47 results about "Blind signature" patented technology

The invention provides an anonymous Internet of Things identity authentication method and device based on an anti-quantum computing password. A key generation device sends a public key to a message sending end and a message receiving end, and sends a private key to an authentication server; the authentication server generates a blind parameter based on the private key, and sends the blind parameter to the message sending end; the message sending end performs blind operation based on the blind parameter, the public key and the to-be-transmitted message to obtain a blind message, and sends the blind message to the authentication server; the authentication server performs post-quantum signature on the blind message based on the private key to obtain a to-be-solved blind signature, and sends the to-be-solved blind signature to the message sending end; the message sending end carries out blind resolution operation on the to-be-resolved blind signature to obtain a target signature; the message sending end sends the to-be-transmitted message and the target signature to a message receiving end; and the message receiving end performs post-quantum verification on the target signature based on the public key, and if verification succeeds, processing is performed based on the to-be-transmitted message. Through the scheme of the invention, the user data security can be improved.

An information processing apparatus includes a secure area configured to execute a program in secret, and a security chip. The secure area conceals information related to the program, and requests the security chip to provide a blind signature with respect to the concealed information obtained by the concealing. The security chip calculates the blind signature and returns the blind signature to the secure area. The secure area acquires a signature with respect to the information related to the program from the blind signature.

A device according to one aspect generates a prior signature with a non-interactive blind signature and comprises: a first key generation unit that generates a public key PKS which includes a public key pks and a random number y of a prescribed digital signature and a secret key SKS which includes the public key PKS and a secret key sks of the digital signature; and a prior signature generation unit that uses the secret key sks which is included in the secret key SKS, the public key PKR of a device which generates a signature from the prior signature, and a nonce value to generate a prior signature psig by the digital signature using the public key PKR and the nonce value as a message.

The application belongs to the technical field of block chain, and discloses a DPOS consensus algorithm method and system based on a reputation value and a strong blind signature algorithm, which comprises the following steps: judging whether a node enters a system for the first time and sorting; selecting a proxy node set according to the sorting; mutually voting between the proxy nodes, finally counting the number of votes received by each node, summing up the reputation value, and then sorting the nodes again; selecting the nodes ranked in the top 21 as a set of witness nodes, and the remaining nodes as a set of backup witness nodes; supervising the block generation process of the witness nodes, and dynamically converting with the set of backup witness nodes by using the proposed reputation mechanism; and the witness nodes pack blocks and generate blocks. The application rewards or punishes the positive or malicious behavior of the nodes, thereby restricting the behavior of the nodes and reducing the possibility of the nodes doing evil; the power is reduced in the hands of a few nodes, and the risk of centralization is reduced; the identity information of the voting nodes is avoided from being leaked, and the system security is improved.

A device according to one aspect generates a prior signature with a non-interactive blind signature and comprises: a first key generation unit that generates a public key PKS which includes a public key pks and a random number y of a prescribed digital signature and a secret key SKS which includes the public key PKS and a secret key sks of the digital signature; and a prior signature generation unit that uses the secret key sks which is included in the secret key SKS, the public key PKR of a device which generates a signature from the prior signature, and a nonce value to generate a prior signature psig by the digital signature using the public key PKR and the nonce value as a message.

This application is applicable to the field of digital signature technology, and provides a digital signature method, device, terminal device and storage medium. In the embodiments of this application, a request message is sent to a signature end so that the signature end determines coordinate parameters according to the request message; the coordinate parameters and a message to be signed are obtained, and a blinded message is determined according to the message to be signed and the coordinate parameters; the blinded message is sent to the signature end so that the signature end calculates the blinded message according to the ECDSA signature algorithm to determine a blinded digital signature; the blinded digital signature is obtained, and a de-blinding calculation is performed on the blinded digital signature to determine the digital signature corresponding to the message to be signed, thereby improving the operation efficiency of blind signature through the ECDSA signature algorithm.

The present invention provides a privacy protection method and device for resisting internal dishonest participants. The method includes: obtaining local model parameters to be uploaded by participants; performing commitment calculation on the local model parameters based on a commitment function to obtain a commitment function value; sending the local model parameters and their corresponding commitment function values to the mining right miner, so that the mining right miner writes the local model parameters and their corresponding commitment function values into a block in the BFL framework and synthesizes a global model; respectively performing data privacy enhancement on the global model parameters based on each participant and writing the globally model parameters after data privacy enhancement into a block in the BFL framework. An intelligent contract based on a commitment function and blind signature is implemented in the blockchain. When a dishonest participant denies or leaks the model, the commitment or signature is opened according to the contract to determine the dishonest participant, improving the resistance and defense capabilities against internal dishonest participants and ensuring privacy security.

