to this embodiment of the present disclosure is described. Fig. 9 The electronic device 900 shown is merely an example and should not bring any limitation to the functions and scope of use of the embodiments of the present disclosure.

[0247] like Fig. 9 As shown, the electronic device 900 is in the form of a general computing device. The components of the electronic device 900 may include but are not limited to: at least one processing unit 910, at least one storage unit 920, and a bus 930 connecting different system components (including the storage unit 920 and the processing unit 910).

[0248] The storage unit stores program codes, which can be executed by the processing unit 910, so that the processing unit 910 performs the steps of various exemplary embodiments of the present disclosure described in the above “Exemplary Method” section of this specification. For example, the processing unit 910 can perform the following steps of the above method embodiment:

[0249] Get information;

[0250] Encrypt the information based on a preset algorithm to obtain a first sub-signature, a second sub-signature, and a third sub-signature;

[0251] At least one of the first sub-signature, the second sub-signature, and the third sub-signature is sent to a recipient.

[0252] Alternatively, receiving a verification message, the verification message including the first sub-signature, the second sub-signature and / or the third sub-signature;

[0253] Verifying the first sub-signature and the second sub-signature;

[0254] If the first sub-signature and the second sub-signature pass the verification, verify the third sub-signature;

[0255] When the third sub-signature is verified, the information is obtained.

[0256] The storage unit 920 may include a readable medium in the form of a volatile storage unit, such as a random access storage unit (RAM) 9201 and / or a cache storage unit 9202 , and may further include a read-only storage unit (ROM) 9203 .

[0257] The storage unit 920 may also include a program / utility 9204 having a set (at least one) of program modules 9205, such program modules 9205 including but not limited to: an operating system, one or more application programs, other program modules, and program data, each of which or some combination may include an implementation of a network environment.

[0258] Bus 930 may represent one or more of several types of bus structures, including a memory unit bus or memory unit controller, a peripheral bus, an accelerated graphics port, a processing unit, or a local bus using any of a variety of bus architectures.

[0259] The electronic device 900 may also communicate with one or more external devices 940 (e.g., keyboards, pointing devices, Bluetooth devices, etc.), may also communicate with one or more devices that enable a user to interact with the electronic device 900, and / or communicate with any device that enables the electronic device 900 to communicate with one or more other computing devices (e.g., routers, modems, etc.). Such communication may be performed via an input / output (I / O) interface 950. Furthermore, the electronic device 900 may also communicate with one or more networks (e.g., local area networks (LANs), wide area networks (WANs), and / or public networks, such as the Internet) via a network adapter 9100. As shown, the network adapter 9100 communicates with other modules of the electronic device 900 via a bus 930. It should be understood that, although not shown in the figure, other hardware and / or software modules may be used in conjunction with the electronic device 900, including but not limited to: microcode, device drivers, redundant processing units, external disk drive arrays, RAID systems, tape drives, and data backup storage systems, etc.

[0260] Through the description of the above implementation, it is easy for those skilled in the art to understand that the example implementation described here can be implemented by software, or by software combined with necessary hardware. Therefore, the technical solution according to the implementation of the present disclosure can be embodied in the form of a software product, which can be stored in a non-volatile storage medium (which can be a CD-ROM, a USB flash drive, a mobile hard disk, etc.) or on a network, and includes several instructions to enable a computing device (which can be a personal computer, a server, a terminal device, or a network device, etc.) to execute the method according to the implementation of the present disclosure.

[0261] In an exemplary embodiment of the present disclosure, a computer-readable storage medium is also provided, which may be a readable signal medium or a readable storage medium. A program product capable of implementing the above method of the present disclosure is stored thereon. In some possible implementations, various aspects of the present disclosure may also be implemented in the form of a program product, which includes a program code, and when the program product is run on a terminal device, the program code is used to enable the terminal device to execute the steps according to various exemplary implementations of the present disclosure described in the above “Exemplary Method” section of this specification.

[0262] More specific examples of computer-readable storage media in the present disclosure may include, but are not limited to, an electrical connection having one or more conductors, a portable computer disk, a hard disk, a random access memory (RAM), a read-only memory (ROM), an erasable programmable read-only memory (EPROM or flash memory), optical fiber, a portable compact disk read-only memory (CD-ROM), an optical storage device, a magnetic storage device, or any suitable combination of the foregoing.

[0263] In the present disclosure, a computer readable storage medium may include a data signal propagated in baseband or as part of a carrier wave, wherein a readable program code is carried. Such propagated data signals may take a variety of forms, including but not limited to electromagnetic signals, optical signals, or any suitable combination thereof. A readable signal medium may also be any readable medium other than a readable storage medium, which may send, propagate, or transmit a program for use by or in conjunction with an instruction execution system, apparatus, or device.

[0264] Alternatively, the program code contained on the computer-readable storage medium may be transmitted using any appropriate medium, including but not limited to wireless, wired, optical cable, RF, etc., or any suitable combination of the foregoing.

