Identity-based controlled revisable signature method and system based on chameleon hash
By adopting a controlled and reproducible signature method based on chameleon hash identity base, the problem of lack of supervision and control over data revision in existing technologies is solved, thereby achieving data security and integrity and ensuring the legality and credibility of data revision.
Patent Information
- Application Number
- CN202511493168.5
- Authority / Receiving Office
- CN · China
- Patent Type
- Applications(China)
- Current Assignee / Owner
- Filing Date
- 2025-10-20
- Publication Date
- 2026-02-27
AI Technical Summary
Existing revisable signature schemes lack effective supervision and control, resulting in a lack of constraints on the data revision process and posing a security risk of malicious revision.
A controlled revisable signature method based on chameleon hashing is adopted. A secure and reliable private key is generated through a key generation center. The data is divided into revisable and unrevisable parts, and a signature is generated using chameleon hashing. The reviser revises the data after verifying the signature's legality, and the verifier verifies the legality of the revised data.
It enables effective supervision of data revision operations, ensuring data security and integrity, while providing flexible data use and preventing malicious revisions.
Smart Images
Figure CN121585347A_ABST
Abstract
Description
Technical Field
[0001] This application belongs to the field of information security, and more specifically, relates to a controlled and reproducible signature method and system based on chameleon hash identity. Background Technology
[0002] In today's energy economy, smart grids are key players in the distributed energy and demand response markets, and their electricity consumption behavior and energy consumption capacity are closely watched. Smart grids provide differentiated services to different user groups, significantly improving the precision and intelligence of energy use. Individual users can access convenient services such as real-time electricity statistics, power outage notifications, online bill inquiries, and fault reporting, enhancing transparency and interactive experience. Commercial users can leverage smart grids to achieve reliable and flexible energy management, optimize their electricity consumption structure, effectively reduce operating costs, and enhance market competitiveness. For utility companies, user consumption patterns and preference data generated by smart grids provide strong support for personalized energy services, driving the transformation of service models from standardization to precision. Furthermore, users can share smart grid energy data with third-party service providers to enjoy value-added services. However, this energy data often contains private information, such as user identification numbers, equipment codes, and installation addresses, and improper use could lead to the risk of user privacy leaks. The present invention aims to build a reliable mechanism that, while protecting the integrity and verifiability of energy data, allows users to choose the information disclosed under controlled conditions when enjoying value-added services, without disclosing other energy privacy information.
[0003] Redactable signatures are a functional digital signature scheme that introduces the role of a "redactor" while preserving the verifiability and integrity of the original signature. The redactor has the ability to delete specific parts of a signed message and derive a new, valid signature from the revised message, all without interaction with the original signer. This type of signature mechanism can flexibly hide sensitive information according to actual application needs, while ensuring that the authenticity and integrity of the unrevised content can still be publicly verified.
[0004] However, current revisable signature schemes suffer from a critical flaw: a lack of effective oversight and control over the data revision process. Under existing mechanisms, once data is signed, revisers can often arbitrarily modify the content without strict constraints. There is a lack of both enforceable control mechanisms and standardized authorization processes. This loose management model provides opportunities for malicious revisions. For example, in electronic payment scenarios, dishonest users might maliciously reduce their electricity bills by deleting parts of the bill. Such unauthorized alterations not only severely compromise the integrity and authenticity of the data but also pose significant security risks to the entire data revision process.
[0005] Therefore, how to effectively supervise and control the data revision process is an urgent problem that needs to be solved. Summary of the Invention
[0006] To address the shortcomings of existing technologies, the purpose of this application is to provide a controlled and reproducible signature method and system based on chameleon hash identity base, which can effectively supervise and control the data revision process and prevent malicious revision.