The application discloses a fair commodity transaction privacy protection method based on a blockchain, which comprises the following steps: system initialization; a buyer publishes a payment transaction; a miner verifies the transaction and executes a payment function of a contract if the transaction is passed, or ends the process; the buyer publishes a payment proof transaction; a seller verifies a verifiable encryption signature and publishes a delivery transaction if the encryption signature is passed, or ends the process; the buyer publishes a redemption proof transaction; the seller publishes a redemption transaction; and the miner verifies the transaction and executes a redemption function of the contract if the transaction is passed. The method realizes the comprehensive protection of the identities, account balances, transaction amounts and transaction contents of the two parties of the transaction by using blind signature, verifiable encryption signature, homomorphic encryption, range proof and zero-knowledge proof technology to protect the transaction privacy and ensure the fairness of the transaction while recording the transaction information through the blockchain and the smart contract. Through security analysis, the method meets the effectiveness, time limit, fairness, anonymity, confidentiality and balance.

The invention relates to the field of Internet of Things security, block chains and privacy computing, and discloses a privacy protection and amount variable multi-hop payment method and system for autonomous Internet of Things resource scheduling. According to the method, network topology and weight are hidden through multi-party security calculation to select an optimal payment path; the sender generates a Pedersen commitment and a zero-knowledge proof to hide and verify the transaction amount; the relay node performs homomorphic updating on the channel balance commitment after verification and certification, and generates a blind signature bound with a channel state for confirmation; the receiver verifies all signatures and certificates and ensures the conservation of the total amount of funds in the multi-hop payment process through a balance consistency verification function; and finally, settlement or arbitration is completed by the on-chain smart contract. According to the invention, dual privacy protection of payment amount and path is realized, variable amount is supported, and the method is suitable for crowdsourcing logistics, resource transaction and other Internet of Things scenes.

The present invention relates to the field of information security, and specifically refers to an RSA multiple blind signature method and system based on identity authentication. The method includes RSA initialization, CA public key certificate registration, public key certificate exchange, public key acquisition and verification, information encryption, signature initiation and multiple signatures, signature reception and verification, information sending, and information reception. The present invention uses the RSA algorithm to encrypt information, and at the same time adopts the CA authentication and local public key sharing mechanism to realize the authentication of message signatures, preventing impersonation of signature initiation and impersonation of signatures; the present invention adopts a scatter-type signature and identity authentication mechanism to realize the traceability of incorrect signatures and prevent the overall signature from failing due to a single incorrect signature, which can effectively replace the aggregate signature, and the time complexity only changes from 1 to O(n); the system includes a key generation tool, a data encryption and decryption module, a data signature and verification module, a trusted certification authority CA, an information storage device, and a transaction processor.

The invention discloses a blind signature and chameleon Hash-based dual-certificate DID management method and system, and the method comprises a registration stage, a verification stage and an updating stage: the registration stage: a user terminal sends a registration message, a blind message and an original identity Hash value as identity Hash, a registration mechanism generates a blind signature after verification, issues a registration certificate, and sends the registration certificate to a user terminal; the user terminal locally generates a verifiable certificate after blind verification; in the verification stage, the server calls the smart contract, and verifiable certificate validity is verified based on a chameleon hash function; in the updating stage, the user terminal generates a new verifiable certificate by using the chameleon Hash controllable collision characteristic, and chain identification updating is completed after verification of the intelligent contract. According to the method, authority is split through a double-certificate architecture, blind signature and chameleon hash technologies are fused, autonomous control of user identities, privacy protection and flexible updating are realized, and verification security and efficiency are improved.

The present invention discloses a user privacy protection method and system based on the Dilithium certificateless blind signature scheme in the vehicle networking. This method enables the base station in the vehicle networking to initiate a registration request for identity information to the trusted center, and the trusted center generates the first part of the private key and the corresponding tag; the base station verifies the first part of the private key; the base station calculates the second part of the private key and generates the complete public-private key pair of the base station; the base station sends a commitment message to the vehicle user, and the vehicle user initiates a signature request to the base station; the base station signs the blinded information and returns it to the vehicle user; the vehicle user unblinds the received blinded signature to obtain the true signature for the privacy data; the vehicle user uploads the privacy data and the true signature to the management agency for authentication; the management agency verifies the true signature of the vehicle user and stores the privacy data. The present invention protects various privacy data and meets the requirements of the vehicle networking for resisting quantum attacks.

