Distributed multi-layer aggregation signature method based on identity

Abstract

The invention provides an identity-based distributed multi-layer aggregation signature method, which is applied to a system comprising a main node and a plurality of sub-nodes, and comprises the following steps: any sub-node sends a first key generation request to the main node, and the first key generation request comprises identity information of the sub-nodes; the main node responds to the first secret key generation request and carries out secret key extraction based on the identity information of the child nodes so as to obtain a first private key-public key pair based on the identity information of the child nodes and send the first private key-public key pair to the corresponding child nodes; the child node aggregates and signs the message based on the first private key-public key pair. In addition, any sub-node can respond to the key generation request of the corresponding secondary sub-node according to the process based on the private key-public key pair of the sub-node. According to the method, the expandability of a key distribution strategy is ensured by using an identity-based public key system, and the calculation and communication burden of large-scale signature and verification is reduced by means of an aggregation signature technology.

Description

TECHNICAL FIELD

[0001] The present application relates to the field of cryptography and data security technology, and in particular to an identity-based distributed multi-layer aggregation signature method. BACKGROUND

[0002] Digital signature is a security technology that emerged with the development of information network technology, and its purpose is to realize the function of traditional handwritten signature through technical means, and to identify the identity of the signer and ensure the integrity, legality and authenticity of the data content. Traditional digital signature technology usually uses a centralized certificate authority to issue digital certificates to prove the authenticity and validity of the public key. Such technology often requires large-scale centralized key management and storage, and the communication burden and storage burden quickly increase with the number of users. With the widespread use of distributed network architectures such as the Internet of Things and blockchain and the tremendous growth of Internet users, the above-mentioned technology cannot adapt to the increasingly severe scalability requirements, and there is an urgent need for a distributed, highly scalable and efficient digital signature technology to meet the information security needs of users.

[0003] In the face of this problem, related technologies have conducted research from the aspects of scalability and efficiency. In terms of scalability, identity-based digital signature technology allows users to use their own identity information (such as email addresses, phone numbers, hardware serial numbers, etc.) to generate digital signatures without using traditional public key infrastructure, which has higher flexibility and scalability. In terms of computational efficiency, aggregation signature technology allows multiple signatures to be combined into one signature, thereby improving signature and verification efficiency, which is particularly useful for application scenarios that require frequent and large-scale signature and verification.

[0004] However, traditional digital signature technology relies on centralized key management facilities and certificate authorities, and in large-scale distributed scenarios, it has the problems of poor scalability, high computational and communication burden. Although identity-based public key signature system technology can solve the scalability problem and does not require the maintenance of centralized third-party facilities, it has the problem of high computational and communication burden. At the same time, using a small number of nodes for identity-based key distribution strategy can result in high communication burden for some nodes, limiting the scalability of the method in the case of large-scale user participation. Although aggregation signature technology can solve the problem of computational and communication burden in the signature generation and verification process, it is subject to centralized strategies and has the problem of poor scalability. SUMMARY

[0005] The present application aims to overcome the shortcomings of the prior art and provide an identity-based distributed multi-layer aggregation signature method.

[0006] In order to achieve the above-mentioned purpose, the present application adopts the following technical solutions.

[0007] In a first aspect, the present application provides a method for identity-based distributed multi-layer aggregate signature, applied to a system comprising a master node and a plurality of child nodes, the method comprising:

[0008] Any child node sends a first key generation request to the master node, the first key generation request comprising identity information of the child node;

[0009] The master node responds to the first key generation request and performs key extraction based on the identity information of the child node to obtain a first private-public key pair based on the identity information of the child node and sends it to the corresponding child node;

[0010] The child node performs aggregate signature on a message based on the first private-public key pair.

