Data sharing transaction lattice-based signcryption method for strongly specified verifier

Abstract

The invention provides a data sharing transaction lattice-based signcryption method for a strongly specified verifier. The method comprises the following steps: constructing a data sharing transaction system and a distributed account book by using a block chain technology; a user (signcryption person) obtains a transaction address of a transaction object (designated verifier) from the shared transaction system and initiates a data sharing transaction with the transaction object; the user performs signcryption on the transaction by using the public key of the specified verifier and the private key of the user, and sends a ciphertext to the shared transaction system; after acquiring the ciphertext, the specified verifier performs unsigncryption by using the private key of the verifier and the public key of the signcryption person; and after the verification is passed, the transaction is completed, and then the transaction is uploaded to a shared transaction system for whole-network consensus and uplink registration. According to the invention, cross-mechanism security sharing and transaction of data are realized by using a specified verifier signcryption method and a block chain technology.

Description

Technical Field

[0001] The present invention relates to the field of information security technology, and in particular to a data sharing transaction lattice-based signcryption method with a strong designated verifier. Background Art

[0002] In today's era, digital technology and the digital economy are at the forefront of the global scientific and technological revolution and industrial transformation, and are key areas of international competition in the new round. Developing the digital economy is a strategic choice for seizing new opportunities in this new round of scientific and technological revolution and is a key engine for building a modern economic system. The digital economy, a major economic form following the agricultural and industrial economies, is a new economic form that promotes greater equality and efficiency, with data resources as its key element, modern information networks as its primary carrier, and the integrated application of information and communications technologies and the digital transformation of all factors as its key drivers. Data is the core engine for the deepening development of the digital economy. In the development of integrated government services, governments at all levels have acquired vast amounts of public data. However, data silos and closed loops exist, hindering the effective exploration of the relevance and potential value of different data types. Breaking down barriers to data sharing and transactions and enabling efficient data flow across departments, regions, and industries is a crucial prerequisite for increasing the value of data. Blockchain technology enables trusted peer-to-peer value transfer between unfamiliar nodes, facilitating the secure sharing of data across institutions and entities. Its advantages, such as its distributed, peer-to-peer nature, transparency, and immutability, have led to its widespread application.

[0003] The digital economy encompasses a vast array of data, including travel records, medical records, dining history, and asset records. These data, closely tied to individuals' work and daily lives, contain a wealth of personal privacy. Leakage, misuse, or improper disclosure can compromise personal security and disrupt individuals' daily lives. Data carries a wealth of information about individuals, market entities, and the state, impacting citizens' personal rights and interests, the property rights of market entities, and national security and public interests. Data security is fundamental to information security. Currently, privacy-focused computing, cryptographic technologies, and cloud services offer valuable tools for securely sharing the value of data. Key privacy protection technologies include cryptography, information hiding, and data processing. Cryptography primarily focuses on developing key management mechanisms, signature schemes, and secret sharing methods that are suitable for privacy protection and differ from traditional data encryption and decryption. Summary of the Invention

[0004] In response to the deficiencies in the above-mentioned background technologies, the present invention proposes a lattice-based signcryption method for data sharing transactions with strong designated verifiers, establishes a data sharing transaction system using blockchain technology, and uses strong designated verifier signcryption technology to protect the privacy security of data and users in the data sharing transaction process, promotes the safe and efficient sharing of data across departments, regions, and industries, provides security technical support for the realization of the potential value of data, and promotes the healthy and sustainable development of the digital economy.

[0005] The technical solution of the present invention is achieved as follows:

[0006] A data sharing transaction lattice-based signcryption method with strong designated verifiers, the steps are as follows:

[0007] S100, using blockchain technology to build a data sharing transaction system and distributed ledger;

[0008] S200: The user (signator) obtains the transaction address of the transaction object (designated verifier) ​​from the shared transaction system and initiates a data sharing transaction with it;

[0009] S300: The user signs the transaction using the public key of the designated verifier and his / her own private key, and sends the ciphertext to the shared transaction system.

[0010] S400: After the designated verifier obtains the ciphertext, he / she uses his / her private key and the signer's public key to decrypt the ciphertext.

[0011] S500. Once verification is passed, the transaction is completed and then uploaded to the shared transaction system for network-wide consensus and registered on the chain.

[0012] The data sharing and trading system is a distributed trading platform composed of different data trading centers or entities and built on blockchain technology. The distributed ledger is an essential component of the data sharing and trading system, used to record data sharing transactions.

[0013] The user (signator) is the initiator of the data sharing transaction. The transaction partner (designated verifier) ​​is the recipient of the data sharing transaction, whose transaction address is generated based on their public key. The data sharing transaction is a transaction initiated by the user and the transaction partner on the data sharing transaction system to share data.

[0014] The signcryption process includes two steps: key generation and signcryption. Specifically:

[0015] Key generation step: After the key generation center selects the system parameters (n, m, q), it uses the trapdoor generation algorithm TrapGen(n, m, q) to obtain a matrix that obeys uniform distribution and a related secret trapdoor As the private key of user Alice, and satisfy AS A =qI n mod2q, where I n is the n×n identity matrix. Use the same method to generate (B,S B ), and as the public and private key pair of the designated verifier Bob, it must also satisfy B×S B =qI n mod2q.

