Quantum computing resistant secret key signature method and system

Abstract

The invention discloses an anti-quantum computing secret key signature method, which is applied to a secret key signature system, and comprises the following steps: step 1, pre-issuing a secret key card; 2, a signature party client sends a pre-signature request signal; step 3, sending a pre-signature confirmation signal by the client of the seal checking party; the secret key signature system resistant to quantum computing comprises the seal server, a seal checking party client side and a signature party client side, and in the secret key signature system resistant to quantum computing, a pre-signature request signal is sent to the seal server and the seal checking party client side; the seal checking party client can synchronously receive the pre-signature request signal and the pre-signed file of the seal server, so that the potential safety hazard is reduced; the confirmation key sent by the seal checking party client to the signature party client comprises the first random number and the second random number, and the seal public key sent by the seal checking party client to the seal server comprises the third random number and the second random number, so that the reliability of signature authorization is improved.

Description

Technical Field

[0001] The present invention relates to the technical field of secure communication, and particularly relates to a key signature method and system resistant to quantum computing. Background Art

[0002] An electronic seal, also called a digital seal, is a visual form of digital signature, and can also be understood as the electronic version of a traditional seal and handwritten signature. Its function is similar to that of a traditional seal or handwritten signature used on paper documents. The objects to be stamped with electronic seals are electronic documents, and these electronic documents also need to be transmitted in a network environment, which makes the electronic seal application system relatively complex. Therefore, an electronic seal is not equivalent to a simple electronic seal picture, and it must have three basic characteristics: ease of use, security, and scalability.

[0003] In the process of applying existing electronic seals, there are some security problems. For example, according to the patent number: CN109614802B, the patent name: Signature method and signature system resistant to quantum computing, which records that "a key card is pre-issued to the seal server and each client respectively, and the seal picture is stored in the key card of the client; the electronic seal and the public key pool are stored in the key card of the seal server, and a random number generator is configured in each key card; the client of the signatory uses the seal picture in the key card to pre-sign the file, and sends the pre-signed file to the seal server to request signature; the seal server responds to the client's request to sign the file to generate a file with an electronic seal; at least the seal signature generated by the participation of the seal public key and the anti-quantum computing public key generated by combining the seal public key with the public key pool are included in the electronic seal; after the verification party obtains the file with the electronic seal, it forwards it to the seal server to request verification; the seal server calculates the seal public key by using the anti-quantum computing public key and the public key pool, verifies the seal signature by using the seal public key, and then sends the verification result to the verification party". From this, those skilled in the art can know that only communication occurs between the client of the signatory and the seal server. The seal server, as the transfer station and storage end of the intermediate signal transmission, is prone to security leakage if it is decrypted.

[0004] In summary, a key signature method and system resistant to quantum computing are designed. Summary of the Invention

[0005] In order to overcome the above deficiencies, the present invention provides a key signature method and system resistant to quantum computing.

[0006] The present invention achieves the above object through the following technical solutions:

[0007] A key signature method against quantum computing, which is applied to a key signature system. The key signature method includes the following steps:

[0008] Step 1: Pre-issue key cards;

[0009] Pre-issue key cards to the seal server, the seal verification client, and the signature client. The key cards of the seal server and the seal verification client store electronic seals, a public key pool, and seal pictures. Random number generators are provided in the key cards;

[0010] Step 2: The signature client sends a pre-signature request signal;

[0011] The pre-signature request signal is sent to the seal server and the seal verification client. The seal server sends the seal picture to the signature client for pre-signature. The signature client sends the pre-signed file to the seal server, and then the seal server sends the pre-signed file to the seal verification client;

[0012] Step 3: The seal verification client sends a pre-signature confirmation signal;

[0013] After receiving the pre-signature request signal from the signature client and the pre-signed file sent by the seal server, the seal verification client compares and confirms the two, and then sends a seal verification request signal to the seal server. After the seal server confirms, the seal server calculates the seal public key using the anti-quantum computing public key and the public key pool, and uses the seal public key to verify the seal signature, and then sends the verification result to the seal verification client;

[0014] Step 4: The seal server confirms the signature;

[0015] The seal verification client calculates the seal public key using the anti-quantum computing public key and the public key pool, sends the seal public key to the seal server, the seal verification client synchronously sends the confirmation key to the signature client, the signature client sends a confirmation signal to the seal server. After the seal server compares the seal public key of the seal verification client and the confirmation key of the signature client, finally the seal server sends the seal public key to the signature client.