[0011] In some embodiments of the present application, the child nodes comprise primary nodes and secondary nodes, the primary nodes being the parent nodes of the secondary nodes;

[0012] The master node sends the first private-public key pair to the corresponding child node, comprising:

[0013] The master node sends the first private-public key pair to the corresponding primary node;

[0014] After the master node sends the first private-public key pair to the corresponding child node, the method further comprises:

[0015] Any secondary node sends a second key generation request to the primary node, the second key generation request comprising identity information of the secondary node;

[0016] The primary node responds to the second key generation request and performs key extraction based on the identity information of the secondary node and the first private-public key pair to obtain a second private-public key pair and sends it to the corresponding secondary node.

[0017] In some embodiments of the present application, after the secondary node obtains the second private-public key pair, the method further comprises:

[0018] The secondary node performs aggregate signature on a message based on the second private-public key pair.

[0019] In some embodiments of the present application, the child node is a primary node, and the child node performs aggregate signature on a message based on the first private-public key pair, comprising:

[0020] The primary node randomly selects a random number from a q-order integer field ;

[0021] Performs aggregate signature on a message according to the random number and the first private-public key pair performing signature to obtain an initial signature :

[0022]

[0023]

[0024]

[0025]

[0026] wherein, is a generator;

[0027] obtaining an aggregated signature based on the initial signature messages corresponding to the n messages :

[0028]

[0029]

[0030] .

[0031] In some embodiments of the present application, after the child node aggregates and signs the message based on the first private-public key pair, the method further comprises:

[0032] Any verification node verifies the aggregated signature based on the message and using a signature verification algorithm to obtain a verification result; wherein the verification node is any node in the master node and the plurality of child nodes.

[0033] In some embodiments of the present application, before any child node sends a first key generation request to the master node, the method further comprises:

[0034] selecting one node from all participating nodes in the system as a master node;

[0035] The master node performs system initialization based on a bilinear mapping algorithm to obtain system parameters, and publishes the system parameters as public information to all participating nodes;

[0036] The master node generates a third private-public key pair based on the system parameters by executing a key generation algorithm.

[0037] In a second aspect, the present application also provides an identity-based distributed multi-layer aggregated signature device, applied to a system including a master node and a plurality of child nodes, the device comprising:

[0038] The request generation module is configured to send a first key generation request to the master node by any child node, and the first key generation request includes the identity information of the child node.

[0039] The key extraction module is configured to, in response to a first key generation request, perform key extraction based on identity information of the sub-node to obtain a first private key-public key pair based on the identity information of the sub-node and send the first private key-public key pair to the corresponding sub-node;

[0040] The aggregated signature module is configured to perform aggregated signature on the message based on the first private key-public key pair by the sub-node.

[0041] In a third aspect, the present application further provides an electronic device, comprising a memory, a processor, and a computer program stored in the memory and executable on the processor, and the processor implements the method as described above when executing the program.

[0042] In a fourth aspect, the present application further provides a computer readable storage medium, which stores a computer program, and the computer program is executable on a processor to implement the method as described above.

[0043] In a fifth aspect, the present application further provides a computer program product, comprising a computer program, and the computer program is executable on a processor to implement the method as described above.

[0044] The present application has the following beneficial effects: the identity-based distributed multi-layer aggregated signature method provided by the present application can reduce the calculation and communication burden of large-scale signature and verification by means of aggregated signature technology while guaranteeing the scalability of the key distribution strategy based on the identity-based public key system. The multi-layer key distribution strategy proposed by the present application supports multi-level key management, that is, after the primary node distributes the key to the first-level node, the first-level node can distribute the key to the second-level node, and the communication burden between the second-level node and the first-level node is eliminated by assigning the key calculation and distribution authority to the secondary node. The strategy can further reduce the centralization degree of the key management architecture and improve the scalability on the basis of the identity-based public key system. In addition, any sub-node can respond to the key generation request of the corresponding secondary sub-node based on the private key-public key pair of the sub-node according to the above process.

