Decentralized traceable ring signature authentication method and system, storage medium

Abstract

This invention discloses a decentralized, traceable ring signature authentication method, system, and storage medium. The ring signature result is verified against a public key vector to confirm the legitimacy of the signer corresponding to the ring signature result. If the ring signature result passes verification and the number of users agreeing to trace it is greater than or equal to a threshold, the index of the signer members can be obtained through the fragmented private keys of the traced users, thereby completing the traceability operation. The technical solution of this invention provides anonymity and decentralized traceability for signers, improving the security and reliability of digital signatures.

Description

Technical Field

[0001] This invention belongs to the field of information security technology, and in particular relates to a decentralized traceable ring signature authentication method and system, and storage medium. Background Technology

[0002] A signature is a fundamental primitive in cryptography that provides integrity, authentication, and non-repudiation of a message. Integrity means that the message cannot be tampered with during transmission; authentication means that the recipient believes the signature comes from the signer; and non-repudiation means that the signer cannot deny their signature afterward.

[0003] In existing technologies, a digital signature scheme generally consists of two components: a signature method and a verification method. In the signature method, the system takes a message m and a private key k as input and outputs a digital signature of m. In the verification method, the system takes m as input and its corresponding digital signature as input, and outputs a true or false value indicating legitimacy. However, in the signature method, if the signature private key is stolen, an attacker can arbitrarily forge the signature of a legitimate user.

[0004] The shortcomings of the aforementioned existing technologies are that traditional digital signature schemes cannot provide security features such as decentralization and traceability, and there is a risk of tracing user key leakage and malicious users, which seriously threatens the security and reliability of digital signatures. Summary of the Invention

[0005] The technical problem to be solved by the present invention is to provide a decentralized traceable ring signature authentication method and system, and storage medium.

[0006] To achieve the above objectives, the present invention adopts the following technical solution:

[0007] A decentralized, traceable ring signature authentication method includes:

[0008] Construct a group that contains members of the ring;

[0009] Select a decentralized, verifiable secret-sharing algorithm with a threshold of t to run on traceable user group members, and generate a traceable public key pk. open And their respective confidential fragment traceability private keys sk j,open ;

[0010] Retrieve the ring signature result R of the ring member's digital signature of message m. S ;

[0011] Based on the ring signature result R S Public key vector Verify the validity of the ring signature to complete the authentication of the digital signature;

[0012] When the number of users agreeing to trace back is greater than or equal to t, their corresponding fragment traces back their private key sk. j,open and the signature result R S The identity of the signer can be traced, thus completing the signature tracing operation.

[0013] As a preferred option, each member M in the group i Have a unique identity ID i The private key sk is kept confidential. i and the public key VK i .

[0014] As a preferred option, obtain the ring signature result R of the ring member's digital signature of message m. S Specifically, it includes:

[0015] The signer's index is prepared using a vector method. Signing user M π Generate vectors Where b π =1, all other elements are zero, and at the same time let in

[0016] Calculate the hash value corresponding to the public key vector And select a random number

[0017] Calculate the six commitment values:

[0018]

[0019] S1=γ α H+γ sk G,

[0020]

[0021] Where <·,·> denote the inner product of two vectors, Enc pk (m;r) indicates that plaintext m is encrypted using the Elgamal scheme with the public key pk and a random number r. Enc pk (m;r)=(r·G;m+r·pk);

[0022] make Where || represents the concatenation operation that joins multiple strings into a single string and calculates three challenge values:

[0023] y=H1(1||str), z=H1(2||str), w=H1(3||str);

[0024] Calculate the two reaction values:

[0025]

[0026] in This indicates that the components of two vectors are multiplied together.

[0027] Select two random numbers Make a second commitment to the two response values ​​and calculate the two commitment values:

[0028] T1=t1G+τ1H, T2=t2G+τ2H;

[0029] Calculate the challenge value for the second round: x = H2(w,y,z,T1,T2,m);

[0030] Calculate the reaction value in the second round:

[0031] τ x =τ1·x + τ2·x 2 ,

[0032] μ=α+β·w+ρ·x,

[0033] z α =γ α +α·x,

[0034] z sk =γ sk +sk π ·x,

[0035] z δ =γ δ +δ·x,

[0036]

[0037] The final ring signature result is as follows:

[0038]

[0039] As a preferred option, based on the ring signature result R S Public key vector Verifying the validity of the ring signature to complete the authentication of the digital signature specifically includes:

[0040] For a signature The verifier needs to verify four equations. The signature is valid if all equations are true; the signature is invalid if any one equation is false.