[0016] Signcryption step: The user (signer) first uses the Gaussian distribution Select vector y from above and calculate c = H1(Ay mod 2q, μ), where σ represents the Gaussian parameter, μ is the signcrypted message, and H1 is the hash function; randomly select b∈{0,1} and calculate e1 = y+(-1) b S A c, e2 = (-1) b B T c, where B T Represents the transpose of B; randomly select λ∈{0,1} n ,calculate η=H3(λ,θ), from the randomness of η we can get: k1 T =-z1 T B, Where T represents the transpose operation, E κ Represents the encryption algorithm, noise vector Finally, the ciphertext γ = (θ, k1, k2) is output.

[0017] The decryption process: After the transaction object (designated verifier) ​​receives the ciphertext γ = (θ, k1, k2), it calculates make For i=1,2L,n, if Then λ i =0, otherwise λ i =1, and then we get the originally selected λ=(λ1,λ2,L λ n );calculate D κ Represents the decryption algorithm; if e1 and e2 both satisfy Then continue, otherwise stop decrypting the signcryption; calculate If c'=c, accept the plaintext μ; otherwise reject it, where σ represents the Gaussian parameter and μ is the signcrypted message.

[0018] The network-wide consensus is the completion of data sharing transactions that have been packaged, broadcast, and verified by the shared transaction system to achieve network-wide consistency. The on-chain registration is the recording of data sharing transactions that have passed the network-wide consensus in the distributed ledger.

[0019] Compared with the prior art, the present invention has the following beneficial effects:

[0020] 1) Using blockchain technology to build a data sharing transaction system involving different data transaction centers or entities, and establishing a distributed ledger to record data sharing transactions;

[0021] 2) Design a strong designated verifier signcryption method based on lattice cryptography. The strong designated verifier can achieve the non-transferability of signatures and prevent the privacy theft by non-designated users. The signcryption mechanism can achieve signing and encryption at the same time, improving the security of data privacy and the efficiency of algorithm execution. BRIEF DESCRIPTION OF THE DRAWINGS

[0022] Figure 1 is a flow chart of the present invention;

[0023] Figure 2 This is a structural diagram of the data sharing transaction system of the present invention;

[0024] Figure 3 This is a diagram of the data sharing transaction signcryption process of the present invention; DETAILED DESCRIPTION

[0025] The following will clearly and completely describe the technical solutions in the embodiments of the present invention in conjunction with the accompanying drawings. Obviously, the described embodiments are only part of the embodiments of the present invention, not all of the embodiments. All other embodiments obtained by ordinary technicians in this field based on the embodiments of the present invention without creative work are within the scope of protection of the present invention.

[0026] like Figure 1 As shown, an embodiment of the present invention provides a designated verifier proxy signature method for cross-chain sharing of medical data, and the steps are as follows:

[0027] S100, using blockchain technology to build a data sharing transaction system and distributed ledger;

[0028] S200: The user (signator) obtains the transaction address of the transaction object (designated verifier) ​​from the shared transaction system and initiates a data sharing transaction with it;

[0029] S300: The user signs the transaction using the public key of the designated verifier and his / her own private key, and sends the ciphertext to the shared transaction system.

[0030] S400: After the designated verifier obtains the ciphertext, he / she uses his / her private key and the signer's public key to decrypt the ciphertext.

[0031] S500. Once verification is passed, the transaction is completed and then uploaded to the shared transaction system for network-wide consensus and registered on the chain.

[0032] like Figure 2 As shown, the data sharing and trading system is a distributed trading platform composed of different data trading centers or entities and built on blockchain technology. The distributed ledger is an essential component of the data sharing and trading system, which is used to record the data sharing transactions that have occurred.

[0033] The user (signator) is the initiator of the data sharing transaction. The transaction partner (designated verifier) ​​is the recipient of the data sharing transaction, whose transaction address is generated based on their public key. The data sharing transaction is a transaction initiated by the user and the transaction partner on the data sharing transaction system to share data.

[0034] like Figure 3 As shown, the data sharing transaction signcryption method includes three steps: key generation, signcryption and decryption. Specifically:

[0035] Key generation steps:

[0036] After the key generation center selects the system parameters (n, m, q), it uses the trapdoor generation algorithm TrapGen(n, m, q) to obtain a matrix that obeys uniform distribution and a related secret trapdoor As the private key of user Alice, and satisfy AS A =qI n mod2q, where I n is the n×n identity matrix.

[0037] Generate (B,S B ), and as the public and private key pair of the designated verifier Bob, it must also satisfy B×S B =qI n mod2q.