[0045] Additional aspects and advantages of the present application will be given in part in the following description, and will become apparent from the following description, or will be learned by practice of the present application. BRIEF DESCRIPTION OF DRAWINGS

[0046] In order to more clearly illustrate the technical solutions of the embodiments of the present application, the following will briefly introduce the drawings needed to be used in the embodiment description. Obviously, the drawings in the following description are only some embodiments of the present application, and other drawings can also be obtained by those skilled in the art without any creative effort on the basis of these drawings.

[0047] Figure 1 One of the flowcharts of the identity-based distributed multi-layer aggregated signature method provided by the embodiments of the present application;

[0048] Figure 2 Figure 2 is a flowchart of a second embodiment of an identity-based distributed multi-layer aggregation signature method according to the present application. DETAILED DESCRIPTION

[0049] Embodiments of the present application will be described in detail below with reference to the drawings, in which like reference numerals refer to like elements or elements having the same function throughout the several embodiments. The embodiments described below are merely exemplary for the purpose of explanation and are not to be construed as limiting the present application.

[0050] Those skilled in the art can understand that, unless specifically stated otherwise, the singular forms "a," "an," and "the" as used herein are intended to include plural forms as well. It will be further understood that the terms "includes" and / or "including," when used in the specification, specify the presence of a stated feature, integer, step, operation, element, and / or component, but do not preclude the presence or addition of one or more other features, integers, steps, operations, elements, components, and / or groups thereof. It will be understood that when an element is referred to as being "connected" or "coupled" to another element, it can be directly connected or coupled to the other element or intervening elements can be present. In addition, the use of "connection" or "coupling" herein also includes wireless connection or coupling. As used herein, the term "and / or" includes any and all combinations of one or more of the associated listed items.

[0051] Those skilled in the art can understand that, unless otherwise defined, all terms (including technical and scientific terms) used herein have the same meaning as commonly understood by one of ordinary skill in the art to which this application belongs. It will be further understood that terms, such as those defined in commonly used dictionaries, should be interpreted as having a meaning that is consistent with their meaning in the context of the relevant art and will not be interpreted in an idealized or overly formal sense unless expressly so defined herein.

[0052] For the purpose of facilitating the understanding of the embodiments of the present application, further explanation will be made below with reference to the accompanying drawings in conjunction with several specific embodiments, and each embodiment does not constitute a limitation on the embodiments of the present application.

[0053] Embodiment 1

[0054] As shown in FIG. 1, an identity-based distributed multi-layer aggregation signature method is applied to a system including a master node and a plurality of sub-nodes, and includes the following steps: Figure 1 Figure 2 As shown in FIG. 1, an identity-based distributed multi-layer aggregation signature method is applied to a system including a master node and a plurality of sub-nodes, and includes the following steps:

[0055] S101, any sub-node sends a first key generation request to the master node, and the first key generation request includes identity information of the sub-node. ​

[0056] S102, the master node responds to the first key generation request and performs key extraction based on the identity information of the child node to obtain a first private-public key pair based on the identity information of the child node and sends to the corresponding child node.

[0057] S103, the child node performs aggregated signature on the message based on the first private-public key pair.

[0058] In some embodiments of the present application, the child nodes include primary nodes and secondary nodes, and the primary nodes are the parent nodes of the secondary nodes.

[0059] The master node sends the first private-public key pair to the corresponding child node, including:

[0060] The master node sends the first private-public key pair to the corresponding primary node.

[0061] After the master node sends the first private-public key pair to the corresponding child node, the method further includes:

[0062] Any secondary node sends a second key generation request to the primary node, and the second key generation request includes the identity information of the secondary node .

[0063] The primary node responds to the second key generation request and performs key extraction based on the identity information of the secondary node and the first private-public key pair to obtain a second private-public key pair and sends to the corresponding secondary node.

[0064] Illustratively, after the primary node receives the second key generation request containing the identity information of the secondary node , it performs an identity-based key extraction algorithm to obtain a second private-public key pair . Specifically, the primary node calculates and , where is the private key in the first private-public key pair . Then, the primary node sends the second private-public key pair to the applicant secondary node through a secure channel.