[0041] calculate y=H1(1||str), z=H1(2||str), w=H1(3||str), x=H2(w,y,z,T1,T2,m);

[0042] make Among them, G i ′=y (1-i) G i For all i∈[1,n], the verifier needs to verify whether the following four equations hold true:

[0043]

[0044]

[0045]

[0046] z α H+z sk G = S1 + xA1.

[0047] The signature is valid when all equations are true; it is invalid when any one equation is false.

[0048] This invention also provides a decentralized, traceable ring signature authentication system, comprising:

[0049] The group module is used to construct a group that contains ring members;

[0050] The traceability user group module is used to select members of the traceability user group to run a decentralized verifiable secret sharing algorithm with a threshold of t, and generate a traceability public key pk. open And their respective confidential fragment traceability private keys sk j,open ;

[0051] The signature acquisition module is used to obtain the ring signature result G of the digital signature of message m by group members. S ;

[0052] The verification module is used to verify the ring signature result R. S Public key vector Verify the validity of the ring signature to complete the authentication of the digital signature;

[0053] The traceability module is used to trace the private key sk from the corresponding fragment when the number of users agreeing to trace is greater than or equal to t. j,open and the signature result R S The identity of the signer can be traced, thus completing the signature tracing operation.

[0054] As a preferred option, each member M in the group i Have a unique identity ID i The private key sk is kept confidential. i and the public key VK i .

[0055] The present invention also provides a storage medium storing a computer program, which executes a decentralized traceable ring signature authentication method when running.

[0056] This invention will use the ring signature result R S With public key vector The process involves verification of the legitimacy of the signer corresponding to the ring signature result; if the ring signature result R... S If verification is successful and the number of users agreeing to trace back is greater than or equal to the threshold t, the index of the signer member can be obtained through the sharded private key of the traced user, thus completing the tracing operation. This signature provides decentralization and traceability for the ring community, improving the security and reliability of digital signatures. Attached Figure Description

[0057] To more clearly illustrate the technical solutions in the embodiments of the present invention or the prior art, the drawings used in the description of the embodiments or the prior art will be briefly introduced below. Obviously, the drawings described below are only embodiments of the present invention. For those skilled in the art, other drawings can be obtained based on the provided drawings without creative effort.

[0058] Figure 1 This is a flowchart of the decentralized traceable ring signature authentication method according to an embodiment of the present invention. Detailed Implementation

[0059] The technical solutions of the embodiments of the present invention will be clearly and completely described below with reference to the accompanying drawings. Obviously, the described embodiments are only some embodiments of the present invention, and not all embodiments. Based on the embodiments of the present invention, all other embodiments obtained by those skilled in the art without creative effort are within the scope of protection of the present invention.

[0060] To make the above-mentioned objects, features and advantages of the present invention more apparent and understandable, the present invention will be further described in detail below with reference to the accompanying drawings and specific embodiments.

[0061] Example 1:

[0062] like Figure 1 As shown, this embodiment of the invention provides a decentralized traceable ring signature authentication method, including:

[0063] Construct a group containing members of a ring, where each member M in the group... i Have a unique identity ID i The private key sk is kept confidential. i and the public key VK i ;

[0064] Select a decentralized, verifiable secret-sharing algorithm with a threshold of t to run on traceable user group members, and generate a traceable public key pk. open And their respective confidential fragment traceability private keys sk j,open ;

[0065] Retrieve the ring signature result R of the ring member's digital signature of message m. S ;

[0066] Based on the ring signature result R S Public key vector Verify the validity of the ring signature to complete the authentication of the digital signature;

[0067] When the number of users agreeing to trace back is greater than or equal to t, their corresponding fragment traces back their private key sk. j,open and the signature result R S The identity of the signer can be traced, thus completing the signature tracing operation.

[0068] As one embodiment of the present invention, the system publicly disclosed parameters are set in the group containing ring members, specifically including: the maximum number of users N in the ring, a large prime number p, and an elliptic curve group. group The N+1 generators G and Mapped to Secure hash functions H1, H2 and mappings to the group The secure hash function H3.

[0069] As one embodiment of the present invention, the ring member M i Have a unique identity ID i Each generates a private key sk that is kept confidential. i and the public key VK i Specifically, it includes:

[0070] Each member M in the ring i Random selection Used as the private key, a verification public key vk is generated. i =sk i G, the set of all public keys is denoted as G.

