Identity tracing method and device for ring signature in transaction process

Abstract

The application discloses a kind of identity tracing methods and devices for ring signature in transaction process.The method comprises: constructing the block chain system including multiple block chains and a notary node independent of each block chain;User randomly selects first block chain, and user and key generation center respectively carry out information interaction with notary node to verify identity;User initiates first request for accessing data node in second block chain through first block chain, and first cross-chain agent node audits first request and uses Sign signature algorithm and user private key to perform signature operation on first request when listening to that first request is located at the head of task queue;Second block chain verifies the first request of received first signature using Verify algorithm;Notary node periodically tracks and traces signature operation.The application can track malicious signature on the basis of resisting quantum attack.

Description

Technical Field

[0001] This invention relates to the field of computer encryption technology, and specifically to a method and apparatus for tracing the identity of ring signatures during transactions. Background Technology

[0002] With the development of post-quantum technology, post-quantum cryptography has posed a threat to traditional public-key cryptography. For example, Shor's algorithm can solve integer factorization and discrete logarithm problems in polynomial time, completely breaking most existing public-key cryptosystems such as RSA.

[0003] Meanwhile, traditional digital signature technologies mostly rely on traditional number theory assumptions, making them vulnerable to quantum attacks and gradually revealing their limitations. Ring signatures, as a special type of digital signature technology, offer unconditional anonymity. However, existing lattice-based ring signature technologies suffer from high computational costs, significant communication overhead, and the risk of misuse of anonymity. They cannot trace the actual signer, and their complete anonymity may be misused during transactions. Summary of the Invention

[0004] In view of this, the present invention provides a method and apparatus for tracing the identity of ring signatures during transactions, which can solve the above-mentioned technical problems.

[0005] To solve the above-mentioned technical problems, the present invention is implemented as follows.

[0006] An identity tracing method for ring signatures during transactions includes:

[0007] Step S1: Construct a blockchain system comprising multiple blockchains and a notary node independent of each blockchain; the blockchain includes a cross-chain proxy node and multiple data nodes; the key generation center generates user public-private key pairs based on the public parameters of the blockchain system and the public-private key pairs of the blockchain system;

[0008] Step S2: The user randomly selects the first blockchain in the blockchain system, and the user and the key generation center respectively interact with the notary node to verify their identity;

[0009] Step S3: The user initiates a first request to access a data node in the second blockchain through the first blockchain. The first cross-chain proxy node of the first blockchain registers the first request to the task queue. The first cross-chain proxy node sends an access request corresponding to the first request to the notary node. When the first cross-chain proxy node hears that the first request is at the head of the task queue, it reviews the first request and performs a signature operation on the first request using the Sign signature algorithm and the user's private key. The first request with the first signature is recorded in the notary node.

[0010] The notary node sends an authorization message and authorization signature to the second cross-chain proxy node of the second blockchain, and sends the first request with the first signature to the second blockchain;

[0011] Step S4: The second blockchain uses the Verify algorithm to verify the first request and authorization message with the first signature received; after verification, the second blockchain establishes an information channel between the second blockchain and the user through the key generation center, encrypts the content in the data node based on the user's private key, and sends it to the user;

[0012] Step S5: The notary node periodically tracks and traces the signature operations.

[0013] Preferably, in step S1, the key generation center generates a user public-private key pair based on the public parameters of the blockchain system and the public-private key pair of the blockchain system, including:

[0014] Step S11: The key generation center generates public parameters and public / private key pairs for the blockchain system, including:

[0015] Key generation center randomly generates matrix Select a random key vector Then perform uniform sampling ,in, They represent peacekeeping Polynomial vectors, sets It is a finite set, a set Include[ All integers in ] tuples, sets Include[ All integers in ] tuple, Includes all x is a vector. Let d be an integer ring, and d be a parameter.

[0016] Step S12: The key generation center selects two hash functions. , , for a subset of For model Polynomial ring, for Dimensional Model Polynomial ring;

[0017] Step S13: The key generation center generates public parameters for the blockchain system. Public and private key pairs in blockchain systems The private key of the blockchain system Public key of blockchain system , , for 3D matrix;

[0018] Step S14: The key generation center generates a user public-private key pair based on the public parameters of the blockchain system, the public-private key pair of the blockchain system, and the user's identity.