[0016] Preferably, in Step 4, the confirmation key sent by the seal verification client to the signature client includes a first random number and a second random number. The seal public key sent by the seal verification client to the seal server includes a third random number and the second random number. The first random number is used for mutual verification between the seal verification client and the signature client. The third random number is used for mutual verification between the seal verification client and the seal server. The second random number is used for mutual verification between the signature client and the seal server. Through the key cross-confirmation among the seal server, the seal verification client, and the signature client, the reliability of signature authorization is improved.

[0017] Preferably, the signature in the pre-signed document includes a seal picture or a handwritten signature.

[0018] A quantum-computing-resistant key signature system includes a seal server, a seal-verifying party client, and a signature party client, which are interconnected through wireless communication.

[0019] Preferably, both the seal-verifying party client and the signature party client are provided with wireless communication modules. The wireless communication module includes a wireless communication circuit, which includes an integrated circuit, a first capacitor, a second capacitor, a fifth capacitor, a sixth capacitor, a seventh capacitor, an eighth capacitor, a ninth capacitor, a tenth capacitor, an eleventh capacitor, a twelfth capacitor, a thirteenth capacitor, a fourteenth capacitor, a first resistor, a third resistor, a fourth resistor, a fifth resistor, a switch, an inductor, an antenna, an inductor, a crystal oscillator, and a voltage-regulating triode. The model of the integrated circuit is nRF401. The eleventh terminal of the integrated circuit is grounded through the third resistor. The first terminal of the integrated circuit is electrically connected to the twentieth terminal of the integrated circuit through the crystal oscillator. The first resistor is in parallel with the crystal oscillator. The first terminal of the integrated circuit is grounded through the first capacitor. The twentieth terminal of the integrated circuit is grounded through the second capacitor. The fifth terminal of the integrated circuit is electrically connected to the sixth terminal of the integrated circuit through the inductor. The fifteenth terminal of the integrated circuit is electrically connected to the sixteenth terminal of the integrated circuit through the antenna. The center of the antenna is grounded through the eighth capacitor and is externally connected to a 5V DC voltage power supply. Both ends of the antenna are connected to a series circuit composed of the ninth capacitor and the tenth capacitor. The fourth resistor is in parallel with the series circuit composed of the ninth capacitor and the tenth capacitor. The seventh terminal, the fourteenth terminal, the third terminal, and the seventeenth terminal of the integrated circuit are all grounded. The second terminal of the integrated circuit is grounded through the seventh capacitor. The thirteenth terminal of the integrated circuit is grounded through the sixth capacitor. The eighth terminal of the integrated circuit is grounded through the fifth capacitor. The output terminal of the voltage-regulating triode is electrically connected to the second terminal, the thirteenth terminal, and the eighth terminal of the integrated circuit through the fifth resistor respectively. Both ends of the fifth resistor are grounded through the eleventh capacitor and the twelfth capacitor respectively. The input terminal of the voltage-regulating triode is grounded through the thirteenth capacitor and the fourteenth capacitor respectively. The grounded terminal of the voltage-regulating triode is grounded. The output terminal of the voltage-regulating triode is electrically connected to the anode of the diode through the switch. The cathode of the diode is electrically connected to the output terminal of the voltage-regulating triode. The trigger terminal of the switch is electrically connected to the trigger terminal of the MCU in the seal-verifying party client or the signature party client.

[0020] In this wireless communication circuit, when the seal-verifying party client or the signature party client needs to transmit multiple signals, it is necessary to increase the output power of the power supply circuit at this time. The MCU in the seal-verifying party client or the signature party client sends a trigger signal to the switch, and the switch will conduct, so as to increase the output power of the power supply circuit and provide sufficient power for the antenna to transmit multiple signals.

[0021] Preferably, the wireless communication circuit further includes a frequency modulation circuit, which includes a second resistor, a third capacitor, and a fourth capacitor. The fourth terminal of the integrated circuit is grounded through the second resistor and the third capacitor, and the fourth capacitor is connected in parallel with the second resistor and the third capacitor.

[0022] The beneficial effects of the present invention are as follows: In the anti-quantum computing key signature method and system:

[0023] 1. The pre-signature request signal is sent to the seal server and the verification party client. The verification party client can synchronously receive the pre-signature request signal and the pre-signed file from the seal server. The signal sources of the verification party client are the seal server and the signature party client, reducing the single signal source and potential security risks.