[0071] As one embodiment of the present invention, a decentralized verifiable secret sharing algorithm with a traceability threshold of t is selected to generate a traceability public key pk. open And their respective confidential fragment traceability private keys sk j,open Specifically, it includes:

[0072] Choose one from arrive An encryption / decryption algorithm in This means using the public key pk to encrypt the plaintext x into ciphertext. This means using the private key sk to decrypt the ciphertext y into plaintext;

[0073] Each traceable user group member T i Generate your own public and private key pairs {sk i ,pk i}, and publish the public key pk i ;

[0074] For tracing user group member T i Randomly select a random number a i,0 ,a i,1 ,...,a i,t-1 Generate a polynomial of order t-1.

[0075] f i (x)=a i,0 +a i,1 x+...+a i,t-1 x t-1

[0076] Where t≤m-1. And publish A. i,0 =a i,0 G,A i,1 =a i,1 Ω,...,A i,t-1 =a i,t-1 G;

[0077] Trace user group member T i User T j public key pk j Encryption f i (j) obtained And sent to user T j ;

[0078] When user T j Received all from and other traceable users T i Sent First, use your own private key sk j Decryption Get f i (j)', then verify the equation.

[0079] f i (j)'G=A i,0 +A i,1 j+...+A i,t-1 j t-1 .

[0080] Only if all verification equations are true can you trust the fragmented private key you have obtained. That's correct;

[0081] At the same time, all users can obtain the public key.

[0082] As one embodiment of the present invention, the ring signature result R of the ring member's digital signature of message m is obtained. S Specifically, it includes:

[0083] The signer's index is prepared using a vector method. Signing user M π Generate vectors Where b π =1, all other elements are zero, and at the same time let in

[0084] Calculate the hash value corresponding to the public key vector And select a random number

[0085] Calculate the six commitment values:

[0086]

[0087] S1=γ α H+γ sk G,

[0088]

[0089] Where <·,·> denote the inner product of two vectors, Enc pk (m;r) indicates that plaintext m is encrypted using the Elgamal scheme with the public key pk and a random number r. Enc pk (m;r)=(r·G;m+r·pk);

[0090] make Where || represents the concatenation operation that joins multiple strings into a single string and calculates three challenge values:

[0091] y=H1(1||str), z=H1(2||str), w=H1(3||str);

[0092] Calculate the two reaction values:

[0093]

[0094] in This indicates that the components of two vectors are multiplied together.

[0095] Select two random numbers Make a second commitment to the two response values ​​and calculate the two commitment values:

[0096] T1=t1G+τ1H, T2=t2G+τ2H;

[0097] Calculate the challenge value for the second round: x = H2(w,y,z,T1,T2,m);

[0098] Calculate the reaction value in the second round:

[0099] τ x =τ1·x + τ2·x 2 ,

[0100] μ=α+β·w+ρ·x,

[0101] z α =γ α +α·x,

[0102] z sk =γ sk +sk π ·x,

[0103] z δ =γ δ +δ·x,

[0104]

[0105] The final ring signature result is as follows:

[0106]

[0107] As one embodiment of the present invention, based on the ring signature result R S Public key vector Verifying the validity of the ring signature to complete the authentication of the digital signature specifically includes:

[0108] For a signature The verifier needs to verify four equations. The signature is valid if all equations are true; the signature is invalid if any one equation is false.

[0109] calculate y=H1(1||str), z=H1(2||str), w=H1(3||str), x=H2(w,y,z,T1,T2,m);

[0110] make Among them, G i ′=y (1-i) G i For all i∈[1,n], the verifier needs to verify whether the following four equations hold true:

[0111]

[0112]

[0113]

[0114] z α H+z sk G = S1 + xA1,

[0115] The signature is valid when all equations are true; it is invalid when any one equation is false.

[0116] As one implementation of the present invention, when the number of users agreeing to trace back is greater than or equal to t, their corresponding fragment trace back private key sk is used. j,open and the signature result R S And the plaintext 'm' can be traced back to the signer's identity, thus completing the signature tracing operation, which specifically includes:

[0117] If the number of users who agree to be traced is less than t, tracing is not possible;

[0118] If the number of users agreeing to trace back is greater than or equal to t, the process is first performed based on the ring signature result RS and the public key vector. Verify the validity of the ring signature; if the signature verification is invalid, there is no way to trace it.

[0119] If the signature verification is valid, let the set of traceable user indices be T'∈[1,n], and calculate the recovery private key.

[0120] By recovering the private key sk open Decryption yields the signer's verification public key. Then compare vk in the public key vector The location can then be traced back to the index corresponding to the signing user.

[0121] The present invention has the following advantages:

[0122] Decentralization: This signature does not have a central manager. The signing and tracing processes are decentralized through ring signatures and verifiable secret sharing.

[0123] Traceability: Traceability of signatures is achieved by adding a tag to the zero-knowledge proof of ring signatures.