[0019] Preferably, step S14: The key generation center generates a user public-private key pair based on the public parameters of the blockchain system, the public-private key pair of the blockchain system, and the user's identity, including:

[0020] The key generation center selects a random key vector. And uniformly sample the random key vector. ;calculate ,Will It can be broken down into the following forms: , As the first splitting component, For the scheme parameters, This is the second splitting component;

[0021] Based on user identity calculate Generate user public / private key pairs User private key , User identity The hash value, where i is the index of the user's identity. where i is an integer. Number of ring members; user public key .

[0022] Preferably, in step S3, when the first cross-chain proxy node detects that the first request is at the head of the task queue, it reviews the first request and performs a signature operation on the first request using the Sign signature algorithm and the user's private key, including:

[0023] Step S31: When the first cross-chain proxy node detects that the first request is at the head of the task queue, it reviews the first request; after the review is passed, proceed to step S32.

[0024] Step S32: Calculate the label of the user's public key binding event. , , For the event;

[0025] calculate , , , The first hash value, The message is pending signature. for Dimensional Model Polynomial ring, The first median value, The second intermediate value, For users identity The hash value;

[0026] Trackable tags

[0027] Step S33: In equal When, execute step S331; in equal If any of the above conditions are met, proceed to step S332;

[0028] Step S331: Randomly sample the polynomial mask vector

[0029] calculate

[0030] Polynomial mask vector Scope The set of public keys of the signer users in the ring. It is a polynomial mask vector. Equivalent to the public key of the blockchain system, based on a multinomial mask vector. Sure ,based on Sure ;

[0031] Proceed to step S34;

[0032] Step S332: Random sampling

[0033] calculate ,

[0034] calculate

[0035] The parameters are obtained through random sampling, based on Sure and y, The third intermediate value obtained from the calculation, The value in the signature is generated by hashing the public key of user i. Is with matrix Key vector Related dimensional vector, The fourth intermediate value obtained from the calculation, For traceable tags, The calculated hash value is based on Sure ;

[0036] Proceed to step S34;

[0037] Step S34: Calculation ,like , for coefficient, For hash function challenge set The parameters in the output signature Otherwise, the signature fails, and the signature value is recalculated.

[0038] Preferably, in step S4, the second blockchain uses the Verify algorithm to verify the received first signature and the first request / authorization message, wherein the Verify algorithm includes:

[0039] Step S41: Obtain the first signature The coefficient is used as The first request is in the hash function challenge set The parameters in the middle are used as Partial signature in authorized signature ;

[0040] Step S42: In At that time, calculate ,

[0041] for :

[0042] calculate ,

[0043] calculate

[0044] verify equal Check if the condition is met; if it is met, the verification passes; otherwise, the verification fails.

[0045] Preferably, step S5: the notary node periodically tracks and traces the signature operation, including:

[0046] Step S51: The notary node periodically retrieves the stored first signature and the corresponding traceable tag, and calculates:

[0047] , , ,

[0048] in, The intermediate value obtained from the calculation. This is a pending signature message;

[0049] Step S52: If If so, the result is compliant cross-chain access;

[0050] like If the result is deemed as non-compliant cross-chain access, then the [request name] will be retrieved. A user's public key ,according to The information in the document traces the identity of the signer.

[0051] This invention provides an identity tracing device for ring signatures during transactions, comprising:

[0052] Initialization module: Configured to build a blockchain system including multiple blockchains and a notary node independent of each blockchain; the blockchain includes a cross-chain proxy node and multiple data nodes; the key generation center generates user public and private key pairs based on the public parameters of the blockchain system and the public and private key pairs of the blockchain system;

[0053] Request Initiation Module: Configured for users to randomly select the first blockchain in the blockchain system, and for users and key generation centers to exchange information with notary nodes to verify their identities;