[0024] 2. The confirmation key sent by the verification party client to the signature party client includes a first random number and a second random number, and the seal public key sent by the verification party client to the seal server includes a third random number and a second random number. By cross-confirming the keys among the seal server, the verification party client, and the signature party client, the reliability of signature authorization is improved.

[0025] 3. The wireless communication circuit can adjust the output power according to the working requirements of the verification party client or the signature party client to meet the multi-channel signal transmission of the verification party client or the signature party client, improving the reliability of the operation of the key signature system. BRIEF DESCRIPTION OF THE DRAWINGS

[0026] The present invention will be described by way of examples with reference to the accompanying drawings, where:

[0027] Figure 1 is the flow chart of the present invention;

[0028] Figure 2 is the circuit schematic diagram of the wireless communication circuit of the present invention. DETAILED DESCRIPTION OF THE INVENTION

[0029] The present invention will now be described in further detail with reference to the accompanying drawings. These drawings are all simplified schematic diagrams, only showing the basic structure of the present invention in a schematic manner, so they only show the components related to the present invention.

[0030] As Figure 1 shown, an anti-quantum computing key signature method is applied to a key signature system. The key signature method includes the following steps:

[0031] Step 1: Pre-issue a key card;

[0032] Pre-issue key cards to the seal server, the seal verification party client, and the signature party client. The key cards of the seal server and the seal verification party client store electronic seals, a public key pool, and seal pictures, and a random number generator is provided in each key card;

[0033] Step 2: The signature party client sends a pre-signature request signal;

[0034] The pre-signature request signal is sent to the seal server and the seal verification party client. The seal server sends the seal picture to the signature party client for pre-signature. The signature party client sends the pre-signed file to the seal server, and then the seal server sends the pre-signed file to the seal verification party client. The seal verification party client can receive the pre-signature request signal sent by the signature party client and can perform multi-party verification, reducing the hidden danger of security leakage after the seal server makes a mistake.

[0035] Step 3: The seal verification party client sends a pre-signature confirmation signal;

[0036] After the seal verification party client receives the pre-signature request signal from the signature party client and the pre-signed file sent by the seal server, it compares and confirms the two, and then sends a seal verification request signal to the seal server. After the seal server confirms, the seal server calculates the seal public key using the anti-quantum computing public key and the public key pool, and uses the seal public key to verify the seal signature, and then sends the verification result to the seal verification party client;

[0037] Step 4: The seal server confirms the signature;

[0038] The seal verification party client calculates the seal public key using the anti-quantum computing public key and the public key pool, sends the seal public key to the seal server, the seal verification party client synchronously sends the confirmation key to the signature party client, the signature party client sends a confirmation signal to the seal server. After the seal server compares the seal public key of the seal verification party client and the confirmation key of the signature party client, finally the seal server sends the seal public key to the signature party client.

[0039] Specifically, in Step 4, the confirmation key sent by the seal verification party client to the signature party client includes a first random number and a second random number. The seal public key sent by the seal verification party client to the seal server includes a third random number and a second random number. The first random number is used for mutual verification between the seal verification party client and the signature party client. The third random number is used for mutual verification between the seal verification party client and the seal server. The second random number is used for mutual verification between the signature party client and the seal server. Through the cross-confirmation of keys among the seal server, the seal verification party client, and the signature party client, the reliability of signature authorization is improved.

[0040] Specifically, the signature in the pre-signed file includes a seal picture or a handwritten signature.

[0041] A quantum-resistant key signature system, including a seal server, a seal verification party client, and a signature party client, which are interconnected through wireless communication.