[0007] To achieve the above objectives, in a first aspect, this application provides a controlled and reproducible signature method based on chameleon hash identity, comprising the following steps: S10, The key generation center uses the identity identifier provided by the original signer. Generate the original signer's private key and the private key The relevant parameters are sent to the original signer, who verifies the validity of their private key; the key generation center then uses the identity provided by the reviser. Generate reviser's private key and the private key Send it to the reviser, who verifies the validity of their private key; S20, the original signer will submit the data to be signed. M Divided into revisable parts and uneditable parts And select a random point from the chameleon hash. and selecting random values Obtain the data signature σ, and then... M The signature σ is sent to the reviser; S30, the reviser verifies whether the signature σ is valid. If valid, the revisable portion is revised, and a revised signature is generated. and the revised data Uneditable parts and signature Send to the verifier; S40: The verifier verifies whether the revised data and signature are valid. If they are valid, the verification passes; otherwise, it fails.
[0008] The identity-based controlled revisable signature method based on chameleon hashing provided in this application has the following effects: First, a private key is generated by a key generation center based on the identity identifier, providing a secure and reliable key for the original signer and reviser. This ensures that only legitimate signers and revisers can participate in the signing and revision process, thereby guaranteeing data security at the source. Simultaneously, the original signer divides the data into revisable and non-revisable parts and generates a signature using the characteristics of chameleon hashing. This process provides flexibility for subsequent data revisions and ensures data integrity through hash value calculation and verification. Subsequently, the reviser, based on verified signature legitimacy, revises the revisable part and generates a new signature. This process not only achieves data revision but also guarantees the validity of the revised data and signature. Finally, the verifier verifies the revised data and signature, further ensuring the data's legitimacy and credibility. Through the synergistic effect of each step, the entire method achieves effective supervision of data revision operations, ensuring data security and integrity while providing possibilities for flexible data use, thus solving the problem of insufficient effective supervision and control of data revision operations in existing technologies.
[0009] As a further preferred embodiment, before step S10, the following steps are included: The key generation center selects system parameters and generates system common parameters, which include the addition cyclic group. G 1. Multiplication Cyclic Group G 2. Bilinear pairing e , prime numbers q Generator P System Master Public Key and and hash function H 1. H 2. H 3; The steps of the common operation of the generation system are as follows: Choose prime numbers and Elliptic curve on Points on an elliptic curve form an addition group. .
[0010] Select group addition cyclic subgroup The order is a prime number The generator is ; Select random value Calculate the system master public key using the system master private key. , ; Choose a bilinear pair ,in It is a multiplicative cyclic group of prime order. .calculate ; Select three hash functions ; System common parameters .
[0011] As a further preferred embodiment, in step S10, the key generation center generates the original signer's private key in the following specific way: selecting a random value. ,calculate Enter the system master private key and the original signer Output the original signer corresponding private key ; The original signer was verified. The validity of the private key is verified by checking if they are equal.
[0012] As a further preferred embodiment, in step S10, the key generation center generates the reviser's private key in the following way: by inputting the system master private key. and the identity of the reviser Output reviser corresponding private key Send to the reviser; The reviser verified The validity of the private key is verified by checking whether the condition is met.
[0013] As a further preferred embodiment, in step S20, the original signer generates the signature σ in the following specific way: selecting a random point from the chameleon hash. Calculate hash value Select random value ,calculate ;calculate , .
[0014] As a further preferred embodiment, in step S30, the step of the reviser verifying whether the signature σ is valid specifically involves: verifying the hash value. and verify If both of the above equations are true, then the expression is valid; otherwise, it is invalid.
[0015] As a further preferred option, in step S30, the revised signature... for: ;in, .
[0016] As a further preferred embodiment, in step S40, the step of the verifier verifying whether the revised data and signature are valid specifically includes: verifying the hash value. And verify If both of the above equations are true, the verification is successful; otherwise, it fails.