[0038] Signcryption steps:

[0039] The user (signer) first Select vector y from above and calculate c = H1(Ay mod 2q, μ), where σ represents the Gaussian parameter, μ is the signcrypted message, and H1 is the hash function;

[0040] Randomly select b∈{0,1} and calculate e1=y+(-1) b S A c, e2 = (-1) b B T c, where B T B transpose of the representative;

[0041] Randomly select λ∈{0,1}n ,calculate η=H3(λ,θ), from the randomness of η we can get: k1 T =-z1 T B, Where T represents the transpose operation, E κ Represents the encryption algorithm, noise vector

[0042] Output ciphertext γ = (θ, k1, k2).

[0043] The decryption process:

[0044] After the transaction object (designated verifier) ​​receives the ciphertext γ=(θ,k1,k2), it calculates

[0045] make For i=1,2L,n, if Then λ i =0, otherwise λ i =1, and then we get the originally selected λ=(λ1,λ2,Lλ n );

[0046] calculate D κ Represents the decryption algorithm;

[0047] If both e1 and e2 satisfy Then continue, otherwise stop decrypting the signcryption; calculate If c'=c, accept the plaintext μ; otherwise reject it, where σ represents the Gaussian parameter and μ is the signcrypted message.

[0048] The network-wide consensus is the completion of data sharing transactions that have been packaged, broadcast, and verified by the shared transaction system to achieve network-wide consistency. The on-chain registration is the recording of data sharing transactions that have passed the network-wide consensus in the distributed ledger.

[0049] The above description is only a preferred embodiment of the present invention and is not intended to limit the present invention. Any modifications, equivalent substitutions, improvements, etc. made within the spirit and principles of the present invention should be included in the scope of protection of the present invention.

Claims

1. A data sharing transaction lattice-based signcryption method with strong designated verifier, characterized in that: The steps are as follows: S100, using blockchain technology to build a data sharing transaction system and distributed ledger; S200: The user (signator) obtains the transaction address of the transaction object (designated verifier) ​​from the shared transaction system and initiates a data sharing transaction with it; S300: The user signs the transaction using the public key of the designated verifier and his / her own private key, and sends the ciphertext to the shared transaction system. S400: After the designated verifier obtains the ciphertext, he / she uses his / her private key and the signer's public key to decrypt the ciphertext. S500. Once verification is passed, the transaction is completed and then uploaded to the shared transaction system for network-wide consensus and registered on the chain.

2. A data sharing transaction lattice-based signcryption method with strong designated verifier according to claim 1, characterized in that: The data sharing and trading system is a distributed trading platform composed of different data trading centers or entities and built on blockchain technology. The distributed ledger is an essential component of the data sharing and trading system, used to record data sharing transactions.

3. A data sharing transaction lattice-based signcryption method with strong designated verifier according to claim 1, characterized in that: The user (signator) is the initiator of the data sharing transaction. The transaction partner (designated verifier) ​​is the recipient of the data sharing transaction, whose transaction address is generated based on their public key. The data sharing transaction is a transaction initiated by the user and the transaction partner on the data sharing transaction system to share data.

4. A data sharing transaction lattice-based signcryption method with strong designated verifier according to claim 1, characterized in that: The signcryption process includes two steps: key generation and signcryption. Specifically: Key generation step: After the key generation center selects the system parameters (n, m, q), it uses the trapdoor generation algorithm TrapGen(n, m, q) to obtain a matrix that obeys uniform distribution and a related secret trapdoor As the private key of user Alice, and satisfy AS A =qI n mod2q, where I n is the n×n identity matrix. Use the same method to generate (B,S B ), and as the public and private key pair of the designated verifier Bob, must also meet B×S B =qI n mod2q. Signcryption step: The user (signer) first uses the Gaussian distribution Select vector y from above and calculate c = H1(Ay mod 2q, μ), where σ represents the Gaussian parameter, μ is the signcrypted message, and H1 is the hash function; randomly select b∈{0,1} and calculate e1 = y+(-1) b S A c, e2 = (-1) b B T c, where B T B transpose of the representative; Randomly select λ∈{0,1} n ,calculate η=H3(λ,θ), from the randomness of η we can get: k1 T =-z1 T B, Where T represents the transpose operation, E κ Represents the encryption algorithm, noise vector Finally, the ciphertext γ = (θ, k1, k2) is output.

5. The data sharing transaction lattice-based signcryption method with strong designated verifier according to claim 1 is characterized in that: The decryption process: After the transaction object (designated verifier) ​​receives the ciphertext γ = (θ, k1, k2), it calculates make For i=1,2L,n, if Then λ i =0, otherwise λ i =1, and then we get the originally selected λ=(λ1,λ2,Lλ n );calculate D κ Represents the decryption algorithm; if e1 and e2 both satisfy Then continue, otherwise stop decrypting the signcryption; calculate If c'=c, accept the plaintext μ; otherwise reject it, where σ represents the Gaussian parameter and μ is the signcrypted message.

6. A data sharing transaction lattice-based signcryption method with strong designated verifier according to claim 1, characterized in that: The network-wide consensus is the completion of data sharing transactions that have been packaged, broadcast, and verified by the shared transaction system to achieve network-wide consistency. The on-chain registration is the recording of data sharing transactions that have passed the network-wide consensus in the distributed ledger.

Images