[0065] It can be understood that the child nodes can also include tertiary nodes, quaternary nodes, etc., and the secondary nodes are the parent nodes of the tertiary nodes, and the tertiary nodes are the parent nodes of the quaternary nodes, and so on. The dependent nodes obtain the corresponding private-public key pair from the parent node in the manner of obtaining the identity information-based private-public key pair from the primary node through the secondary node, and this is not limited.

[0066] In some embodiments of the present application, the child node is a first-level node, and any first-level node sends a first key generation request to the master node, the first key generation request comprising identity information of the first-level node .

[0067] After the master node receives the first key generation request, it performs an identity-based key extraction algorithm to obtain a first private-public key pair . Illustratively, the master node calculates and wherein is the private key in the third private-public key pair . Then the master node sends the first private-public key pair to the first-level node that submitted the application via a secure channel.

[0068] The child node performs an aggregate signature on a message based on the first private-public key pair and using a signature algorithm , comprising:

[0069] The first-level node randomly selects a random number from a q-order integer field and keeps it secret.

[0070] According to the random number and the first private-public key , the message is signed to obtain an initial signature :

[0071]

[0072]

[0073]

[0074]

[0075] wherein is a generator in the system parameter.

[0076] Based on the initial signature messages corresponding to the n messages, an aggregate signature is obtained:

[0077]

[0078]

[0079] .

[0080] In some embodiments of this application, after the secondary node obtains the second private-public key pair, the method further includes:

[0081] Second-level nodes are based on a second private-public key pair. Using signature algorithms Regarding the message Perform aggregate signature. The principle of aggregate signature here is the same as that of aggregate signature in the first-level node mentioned above, and will not be repeated here.

[0082] In some embodiments of this application, after the child node performs aggregate signing on the message based on the first private key-public key pair, the method further includes:

[0083] Each verification node verifies the aggregated signature based on the message and using a signature verification algorithm to obtain a verification result; wherein, the verification node is any one of the main node and multiple child nodes.

[0084] To illustrate, any verification node obtains the message content. and aggregate signature As input, execute the signature verification algorithm. Specifically, first calculate Then verify the equation. Check if the signature is valid. If it is valid, the signature is valid and the verification is successful.

[0085] Understandably, the signature verification process from a first-level node to a second-level node follows the same principle. Illustratively, any first-level node can obtain the message content. and aggregate signature As input, first calculate Then verify the equation. Check if the signature is valid. If it is valid, the signature is valid and the verification is successful.

[0086] In some embodiments of this application, before any child node sends a first key generation request to the master node, the method further includes:

[0087] Select one node from all participating nodes in the system as the master node.

[0088] The master node initializes the system based on the bilinear mapping algorithm to obtain system parameters, and then publishes these parameters as public information to all participating nodes.

[0089] In some examples, the primary node is set to two prime numbers of the same order. group and ,in It is an additive group. It is a multiplication group. (Select) arbitrary generators , a bilinear mapping is selected . Then, two anti-collision hash functions and are selected, where is a finite field of order. Based on the foregoing, system parameters are obtained and published as public information to all participating nodes.

[0090] The master node performs a key generation algorithm based on the system parameters, generating a third private-public key pair .

[0091] In some examples, the master node selects as the private key based on the system parameters, and calculates as the public key, where is a multiplication mapping operation on an elliptic curve.

[0092] The identity-based distributed multi-layer aggregation signature method provided by the embodiments is constructed based on a bilinear mapping method of an elliptic curve group and a hash function that meets a security standard, based on the difficulty of solving a computational Diffie-Hellman problem (CDHP) to ensure the security of the signature method, and further ensure the non-forgery and message integrity of the signature. In addition, the present application constructs an identity-based multi-layer aggregation signature verification method, so that after the key distribution node distributes the key pair for the primary node, the primary node can continue to construct and distribute the key pair for the secondary node, and the information signature of the secondary node key pair construction supports verification using the private key of the primary node or the key distribution node, thereby realizing distributed key distribution. At the same time, the signatures of all messages of the same primary node can be combined into an aggregation signature, and the correctness of the signatures of all messages of the layer and the authenticity of the information can be confirmed by executing a verification algorithm only once, thereby reducing the computational burden.