[0017] Secondly, this application provides a controlled and revisable signature system based on chameleon hash identity, including a key generation center, an original signer, a reviser, and a verifier; The key generation center is used to determine the identity identifier provided by the original signer. Generate the original signer's private key and the private key It is sent along with relevant parameters to the original signer; it is also used to identify the signer based on the identity provided by the reviser. Generate reviser's private key and the private key Send to the reviser; The original signer verifies the validity of their private key before signing the data. M Divided into revisable parts and uneditable parts And select a random point from the chameleon hash. and selecting random values Obtain the data signature σ, and then... M The signature σ is sent to the reviser; The reviser verifies the validity of signature σ. If valid, the reviser performs a revision operation on the revisable portion and generates a revised signature. and the revised data Uneditable parts and signature Send to the verifier; The verifier is used to verify whether the revised data and signature are valid. If they are valid, the verification passes; otherwise, it fails.
[0018] Thirdly, this application provides a controlled revisable signature method based on chameleon hashing as described in any of the above-mentioned methods, which is applied to the protection of energy data privacy in smart grids.
[0019] It is understood that the beneficial effects of the second and third aspects mentioned above can be found in the relevant descriptions in the first aspect above, and will not be repeated here. Attached Figure Description
[0020] Figure 1This is a flowchart of the controlled revisable signature method based on chameleon hash identity provided in the embodiments of this application; Figure 2 This is a flowchart of the controlled revisable signature method based on chameleon hash identity provided in this embodiment of the application. Detailed Implementation
[0021] To make the objectives, technical solutions, and advantages of this application clearer, the following detailed description is provided in conjunction with the accompanying drawings and embodiments. It should be understood that the specific embodiments described herein are merely illustrative and not intended to limit the scope of this application.
[0022] like Figure 1 As shown, this application provides a controlled revisable signature method based on chameleon hash identity base, which can be applied to energy data privacy protection in smart grids, including steps S10 to S40, detailed below: Step S10, the key generation center uses the identity identifier provided by the original signer. Generate the original signer's private key and the private key The relevant parameters are sent to the original signer, who verifies the validity of their private key; the key generation center then uses the identity provided by the reviser. Generate reviser's private key and the private key It is sent to the reviser, who verifies the validity of its private key.
[0023] In step S10, the key generation center, acting as a trusted third party, generates corresponding private keys based on the identity identifiers provided by the original signer and reviser and sends them to them, while ensuring the validity of the private keys. This process provides a secure and reliable key foundation for subsequent signing and revising operations, ensuring that only legitimate signers and revisers can participate in subsequent processes.
[0024] Step S20, the original signer submits the data to be signed. M Divided into revisable parts and uneditable parts And select a random point from the chameleon hash. and selecting random values Obtain the data signature σ, and then... M The signature σ is sent to the reviser.
[0025] In step S20, the original signer divides the data appropriately, providing flexibility and security for subsequent data revisions. Utilizing the characteristics of chameleon hashing and generating a signature using random values ensures that the signature can both verify data integrity and allow for subsequent revisions by the reviser.
[0026] Step S30: The reviser verifies whether the signature σ is valid. If valid, the revisable part is revised, and a revised signature is generated. and the revised data Uneditable parts and signature Send to the verifier.
[0027] In step S30, the reviser first verifies the validity of the signature, ensuring that revision is only performed if the signature is valid, thus guaranteeing data security. If the signature is valid, the reviser modifies the revisable portion and generates a new signature. This process not only revises the data but also ensures the validity of the revised data and the signature.
[0028] In step S40, the verifier verifies whether the revised data and signature are valid. If they are valid, the verification passes; otherwise, it fails.
[0029] In step S40, the verifier verifies the revised data and signature. This process is a key part of the entire method and ensures that the revised data still has legitimacy and credibility.
[0030] The identity-based controlled revisable signature method based on chameleon hashing provided in this application has the following effects: First, a private key is generated by a key generation center based on the identity identifier, providing a secure and reliable key for the original signer and reviser. This ensures that only legitimate signers and revisers can participate in the signing and revision process, thereby guaranteeing data security at the source. Simultaneously, the original signer divides the data into revisable and non-revisable parts and generates a signature using the characteristics of chameleon hashing. This process provides flexibility for subsequent data revisions and ensures data integrity through hash value calculation and verification. Subsequently, the reviser, based on verified signature legitimacy, revises the revisable part and generates a new signature. This process not only achieves data revision but also guarantees the validity of the revised data and signature. Finally, the verifier verifies the revised data and signature, further ensuring the data's legitimacy and credibility. Through the synergistic effect of each step, the entire method achieves effective supervision of data revision operations, ensuring data security and integrity while providing possibilities for flexible data use, thus solving the problem of insufficient effective supervision and control of data revision operations in existing technologies.