[0054] The signature module is configured so that when a user initiates a first request to access a data node in the second blockchain through the first blockchain, the first cross-chain proxy node of the first blockchain registers the first request to the task queue; the first cross-chain proxy node sends an access request corresponding to the first request to the notary node; when the first cross-chain proxy node hears that the first request is at the head of the task queue, it reviews the first request and performs a signature operation on the first request using the Sign signature algorithm and the user's private key, and records the first request with the first signature in the notary node;

[0055] The notary node sends an authorization message and authorization signature to the second cross-chain proxy node of the second blockchain, and sends the first request with the first signature to the second blockchain;

[0056] Verification module: Configured for the second blockchain to use the Verify algorithm to verify the first request and authorization message with the first signature received; after successful verification, the second blockchain establishes an information channel between the second blockchain and the user through the key generation center, encrypts the content in the data node based on the user's private key, and sends it to the user;

[0057] Source tracing module: Configured for notary nodes to periodically track and trace signature operations.

[0058] The present invention provides a computer-readable storage medium storing a plurality of instructions; the plurality of instructions are used by a processor to load and execute the method as described above.

[0059] The present invention provides an electronic device, characterized in that the electronic device comprises:

[0060] A processor is used to execute multiple instructions;

[0061] Memory, used to store multiple instructions;

[0062] The plurality of instructions are to be stored in the memory and loaded and executed by the processor as described above.

[0063] Beneficial effects: Attached Figure Description

[0064] Figure 1 This is a schematic diagram of the identity tracing method for ring signatures during the transaction process according to the present invention;

[0065] Figure 2 This is an interactive diagram illustrating the identity tracing method for ring signatures during transactions according to the present invention. Detailed Implementation

[0066] The present invention will now be described in detail with reference to the accompanying drawings and embodiments.

[0067] like Figure 1 As shown, this invention proposes a method for tracing the identity of ring signatures during a transaction. The method includes:

[0068] Step S1: Construct a blockchain system that includes multiple blockchains and a notary node independent of each blockchain; the blockchain includes a cross-chain proxy node and multiple data nodes; the Key Generation Center (KGC) generates user public-private key pairs based on the public parameters of the blockchain system and the public-private key pairs of the blockchain system;

[0069] Step S2: The user randomly selects the first blockchain in the blockchain system, and the user and the key generation center respectively interact with the notary node to verify their identity;

[0070] Step S3: The user initiates a first request to access a data node in the second blockchain through the first blockchain. The first cross-chain proxy node of the first blockchain registers the first request to the task queue. The first cross-chain proxy node sends an access request corresponding to the first request to the notary node. When the first cross-chain proxy node hears that the first request is at the head of the task queue, it reviews the first request and performs a signature operation on the first request using the Sign signature algorithm and the user's private key. The first request with the first signature is recorded in the notary node.

[0071] The notary node sends an authorization message and authorization signature to the second cross-chain proxy node of the second blockchain, and sends the first request with the first signature to the second blockchain;

[0072] Step S4: The second blockchain uses the Verify algorithm to verify the first request and authorization message with the first signature received; after verification, the second blockchain establishes an information channel between the second blockchain and the user through the key generation center, encrypts the content in the data node based on the user's private key, and sends it to the user;

[0073] Step S5: The notary node periodically tracks and traces the signature operations.

[0074] In this invention, all algorithms are performed off-chain, while storage operations are mainly performed on-chain. The signing users form a ring.

[0075] Further, in step S1, the Key Generation Center (KGC) generates a user's public-private key pair based on the blockchain system's public parameters and the blockchain system's public-private key pair, including:

[0076] Step S11: The key generation center generates public parameters and public / private key pairs for the blockchain system, including:

[0077] Key generation center randomly generates matrix Select a random key vector Then perform uniform sampling ,in, They represent peacekeeping Polynomial vectors, sets It is a finite set, a set Include[ All integers in ] tuples, sets Include[ All integers in ] tuple, Includes all x is a vector. Let d be an integer ring, and d be a parameter.