[0042] Figure 2 As shown, specifically, both the seal verification party client and the signature party client are equipped with wireless communication modules. The wireless communication module includes a wireless communication circuit, which includes an integrated circuit U1, a first capacitor C1, a second capacitor C2, a fifth capacitor C5, a sixth capacitor C6, a seventh capacitor C7, an eighth capacitor C8, a ninth capacitor C9, a tenth capacitor C10, an eleventh capacitor C11, a twelfth capacitor C12, a thirteenth capacitor C13, a fourteenth capacitor C14, a first resistor R1, a third resistor R3, a fourth resistor R4, a fifth resistor R5, a switch S1, an inductor L1, an antenna Y1, an inductor L1, a crystal oscillator X1, and a voltage-regulating triode U2. The model of the integrated circuit U1 is nRF401. The eleventh terminal of the integrated circuit U1 is grounded through the third resistor R3. The first terminal of the integrated circuit U1 is electrically connected to the twentieth terminal of the integrated circuit U1 through the crystal oscillator X1. The first resistor R1 is connected in parallel with the crystal oscillator X1. The first terminal of the integrated circuit U1 is grounded through the first capacitor C1. The twentieth terminal of the integrated circuit U1 is grounded through the second capacitor C2. The fifth terminal of the integrated circuit U1 is electrically connected to the sixth terminal of the integrated circuit U1 through the inductor L1. The fifteenth terminal of the integrated circuit U1 is electrically connected to the sixteenth terminal of the integrated circuit U1 through the antenna Y1. The center of the antenna Y1 is grounded through the eighth capacitor C8 and is externally connected to a 5V DC voltage power supply. The two ends of the antenna Y1 are connected to a series circuit composed of the ninth capacitor C9 and the tenth capacitor C10. The fourth resistor R4 is connected in parallel with the series circuit composed of the ninth capacitor C9 and the tenth capacitor C10. The seventh terminal, the fourteenth terminal, the third terminal, and the seventeenth terminal of the integrated circuit U1 are all grounded. The second terminal of the integrated circuit U1 is grounded through the seventh capacitor C7. The thirteenth terminal of the integrated circuit U1 is grounded through the sixth capacitor C6. The eighth terminal of the integrated circuit U1 is grounded through the fifth capacitor C5. The output terminal of the voltage-regulating triode U2 is electrically connected to the second terminal of the integrated circuit U1, the thirteenth terminal of the integrated circuit U1, and the eighth terminal of the integrated circuit U1 respectively through the fifth resistor R5. The two ends of the fifth resistor R5 are grounded through the eleventh capacitor C11 and the twelfth capacitor C12 respectively. The input terminal of the voltage-regulating triode U2 is grounded through the thirteenth capacitor C13 and the fourteenth capacitor C14 respectively. The grounding terminal of the voltage-regulating triode U2 is grounded. The output terminal of the voltage-regulating triode U2 is electrically connected to the anode of the diode through the switch S1. The cathode of the diode is electrically connected to the output terminal of the voltage-regulating triode U2. The trigger terminal of the switch S1 is electrically connected to the trigger terminal of the MCU in the seal verification party client or the signature party client.

[0043] In this wireless communication circuit, when the client of the seal verification party or the client of the signature and seal party needs to perform multiple signal transmissions, it is necessary to increase the output power of the power supply circuit at this time. The MCU in the client of the seal verification party or the client of the signature and seal party sends a trigger signal to the switch S1, and the switch S1 will conduct, so as to increase the output power of the power supply circuit and provide sufficient power for the antenna Y1 to perform multi-channel signal transmission.

[0044] Specifically, the wireless communication circuit further includes a frequency modulation circuit. The frequency modulation circuit includes a second resistor R2, a third capacitor C3, and a fourth capacitor C4. The fourth terminal of the integrated circuit U1 is grounded through the second resistor R2 and the third capacitor C3, and the fourth capacitor C4 is connected in parallel with the second resistor R2 and the third capacitor C3.

[0045] Based on the inspiration of the present invention, through the above description, relevant staff can completely make various changes and modifications within the scope not deviating from the technical idea of the present invention. The technical scope of the present invention is not limited to the content in the specification, and its technical scope must be determined according to the scope of the claims.

Claims

1. A secret key signature method against quantum computing, characterized in that: Applied to a key signature system, the key signature method includes the following steps: Step 1: Pre-issue key cards; Pre-issue key cards to the seal server, the seal verification client, and the signature client. The key cards of the seal server and the seal verification client store electronic seals, a public key pool, and seal pictures. Random number generators are provided in all key cards; Step 2: The signature client sends a pre-signature request signal; The pre-signature request signal is sent to the seal server and the seal verification client. The seal server sends the seal picture to the signature client for pre-signature. The signature client sends the pre-signed file to the seal server, and then the seal server sends the pre-signed file to the seal verification client; Step 3: The seal verification client sends a pre-signature confirmation signal; After the seal verification client receives the pre-signature request signal from the signature client and the pre-signed file sent by the seal server, it compares and confirms the two, and then sends a seal verification request signal to the seal server. After the seal server confirms, the seal server calculates the seal public key using the quantum-resistant public key and the public key pool, and uses the seal public key to verify the seal signature, and then sends the verification result to the seal verification client; Step 4: The seal server confirms the signature; The seal verification client calculates the seal public key using the quantum-resistant public key and the public key pool, sends the seal public key to the seal server, the seal verification client synchronously sends the confirmation key to the signature client, the signature client sends a confirmation signal to the seal server. After the seal server compares the seal public key of the seal verification client and the confirmation key of the signature client, finally the seal server sends the seal public key to the signature client.