[0031] In one embodiment, the technical solution to achieve the above objective can be as follows: This embodiment provides a key management and data revision scheme to solve the problems of high key extraction costs and lack of effective supervision of data revision operations in the prior art. This scheme can significantly reduce the complexity and computational cost of key management while ensuring that only authorized revisers can perform the operation through a preset permission mechanism.
[0032] In the scheme provided in this embodiment, the public keys of the signer and reviser are their own identity identifiers, and their private keys are generated by a key generation center based on their identity identifiers. The original signer signs the data using their private key and sends it to the reviser. The reviser, according to different needs, deletes data that is allowed to be revised, generates a revised signature, and provides the remaining data and the signature to the signature verifier. This invention can protect privacy information and achieve efficient sharing of non-privacy information through controlled and revisable signatures.
[0033] Specifically, such as Figure 2 As shown in the figure, the identity-based controlled revisable signature method based on chameleon hashing provided in this embodiment includes parameter setting, key extraction, signing, revision, and verification algorithms. A detailed description follows.
[0034] In the following description of this embodiment, It is an additive cyclic group. It is a multiplicative cyclic group, and all its members are prime numbers. , for The generator. We call it. It is a bilinear mapping, and it has three properties: 1. Bilinearity. For any... as well as ,have .
[0035] 2. Computability. For any Both can be computed in polynomial time. .
[0036] 3. Non-degradability. , of which 1 is The unit element in the text.
[0037] In the following description of the invention, This represents a function that maps strings of arbitrary length to cyclic groups. The hash function; the multiplication symbol is omitted, for example: express . Regarding the parameter setting algorithm: In this embodiment, the system parameters are generated by KGC, and the operation is as follows: (1) Selecting prime numbers and Elliptic curve on Points on an elliptic curve form an addition group. ; (2) Selecting a group addition cyclic subgroup The order is a prime number The generator is ; (3) Select random values Calculate the system master public key using the system master private key. , ; (4) Select a bilinear pair ,in It is a multiplicative cyclic group of prime order. .calculate ; (5) Select three hash functions ; (6) Common parameters of the system .
[0038] Regarding the key extraction algorithm: In this embodiment, the private keys of the original signer and reviser are generated by the key generation center KGC. The operation is as follows: (1) Select random values ,calculate Enter the system master private key and the original signer Output the original signer corresponding private key ,Will Send to the original signer; (2) The original signer can be verified The validity of the private key is verified by checking if they are equal. (3) Input the system master private key and the identity of the reviser Output reviser corresponding private key Send to the reviser; (4) The reviser can verify The validity of the private key is verified by checking whether the condition is met.
[0039] Regarding signature algorithms: In this embodiment, the original signer is responsible for generating the signature and sending the data and signature to the reviser, as follows: (1) The original data Divided into and Two parts, of which Privacy data that can be deleted by the reviser. It is non-privacy data that the reviser cannot delete; (2) Select a random point from the chameleon hash. ; (3) Calculate the hash value ; (4) Select random values ,calculate ; (5) Calculation ; (6) Send to the reviser.
[0040] Regarding the revision algorithm: In this embodiment, the reviser deletes data without interacting with the original signer and generates a valid signature for the revised data. The reviser can only delete specific data. The operation is as follows: (1) Verify hash value ; (2) Verify signature ; (3) Calculation ; (4) Send to the signature verifier.
[0041] Regarding the verification algorithm: In this embodiment, the signature verifier runs the verification algorithm. The operation is as follows: (1) Verify the equation Is it valid? (2) Verify the equation Is it valid? (3) If the above two equations are true, the verification is successful; otherwise, it is unsuccessful.