[0124] Example 2:

[0125] This invention also provides a decentralized, traceable ring signature authentication system, comprising:

[0126] The group module is used to construct a group that contains ring members;

[0127] The traceability user group module is used to select members of the traceability user group to run a decentralized verifiable secret sharing algorithm with a threshold of t, and generate a traceability public key pk. open And their respective confidential fragment traceability private keys sk j,open ;

[0128] The signature acquisition module is used to obtain the ring signature result G of the digital signature of message m by group members. S ;

[0129] The verification module is used to verify the ring signature result R. S Public key vector Verify the validity of the ring signature to complete the authentication of the digital signature;

[0130] The traceability module is used to trace the private key sk from the corresponding fragment when the number of users agreeing to trace is greater than or equal to t. j,open and the signature result R S The identity of the signer can be traced, thus completing the signature tracing operation.

[0131] As one embodiment of the present invention, each member M in the group i Have a unique identity ID i The private key sk is kept confidential. i and the public key VK i .

[0132] Example 3:

[0133] This invention also provides a storage medium storing a computer program that executes a decentralized traceable ring signature authentication method during runtime.

[0134] The embodiments described above are merely preferred embodiments of the present invention and are not intended to limit the scope of the present invention. Various modifications and improvements made to the technical solutions of the present invention by those skilled in the art without departing from the spirit of the present invention should fall within the protection scope defined by the claims of the present invention.

Claims

1. A decentralized, traceable ring signature authentication method, characterized in that, include: Construct a group that contains members of the ring; A decentralized verifiable secret sharing algorithm with a tracing user group member running threshold t is selected to generate a tracing public key pk open and a respective secret shard tracing private key sk j,open ; Obtaining a ring signature result R of a ring member digitally signing a message m S ; Based on the ring signature result R S Public key vector Verifying the validity of the ring signature completes the authentication of the digital signature; where each member of the ring... Random selection Used as the private key, a verification public key is generated. G, the set of all public keys is denoted as G. ; When agreeing to trace users greater than or equal to t, their corresponding shard trace private key sk j,open And the signature result R S The identity of the signer can be traced, thus completing the signature tracing operation; Each member M in the group i Has an independent identity id i , a secret private key sk i And a public key vk i ; Obtaining a ring signature result R of a ring member digitally signing a message m S which specifically comprises: Prepare the signer's index using a vector method; signing users Generate vectors in, All other elements are zero, and at the same time let ,in ; Calculate the hash value corresponding to the public key vector And select a random number ;in, To map to the group A secure hash function; Calculate the six commitment values: Where G,G1,G2,...,G N For the group N+1 generators, =(G1,G2,...,G N ), This represents the dot product of two vectors. Indicates the use of a public key With random numbers plaintext Perform Elgamal encryption, i.e. ; make ,in This represents a concatenation operation that joins multiple strings into a single string and calculates three challenge values: in, For mapping to A secure hash function; Calculate the two reaction values: in, This indicates that the components of two vectors are multiplied together. Select two random numbers Make a second commitment to the two response values ​​and calculate the two commitment values: Calculate the challenge value for the second round. ;in, For mapping to A secure hash function; Calculate the reaction value in the second round: The final ring signature result is as follows: Based on the ring signature result R S Public key vector Verifying the validity of the ring signature to complete the authentication of the digital signature specifically includes: For a signature The verifier needs to verify four equations. The signature is valid if all equations are true; the signature is invalid if any one equation is false. calculate , , , ; make ,in, For all The verifier needs to verify whether the following four equations are true: The signature is valid when all equations are true; it is invalid when any one equation is false.

2. A decentralized traceable ring signature authentication system that implements the decentralized traceable ring signature authentication method of claim 1, characterized in that, include: The group module is used to construct a group that contains ring members; The traceability user group module is used to select members of the traceability user group to run a decentralized verifiable secret sharing algorithm with a threshold of t, and generate a traceability public key pk. open And their respective confidential fragment traceability private keys sk j,open ; The signature acquisition module is used to obtain the ring signature result R of the digital signature of message m by group members. S ; The verification module is used to verify the ring signature result R. S Public key vector Verify the validity of the ring signature to complete the authentication of the digital signature; The traceability module is used to trace the private key sk from the corresponding fragment when the number of users agreeing to trace is greater than or equal to t. j,open and the signature result R S The identity of the signer can be traced, thus completing the signature tracing operation; Each member M in the group i Have a unique identity ID i The private key sk is kept confidential. i and the public key VK i .

3. A storage medium, characterized in that, The storage medium stores a computer program that, when running, executes the decentralized traceable ring signature authentication method as described in claim 1.

Images