[0093] Embodiment 2

[0094] On the basis of embodiment 1, the present embodiment 2 provides an identity-based distributed multi-layer aggregation signature device applied to a system including a master node and a plurality of sub-nodes, corresponding to the identity-based distributed multi-layer aggregation signature method described above, and specifically comprising:

[0095] A request generation module configured to send a first key generation request including identity information of the sub-node to the master node by any sub-node;

[0096] The key extraction module is configured to, in response to the first key generation request, perform key extraction based on the identity information of the sub-node to obtain a first private key-public key pair based on the identity information of the sub-node and send the first private key-public key pair to the corresponding sub-node;

[0097] The aggregated signature module is configured to perform aggregated signature on the message based on the first private key-public key pair by the sub-node.

[0098] For specific details, refer to the description of the identity-based distributed multi-layer aggregated signature method part, which will not be repeated here.

[0099] Embodiment 3

[0100] Embodiment 3 of the present application provides an electronic device comprising a memory and a processor, the processor and the memory being in communication with each other, the memory storing program instructions executable by the processor, and the processor invoking the program instructions to perform an identity-based distributed multi-layer aggregated signature method, the method comprising the following flow steps:

[0101] Any sub-node sends a first key generation request to the master node, the first key generation request comprising identity information of the sub-node;

[0102] The master node responds to the first key generation request and performs key extraction based on the identity information of the sub-node to obtain a first private key-public key pair based on the identity information of the sub-node and sends the first private key-public key pair to the corresponding sub-node;

[0103] The sub-node performs aggregated signature on the message based on the first private key-public key pair.

[0104] Embodiment 4

[0105] Embodiment 4 of the present application provides a computer readable storage medium storing a computer program, the computer program being executed by a processor to implement an identity-based distributed multi-layer aggregated signature method, the method comprising the following flow steps:

[0106] Any sub-node sends a first key generation request to the master node, the first key generation request comprising identity information of the sub-node;

[0107] The master node responds to the first key generation request and performs key extraction based on the identity information of the sub-node to obtain a first private key-public key pair based on the identity information of the sub-node and sends the first private key-public key pair to the corresponding sub-node;

[0108] The sub-node performs aggregated signature on the message based on the first private key-public key pair.

[0109] Embodiment 5

[0110] Embodiment 5 of the present application provides a computer program product comprising a computer program which, when executed by a processor, implements an identity-based distributed multi-layer aggregation signature method, the method comprising the following flow steps:

[0111] Any child node sends a first key generation request to the master node, the first key generation request comprising identity information of the child node;

[0112] The master node responds to the first key generation request and performs key extraction based on the identity information of the child node to obtain a first private-public key pair based on the identity information of the child node and sends it to the corresponding child node;

[0113] The child node performs aggregation signature on the message based on the first private-public key pair.

[0114] Those skilled in the art can understand that the drawings are only schematic diagrams of an embodiment, and the modules or flows in the drawings are not necessarily necessary for implementing the present application.

[0115] Each embodiment in the specification is described in a progressive manner, and the same or similar parts between each embodiment can be referred to each other, and each embodiment mainly describes the difference from other embodiments. In particular, for the method or system embodiment, since it is basically similar to the method embodiment, it is described more simply, and the related parts can be referred to the part of the method embodiment. The above described method and system embodiments are only schematic, and the units described as separate components can be or can not be physically separated, and the components displayed as units can be or can not be physical units, that is, they can be located in one place, or can be distributed to multiple network units. According to the actual needs, part or all of the modules can be selected to achieve the purpose of the embodiment. Those skilled in the art can understand and implement without creative labor.