[0042] This embodiment has the following advantages compared with the prior art: 1) In terms of security, this invention is based on the computational difficulty of the elliptic curve discrete logarithm problem. Even if a cryptographic adversary knows the system's public key and a valid signature-message pair, it is computationally impossible for them to forge a valid signature on any other message.
[0043] 2) In existing technologies, most identity-based revisable signature schemes lack constraints on revision permissions. Any entity holding the signature data can perform revision operations, posing a security risk of broad access control. Therefore, this invention achieves precise control over revision permissions, ensuring that only authorized designated revisers can revise specific data.
[0044] 3) Existing schemes combining chameleon hashing and revocable signatures rely on certificate authorities for public key management, resulting in significant communication and management overhead. In contrast, this invention proposes an identity-based chameleon hash revocable signature scheme, where user public keys can be directly derived from their identity information, thereby eliminating the need for certificate management and effectively reducing system overhead and communication costs.
[0045] 4) In terms of transparency, this scheme features the transparency of revisable signatures. This means that for any external verifier, the revised signature is computationally indistinguishable from the original signature.
[0046] The following is a specific implementation example of this application: For this specific embodiment, a key generation center is required as a trusted third party, and the original signer will... The public key used for signing is sent to the key generation center, which then... Generate private key ,Will Send to the original signer, who then verifies. Whether it is legal or not; if not, the original signatory will not accept it. The reviser will... As a public key, it is sent to the key generation center, which then... Generate private key And send it to the reviser, who then verifies it. Whether it is legal or not, if not, the revisers will not accept it.
[0047] During the signing and revision phase: The original signer signs a piece of data by first storing the data... Divided into and Two parts, of which Sensitive data that can be deleted by the reviser. This is non-sensitive data that the reviser cannot delete; select random points. and random values ,calculate , , The data signature is: The original signer will Send to the reviser. The reviser verifies. Whether it is legal or not, if not, the revisers will not accept it.
[0048] The reviser makes revisions based on the intended use of the data. For example, in a smart grid, when a user needs to present energy data to enjoy value-added services provided by a third-party service provider, private data such as the user's device code and installation address can be deleted. The reviser calculates... The signature of the revised data is: The signature verifier receives the revised data and verifies it; if it is invalid, the signature verifier does not accept it.
[0049] Based on the same inventive concept, this application also provides a digital signature generation system based on chameleon hash, comprising four entities: a key generation center, the original signer, the reviser, and the signature verifier.
[0050] The key generation center is used to determine the identity provided by the original signer. Generate the original signer's private key and the private key It is sent along with relevant parameters to the original signer; it is also used to identify the signer based on the identity provided by the reviser. Generate reviser's private key and the private key Send to the reviser.
[0051] The original signer uses it to verify the validity of their private key, and then signs the data to be signed. M Divided into revisable parts and uneditable parts And by selecting a random point for the chameleon hash at the key generation center. and selecting random values Obtain the data signature σ, and then... M The signature σ is sent to the reviser.
[0052] The reviser verifies the validity of signature σ. If valid, the reviser modifies the revisable parts and generates the revised signature. and the revised data Uneditable parts and signature Send to the verifier.
[0053] The verifier is used to verify whether the revised data and signature are valid. If they are valid, the verification passes; otherwise, it fails.
[0054] The method and system provided in this application are applicable to reproducible signatures based on chameleon hashes that are protected against malicious modification. They employ an identity-based key generation mechanism and allow authorized revisers to securely delete messages and signatures within specific permissions without relying on the data holder.
[0055] Those skilled in the art will readily understand that the above description is merely a preferred embodiment of this application and is not intended to limit this application. Any modifications, equivalent substitutions, and improvements made within the spirit and principles of this application should be included within the protection scope of this application.