[0078] Step S12: The key generation center selects two hash functions. , , for a subset of For model Polynomial ring, for Dimensional Model Polynomial ring;

[0079] Step S13: The key generation center generates public parameters for the blockchain system. public and private key pairs in blockchain systems The private key of the blockchain system Public key of blockchain system , , for 3D matrix;

[0080] Step S14: The key generation center generates a user public-private key pair based on the public parameters of the blockchain system, the public-private key pair of the blockchain system, and the user's identity, including:

[0081] The key generation center selects a random key vector. And uniformly sample the random key vector. ;calculate ,Will It can be broken down into the following forms: , As the first splitting component, For the scheme parameters, This is the second splitting component;

[0082] Based on user identity calculate Generate user public / private key pairs User private key , User identity The hash value, where i is the index of the user's identity. where i is an integer. Number of ring members; user public key .

[0083] In step S3, when the first cross-chain proxy node detects that the first request is at the head of the task queue, it reviews the first request and performs a signature operation on the first request using the Sign signature algorithm and the user's private key, including:

[0084] Step S31: When the first cross-chain proxy node detects that the first request is at the head of the task queue, it reviews the first request; after the review is passed, proceed to step S32.

[0085] Step S32: Calculate the label of the user's public key binding event. , , For the event;

[0086] calculate , , , The first hash value, The message is pending signature. for Dimensional Model Polynomial ring, The first median value, The second intermediate value, For users identity The hash value;

[0087] Trackable tags

[0088] Step S33: In equal When, execute step S331; in equal If any of the above conditions are met, proceed to step S332;

[0089] Step S331: Randomly sample the polynomial mask vector

[0090] calculate

[0091] Polynomial mask vector Scope The set of public keys of the signer users in the ring. It is a polynomial mask vector. Equivalent to the public key of the blockchain system, based on a multinomial mask vector. Sure ,based on Sure ;

[0092] Proceed to step S34;

[0093] Step S332: Random sampling

[0094] calculate ,

[0095] calculate

[0096] The parameters are obtained through random sampling, based on Sure and y, The third intermediate value obtained from the calculation, The value in the signature is generated by hashing the public key of user i. Is with matrix Key vector Related dimensional vector, The fourth intermediate value obtained from the calculation, For traceable tags, The calculated hash value is based on Sure ;

[0097] Proceed to step S34;

[0098] Step S34: Calculation ,like , for coefficient, For hash function challenge set The parameters in the output signature Otherwise, the signature fails, and the signature value is recalculated.

[0099] In step S4, the second blockchain uses the Verify algorithm to verify the received first signature and the first request / authorization message, wherein the Verify algorithm includes:

[0100] Step S41: Obtain the first signature The coefficient as The first request is in the hash function challenge set The parameters in the middle are used as Partial signature in authorized signature ;

[0101] Step S42: In At that time, calculate ,

[0102] for

[0103] calculate ,

[0104] calculate

[0105] verify equal Check if the condition is met; if it is met, the verification passes; otherwise, the verification fails.

[0106] Furthermore, step S5: the notary node periodically tracks and traces the signature operation, including:

[0107] Step S51: The notary node periodically retrieves the stored first signature and the corresponding traceable tag, and calculates:

[0108] , , ,

[0109] The intermediate value obtained from the calculation, This is a pending signature message;

[0110] Step S52: If If so, the result is compliant cross-chain access;

[0111] like If the result is deemed as non-compliant cross-chain access, then the [request name] will be retrieved. A user's public key ,according to The information in the document traces the identity of the signer.

[0112] The present invention also provides an identity tracing device for ring signatures during transactions, the device comprising:

[0113] Initialization module: Configured to build a blockchain system including multiple blockchains and a notary node independent of each blockchain; the blockchain includes a cross-chain proxy node and multiple data nodes; the key generation center generates user public and private key pairs based on the public parameters of the blockchain system and the public and private key pairs of the blockchain system;

[0114] Request Initiation Module: Configured for users to randomly select the first blockchain in the blockchain system, and for users and key generation centers to exchange information with notary nodes to verify their identities;

[0115] The signature module is configured so that when a user initiates a first request to access a data node in the second blockchain through the first blockchain, the first cross-chain proxy node of the first blockchain registers the first request to the task queue; the first cross-chain proxy node sends an access request corresponding to the first request to the notary node; when the first cross-chain proxy node hears that the first request is at the head of the task queue, it reviews the first request and performs a signature operation on the first request using the Sign signature algorithm and the user's private key, and records the first request with the first signature in the notary node;