2. The key signature method against quantum computing according to claim 1, characterized in that: In the said Step 4, the confirmation key sent by the seal verification client to the signature client includes a first random number and a second random number. The seal public key sent by the seal verification client to the seal server includes a third random number and the second random number. The first random number is used for mutual verification between the seal verification client and the signature client, the third random number is used for mutual verification between the seal verification client and the seal server, and the second random number is used for mutual verification between the signature client and the seal server.

3. The quantum-computing-resistant key signature method according to claim 1, characterized in that: The signature in the pre-signed file includes a seal picture or a handwritten signature.

4. A key signature system against quantum computing, characterized in that: It includes a seal server, a seal verification client, and a signature client, which are interconnected through wireless communication.

5. The quantum-computing-resistant secret key signature system according to claim 4, wherein: Both the seal verification party client and the seal signing party client are equipped with wireless communication modules. The wireless communication module includes a wireless communication circuit, and the wireless communication circuit includes an integrated circuit, a first capacitor, a second capacitor, a fifth capacitor, a sixth capacitor, a seventh capacitor, an eighth capacitor, a ninth capacitor, a tenth capacitor, an eleventh capacitor, a twelfth capacitor, a thirteenth capacitor, a fourteenth capacitor, a first resistor, a third resistor, a fourth resistor, a fifth resistor, a switch, an inductor, an antenna, an inductor, a crystal oscillator, and a voltage-regulating triode. The model of the integrated circuit is nRF401. The eleventh terminal of the integrated circuit is grounded through the third resistor. The first terminal of the integrated circuit is electrically connected to the twentieth terminal of the integrated circuit through the crystal oscillator. The first resistor is connected in parallel with the crystal oscillator. The first terminal of the integrated circuit is grounded through the first capacitor. The twentieth terminal of the integrated circuit is grounded through the second capacitor. The fifth terminal of the integrated circuit is electrically connected to the sixth terminal of the integrated circuit through the inductor. The fifteenth terminal of the integrated circuit is electrically connected to the sixteenth terminal of the integrated circuit through the antenna. The eighth capacitor at the center of the antenna is grounded and externally connected to a 5V DC voltage power supply. The two ends of the antenna are connected to the series circuit composed of the ninth capacitor and the tenth capacitor. The fourth resistor is connected in parallel with the series circuit composed of the ninth capacitor and the tenth capacitor. The seventh terminal, the fourteenth terminal, the third terminal, and the seventeenth terminal of the integrated circuit are all grounded. The second terminal of the integrated circuit is grounded through the seventh capacitor. The thirteenth terminal of the integrated circuit is grounded through the sixth capacitor. The eighth terminal of the integrated circuit is grounded through the fifth capacitor. The output terminal of the voltage-regulating triode is electrically connected to the second terminal, the thirteenth terminal, and the eighth terminal of the integrated circuit through the fifth resistor respectively. The two ends of the fifth resistor are grounded through the eleventh capacitor and the twelfth capacitor respectively. The input terminal of the voltage-regulating triode is grounded through the thirteenth capacitor and the fourteenth capacitor respectively. The grounding terminal of the voltage-regulating triode is grounded. The output terminal of the voltage-regulating triode is electrically connected to the anode of the diode through the switch. The cathode of the diode is electrically connected to the output terminal of the voltage-regulating triode. The trigger terminal of the switch is electrically connected to the trigger terminal of the MCU in the seal verification party client or the seal signing party client.

6. The key signature system against quantum computing according to claim 5, wherein: The wireless communication circuit further includes a frequency modulation circuit. The frequency modulation circuit includes a second resistor, a third capacitor, and a fourth capacitor. The fourth terminal of the integrated circuit is grounded through the second resistor and the third capacitor. The fourth capacitor is connected in parallel with the second resistor and the third capacitor.

Images