[0265] In a specific implementation, the program code for performing the operations of the present disclosure may be written in any combination of one or more programming languages, including object-oriented programming languages ​​such as Java, C++, etc., and conventional procedural programming languages ​​such as "C" or similar programming languages. The program code may be executed entirely on the user computing device, partially on the user device, as a separate software package, partially on the user computing device and partially on a remote computing device, or entirely on a remote computing device or server. In the case of a remote computing device, the remote computing device may be connected to the user computing device through any type of network, including a local area network (LAN) or a wide area network (WAN), or may be connected to an external computing device (e.g., using an Internet service provider to connect through the Internet).

[0266] It should be noted that, although several modules or units of the device for action execution are mentioned in the above detailed description, this division is not mandatory. In fact, according to the embodiments of the present disclosure, the features and functions of two or more modules or units described above can be embodied in one module or unit. On the contrary, the features and functions of one module or unit described above can be further divided into multiple modules or units to be embodied.

[0267] In addition, although the steps of the method in the present disclosure are described in a specific order in the drawings, this does not require or imply that the steps must be performed in this specific order, or that all the steps shown must be performed to achieve the desired results. Additionally or alternatively, some steps may be omitted, multiple steps may be combined into one step, and / or one step may be decomposed into multiple steps, etc.

[0268] Through the description of the above implementation modes, it is easy for those skilled in the art to understand that the example implementation modes described here can be implemented by software or by combining software with necessary hardware. Therefore, the technical solution according to the implementation mode of the present disclosure can be embodied in the form of a software product, which can be stored in a non-volatile storage medium (which can be a CD-ROM, a USB flash drive, a mobile hard disk, etc.) or on a network, and includes several instructions to enable a computing device (which can be a personal computer, a server, a mobile terminal, or a network device, etc.) to execute the method according to the implementation mode of the present disclosure.

[0269] Those skilled in the art will readily appreciate other embodiments of the present disclosure after considering the specification and practicing the invention disclosed herein. The present disclosure is intended to cover any variations, uses or adaptations of the present disclosure, which follow the general principles of the present disclosure and include common knowledge or customary techniques in the art that are not disclosed in the present disclosure. The description and examples are intended to be exemplary only, and the true scope and spirit of the present disclosure are indicated by the appended claims.

Claims

1. A method for transmitting encrypted information, characterized in that: Applicable to the sender, including: Get information; Encrypt the information based on a preset algorithm to obtain a first sub-signature, a second sub-signature, and a third sub-signature; At least one of the first sub-signature, the second sub-signature, and the third sub-signature is sent to a recipient.

2. The method according to claim 1, characterized in that: The encrypting the information based on a preset algorithm to obtain a first sub-signature, a second sub-signature, and a third sub-signature includes: Generate encrypted information based on the first hash algorithm and the information; Generate a first sub-signature based on the second hash algorithm, the second public key and the encrypted information length value; A second sub-signature is generated based on at least one of the first sub-signature, a first public key, a first private key, and a Gaussian parameter. A third sub-signature is generated based on at least one of the encrypted information, the second private key, and a preset parameter.

3. The method according to claim 2, characterized in that The method further comprises: A first public key and a first private key are generated based on a trapdoor generation algorithm.

4. The method according to claim 2, characterized in that: The method further comprises: A second public key and a second private key are generated based on at least one of the first hash algorithm, the confidentiality parameter, and the information.

5. A method for transmitting encrypted information, characterized in that: Applied to the receiving side, including: receiving a verification message, the verification message including the first sub-signature, the second sub-signature and / or the third sub-signature; Verifying the first sub-signature and the second sub-signature; If the first sub-signature and the second sub-signature pass verification, verify the third sub-signature; When the third sub-signature passes the verification, the information is obtained.

6. The method according to claim 5, characterized in that The verifying the first sub-signature and the second sub-signature includes: determining whether the second sub-signature is not greater than a Gaussian parameter; If the second sub-signature passes the verification, it is determined whether the product of the second sub-signature and the first public key is equal to the result of the modulo operation of the first sub-signature and the preset parameter.

7. The method according to claim 5, characterized in that The verifying the third sub-signature includes: Sending a challenge message to the sender, so that the sender can calculate based on the challenge message and a preset formula; Receiving a challenge response message sent by the sender; In a case where the challenge response message passes the verification, the information is obtained.

8. An encrypted information transmission device, characterized in that: Applicable to the sender, including: A first acquisition module, used for acquiring information; An encryption module, used to encrypt the information based on a preset algorithm to obtain a first sub-signature, a second sub-signature and a third sub-signature; A sending module is used to send at least one of the first sub-signature, the second sub-signature and the third sub-signature to a recipient.

9. An encrypted information transmission device, characterized in that: Applied to the receiving side, including: A receiving module, configured to receive a verification message, wherein the verification message includes a first sub-signature, a second sub-signature and / or a third sub-signature; A first verification module, used to verify the first sub-signature and the second sub-signature; A second verification module, configured to verify the third sub-signature if the first sub-signature and the second sub-signature pass the verification; The second acquisition module is used to acquire information when the third sub-signature passes the verification.

10. An electronic device, characterized in that: include: processor; as well as A memory, configured to store executable instructions of the processor; The processor is configured to execute the encrypted information transmission method according to any one of claims 1 to 7 by executing the executable instructions.

11. A computer-readable storage medium having a computer program stored thereon, characterized in that: When the computer program is executed by a processor, the encrypted information transmission method according to any one of claims 1 to 7 is implemented.

Images