[0116] The notary node sends an authorization message and authorization signature to the second cross-chain proxy node of the second blockchain, and sends the first request with the first signature to the second blockchain;

[0117] Verification module: Configured for the second blockchain to use the Verify algorithm to verify the first request and authorization message with the first signature received; after successful verification, the second blockchain establishes an information channel between the second blockchain and the user through the key generation center, encrypts the content in the data node based on the user's private key, and sends it to the user;

[0118] Source tracing module: Configured for notary nodes to periodically track and trace signature operations.

[0119] The specific embodiments described above only illustrate the design principles of the present invention. The shapes and names of the components in this description may differ and are not limited. Therefore, those skilled in the art can modify or make equivalent substitutions to the technical solutions described in the foregoing embodiments; and these modifications and substitutions do not depart from the inventive spirit and technical solutions of the present invention, and should all fall within the protection scope of the present invention.

Claims

1. A method for identity tracing based on ring signatures during a transaction, characterized in that, include: Step S1: Construct a blockchain system comprising multiple blockchains and a notary node independent of each blockchain; the blockchain includes a cross-chain proxy node and multiple data nodes; the key generation center generates user public-private key pairs based on the public parameters of the blockchain system and the public-private key pairs of the blockchain system; Step S2: The user randomly selects the first blockchain in the blockchain system, and the user and the key generation center respectively interact with the notary node to verify their identity; Step S3: The user initiates a first request to access a data node in the second blockchain through the first blockchain. The first cross-chain proxy node of the first blockchain registers the first request to the task queue. The first cross-chain proxy node sends an access request corresponding to the first request to the notary node. When the first cross-chain proxy node hears that the first request is at the head of the task queue, it reviews the first request and performs a signature operation on the first request using the Sign signature algorithm and the user's private key. The first request with the first signature is recorded in the notary node. The notary node sends an authorization message and authorization signature to the second cross-chain proxy node of the second blockchain, and sends the first request with the first signature to the second blockchain; Step S4: The second blockchain uses the Verify algorithm to verify the first request and authorization message received with the first signature; After successful verification, the second blockchain establishes an information channel between the second blockchain and the user through the key generation center, encrypts the content in the data node based on the user's private key, and sends it to the user. Step S5: The notary node periodically tracks and traces the signature operations.

2. The method as described in claim 1, characterized in that, In step S1, the key generation center generates a user's public-private key pair based on the public parameters of the blockchain system and the public-private key pair of the blockchain system, including: Step S11: The key generation center generates public parameters and public / private key pairs for the blockchain system, including: Key generation center randomly generates matrix Select a random key vector Then perform uniform sampling ,in, They represent peacekeeping Polynomial vectors, sets It is a finite set, a set Include[ All integers in ] tuples, sets Include[ All integers in ] tuple, Includes all x is a vector. Let d be an integer ring, and d be a parameter. Step S12: The key generation center selects two hash functions. , , for a subset of For model Polynomial ring, for Dimensional Model Polynomial ring; Step S13: The key generation center generates public parameters for the blockchain system. Public and private key pairs in blockchain systems The private key of the blockchain system Public key of blockchain system , , for 3D matrix; Step S14: The key generation center generates a user public-private key pair based on the public parameters of the blockchain system, the public-private key pair of the blockchain system, and the user's identity.

3. The method as described in claim 2, characterized in that, Step S14: The key generation center generates a user public-private key pair based on the public parameters of the blockchain system, the public-private key pair of the blockchain system, and the user's identity, including: The key generation center selects a random key vector. And uniformly sample the random key vector. ;calculate ,Will It can be broken down into the following forms: , As the first splitting component, For the scheme parameters, This is the second splitting component; Based on user identity calculate Generate user public / private key pairs User private key , User identity The hash value, where i is the index of the user's identity. where i is an integer. Number of ring members; user public key .