Claims
1. A controlled, reproducible signature method based on chameleon hash identity base, characterized in that, Includes the following steps: S10, The key generation center uses the identity identifier provided by the original signer. Generate the original signer's private key and the private key The relevant parameters are sent to the original signer, who verifies the validity of the private key. The key generation center uses the identity identifier provided by the reviser. Generate reviser's private key and the private key Send it to the reviser, who verifies the validity of their private key; S20, the original signer will submit the data to be signed. M Divided into revisable parts and uneditable parts And select a random point from the chameleon hash. and selecting random values Obtain the data signature σ, and then... M The signature σ is sent to the reviser; S30, the reviser verifies whether the signature σ is valid. If valid, the revisable portion is revised, and a revised signature is generated. and the revised data Uneditable parts and signature Send to the verifier; S40: The verifier verifies whether the revised data and signature are valid. If they are valid, the verification passes; otherwise, it fails.
2. The controlled revisable signature method based on chameleon hash identity base as described in claim 1, characterized in that, Before step S10, the following steps are included: The key generation center selects system parameters and generates system common parameters, which include the addition cyclic group. G 1. Multiplication Cyclic Group G 2. Bilinear pairing e , prime numbers q Generator P System Master Public Key and and hash function H 1. H 2. H 3; The steps of the common operation of the generation system are as follows: Choose prime numbers and Elliptic curve on Points on an elliptic curve form an addition group. ; Select group addition cyclic subgroup The order is a prime number The generator is ; Select random value Calculate the system master public key using the system master private key. , ; Choose a bilinear pair ,in It is a multiplicative cyclic group of prime order. ,calculate ; Select three hash functions ; System common parameters .
3. The controlled revisable signature method based on chameleon hash identity base as described in claim 1, characterized in that, In step S10, the key generation center generates the original signer's private key in the following way: selecting a random value. ,calculate Enter the system master private key and the original signer Output the original signer corresponding private key ; The original signer was verified. The validity of the private key is verified by checking if they are equal.
4. The controlled revisable signature method based on chameleon hash identity base as described in claim 1, characterized in that, In step S10, the key generation center generates the reviser's private key in the following way: by inputting the system master private key. and the identity of the reviser Output reviser corresponding private key Send to the reviser; The reviser verified The validity of the private key is verified by checking whether the condition is met.
5. The controlled revisable signature method based on chameleon hash identity base as described in claim 1, characterized in that, In step S20, the original signer generates the signature σ by selecting a random point from the chameleon hash. Calculate hash value ; Select random value ,calculate ;calculate , .
6. The controlled revisable signature method based on chameleon hash identity as described in claim 5, characterized in that, In step S30, the step of the reviser verifying whether the signature σ is valid specifically involves: verifying the hash value. and verify If both of the above equations are true, then the expression is valid; otherwise, it is invalid.
7. The controlled revisable signature method based on chameleon hash identity base as described in claim 1, characterized in that, In step S30, the revised signature for: ;in, .
8. The controlled revisable signature method based on chameleon hash identity base as described in claim 5, characterized in that, In step S40, the step of the verifier verifying whether the revised data and signature are valid specifically involves: verifying the hash value. And verify If both of the above equations are true, the verification is successful; otherwise, it fails.
9. A controlled and revocable signature system based on chameleon hash identity, characterized in that, This includes the key generation center, the original signer, the reviser, and the verifier; The key generation center is used to determine the identity identifier provided by the original signer. Generate the original signer's private key and the private key It is sent along with relevant parameters to the original signer; it is also used to identify the signer based on the identity provided by the reviser. Generate reviser's private key and the private key Send to the reviser; The original signer verifies the validity of their private key before signing the data. M Divided into revisable parts and uneditable parts And select a random point from the chameleon hash. and selecting random values Obtain the data signature σ, and then... M The signature σ is sent to the reviser; The reviser verifies the validity of signature σ. If valid, the reviser performs a revision operation on the revisable portion and generates a revised signature. and the revised data Uneditable parts and signature Send to the verifier; The verifier is used to verify whether the revised data and signature are valid. If they are valid, the verification passes; otherwise, it fails.
10. An application of the controlled revisable signature method based on chameleon hashing as described in any one of claims 1 to 8, characterized in that, Energy data privacy protection applied in smart grids.