[0116] The above is only a preferred specific embodiment of the present application, but the protection scope of the present application is not limited to this. Any skilled person in the art can easily think of changes or replacements within the technical range disclosed by the present application, which should be covered in the protection scope of the present application. Therefore, the protection scope of the present application should be subject to the protection scope of the claims.

Claims

1. An identity-based distributed multi-layer aggregate signature method, characterized in that, Applied to a system comprising a master node and multiple child nodes, the method includes: Any of the child nodes sends a first key generation request to the master node, the first key generation request including the identity information of the child node; The master node responds to the first key generation request and extracts the key based on the identity information of the child node to obtain a first private key-public key pair based on the identity information of the child node and sends it to the corresponding child node. The child node performs aggregated signatures on the messages based on the first private key-public key pair.

2. The method according to claim 1, characterized in that, The child nodes include first-level nodes and second-level nodes, and the first-level nodes are the parent nodes of the second-level nodes; The master node sends the first private key-public key pair to the corresponding child nodes, including: The master node sends the first private key-public key pair to the corresponding first-level node; After the master node sends the first private-public key pair to the corresponding child node, the method further includes: Any of the secondary nodes sends a second key generation request to the primary node, the second key generation request including the identity information of the secondary node; In response to the second key generation request, the first-level node extracts a key based on the identity information of the second-level node and the first private-public key pair to obtain the second private-public key pair and sends it to the corresponding second-level node.

3. The method according to claim 2, characterized in that, After the secondary node obtains the second private-public key pair, the method further includes: The secondary node performs aggregated signing on messages based on the second private key-public key pair.

4. The method according to claim 1, characterized in that, The child node is a first-level node, and the child node performs aggregated signing of messages based on the first private key-public key pair, including: The first-level node is from the q-order integer field. Randomly select a number ; According to the random number and the first private key-public key Regarding the message Perform a signature to obtain an initial signature. : ； ； ； ； In the formula, It is a generator; The aggregate signature is obtained based on the initial signature messages corresponding to n messages. : ； ； 。 5. The method according to any one of claims 1 to 4, characterized in that, After the child node performs aggregate signing on the message based on the first private key-public key pair, the method further includes: Each verification node verifies the aggregated signature based on the message and using a signature verification algorithm to obtain a verification result; wherein, the verification node is any one of the main node and multiple child nodes.

6. The method according to any one of claims 1 to 4, characterized in that, Before any of the child nodes sends a first key generation request to the master node, the method further includes: Select one node from all participating nodes in the system as the master node; The master node performs system initialization based on the bilinear mapping algorithm to obtain system parameters, and publishes the system parameters as public information to all participating nodes. The master node executes a key generation algorithm based on the system parameters to generate a third private-public key pair.

7. An identity-based distributed multi-layer aggregate signature device, characterized in that, The apparatus is applicable to a system comprising a master node and multiple child nodes, and includes: The request generation module is used to send a first key generation request from any of the child nodes to the master node, wherein the first key generation request includes the identity information of the child node. A key extraction module is used by the master node to respond to the first key generation request and extract a key based on the identity information of the child node, so as to obtain a first private key-public key pair based on the identity information of the child node and send it to the corresponding child node. The aggregate signature module is used by the child node to perform aggregate signatures on messages based on the first private key-public key pair.

8. An electronic device comprising a memory, a processor, and a computer program stored in the memory and executable on the processor, characterized in that, When the processor executes the program, it implements the identity-based distributed multi-layer aggregate signature method as described in any one of claims 1-6.

9. A computer-readable storage medium, characterized in that, It stores a computer program that, when executed by a processor, implements the identity-based distributed multi-layer aggregate signature method as described in any one of claims 1-6.

10. A computer program product, comprising a computer program, characterized in that, When the computer program is executed by a processor, it implements the identity-based distributed multi-layer aggregate signature method as described in any one of claims 1-6.

Images