4. The method as described in claim 3, characterized in that, In step S3, when the first cross-chain proxy node detects that the first request is at the head of the task queue, it reviews the first request and performs a signature operation on the first request using the Sign signature algorithm and the user's private key, including: Step S31: When the first cross-chain proxy node detects that the first request is at the head of the task queue, it reviews the first request; after the review is passed, proceed to step S32. Step S32: Calculate the label of the user's public key binding event. , , For the event; calculate , , , The first hash value, The message is pending signature. for Dimensional Model Polynomial ring, The first median value, The second intermediate value, For users identity The hash value; Trackable tags Step S33: In equal When, execute step S331; in equal If any of the above conditions are met, proceed to step S332; Step S331: Randomly sample the polynomial mask vector calculate Polynomial mask vector Scope The set of public keys of the signer users in the ring. It is a polynomial mask vector. Equivalent to the public key of the blockchain system, based on a multinomial mask vector. Sure ,based on Sure ; Proceed to step S34; Step S332: Random sampling calculate , calculate The parameters are obtained through random sampling, based on Sure and y, The third intermediate value obtained from the calculation, The value in the signature is generated by hashing the public key of user i. Is with matrix Key vector Related dimensional vector, The fourth intermediate value obtained from the calculation, For traceable tags, The calculated hash value is based on Sure ; Proceed to step S34; Step S34: Calculation ,like , for coefficient, For hash function challenge set The parameters in the output signature Otherwise, the signature fails, and the signature value is recalculated.

5. The method as described in claim 4, characterized in that, In step S4, the second blockchain uses the Verify algorithm to verify the received first signature and the first request / authorization message, wherein the Verify algorithm includes: Step S41: Obtain the first signature The coefficient as The first request is in the hash function challenge set The parameters in the middle are used as Partial signature in authorized signature ; Step S42: In At that time, calculate , for : calculate , calculate verify equal Check if the condition is met; if it is met, the verification passes; otherwise, the verification fails.

6. The method according to any one of claims 4-5, characterized in that, Step S5: The notary node periodically tracks and traces the signature operations, including: Step S51: The notary node periodically retrieves the stored first signature and the corresponding traceable tag, and calculates: ， ， ， in, The intermediate value obtained from the calculation, This is a pending signature message; Step S52: If If so, the result is compliant cross-chain access; like If the result is deemed as non-compliant cross-chain access, then the [request name] will be retrieved. A user's public key ,according to The information in the document traces the identity of the signer.

7. An identity tracing device for ring signatures during transactions, characterized in that, include: Initialization module: Configured to build a blockchain system including multiple blockchains and a notary node independent of each blockchain; the blockchain includes a cross-chain proxy node and multiple data nodes; the key generation center generates user public and private key pairs based on the public parameters of the blockchain system and the public and private key pairs of the blockchain system; Request Initiation Module: Configured for users to randomly select the first blockchain in the blockchain system, and for users and key generation centers to exchange information with notary nodes to verify their identities; The signature module is configured so that when a user initiates a first request to access a data node in the second blockchain through the first blockchain, the first cross-chain proxy node of the first blockchain registers the first request to the task queue; the first cross-chain proxy node sends an access request corresponding to the first request to the notary node; when the first cross-chain proxy node hears that the first request is at the head of the task queue, it reviews the first request and performs a signature operation on the first request using the Sign signature algorithm and the user's private key, and records the first request with the first signature in the notary node; The notary node sends an authorization message and authorization signature to the second cross-chain proxy node of the second blockchain, and sends the first request with the first signature to the second blockchain; Verification module: Configured for the second blockchain to use the Verify algorithm to verify the first request and authorization message with the first signature received; After successful verification, the second blockchain establishes an information channel between the second blockchain and the user through the key generation center, encrypts the content in the data node based on the user's private key, and sends it to the user. Source tracing module: Configured for notary nodes to periodically track and trace signature operations.

8. A computer-readable storage medium, characterized in that, The storage medium stores a plurality of instructions; the plurality of instructions are loaded by a processor and executed as described in any one of claims 1-6.

9. An electronic device, characterized in that, The electronic device includes: A processor is used to execute multiple instructions; Memory, used to store multiple instructions; The plurality of instructions are to be stored in the memory and loaded by the processor and executed as described in any one of claims 1-6.

Images