The application relates to the technical field of anonymous communication and provides an anonymous communication method and system based on blind signature and a medium, the method comprising the following steps: a sender generates a blind signature request containing public metadata and a message token, sends the blind signature request to a signature server, and the signature server performs blind signature; the sender performs de-blinding on the received blind signature result, obtains an anonymous token, and sends an authorization request to a bulletin board server; the bulletin board server verifies the validity of the anonymous token, allocates a mailbox and a corresponding writing time window to the sender; the sender obtains the writing permission of the mailbox within the time window, and then delivers a ciphertext to the mailbox; a receiver sends a private information retrieval request to the bulletin board server based on the mailbox identifier informed by the sender, and receives returned response ciphertext; and the receiver uses a PIR private key and a session key to decrypt the response ciphertext, and obtains a plaintext message. The application guarantees the strong privacy of both communication parties and realizes the safe transmission of confidential messages.

The invention relates to a method for generating a blind signature for a message based on a cryptographic protocol implemented in a Euclidean network comprising a public key formed of at least one matrix A composed of elements of a set and a secret key linked to the public key and known exclusively to a signatory entity, the method comprising: generating a first ring vector r; determining a second vector c equal to A.r +f(m); the signatory entity generating a third ring vector s such that c= A.s, with s complying with at least one constraint relating to its norm; generating the intermediate signature comprising an aggregation vector resulting from a combination of the first and third vectors; decomposing the aggregation vector into a first part and a second part; generating a blind signature composed of the first part and of a proof of knowledge of the matrix and of the second part.

The embodiment of the invention provides a transaction method, device, equipment and program product of a bank acceptance bill, and relates to the field of financial science and technology or other related fields, and the method comprises the steps: obtaining bill issuing transaction data sent by a second server, determining blind signature information of blind transaction data in the bill issuing transaction data through an intelligent contract on a block chain, and sending the blind signature information to a server; the intelligent contract account balance and the ticket drawer account balance are updated, the blind signature information is sent to a second server, so that the second server carries out blind solution on the blind signature information to obtain signature information, and the signature information is sent to a third server; and obtaining exchange transaction data sent by the third server, updating an intelligent contract account balance and a payee account balance according to the exchange transaction data through the intelligent contract on the block chain, and signing on the basis that transaction details are not clear through blind transaction data and blind signature operation, so that the user experience is improved on the basis of ensuring the credibility of the transaction. And the privacy of the transaction data is improved.

In a non-interactive blind signature system according to one aspect of the present disclosure, a signer device comprises: a first key generation unit that generates a public key and a secret key of a digital signature scheme as a public key and a secret key of the signer device in a blind signature; and a pre-signature generation unit that generates, as a pre-signature, a digital signature generated by means of the digital signature scheme on the basis of the secret key of the signer device, a public key of a recipient device, and a first nonce value. The recipient device comprises: a second key generation unit that generates a secret key including a q-wise hash function as a secret key of the recipient device and a commitment of the q-wise hash function as a public key of the recipient device; and a signature generation unit that generates, on the basis of the public key of the signer device, the secret key and the public key of the recipient device, a second nonce value, and the pre-signature, a message by means of the q-wise hash function and a signature by means of a dual-mode non-interactive zero-knowledge proof.

The invention discloses a reverse firewall method suitable for identifying a blind signature, and belongs to the technical field of information security. The method comprises the following steps: a KGC selects a main private key and a generator, generates a main public key, and re-randomizes the main public key through a reverse firewall of the KGC; therefore, an attacker cannot distinguish honesty behaviors and subversive behaviors of the KGC; the user submits its ID to the KGC to generate a user long-term public key and private key of the user; in the blind signature stage, a signer generates a commitment and randomizes the commitment, and a verifier blinds a plaintext message based on the commitment, randomizes the plaintext message and then sends the plaintext message to the signer; the signer obtains a blind signature based on the blind signature, re-randomizes the blind signature and sends the blind signature to the verifier, and the verifier obtains a corresponding signature after blind removal operation; and finally, the verifier performs verification based on the signature so as to judge whether to accept the signature or not. According to the method, the reverse firewall is deployed for the key generation center and the signer in the protocol, so that the privacy information of the protocol participant is ensured not to be leaked to the internal attacker, and the privacy leakage resistance of the protocol is ensured.

The invention discloses a cloud-assisted privacy set intersection method based on blind signature authorization, which is applied to the technical field of cryptography and privacy protection computing. Comprising the following steps: an authority is responsible for holding a universal set and generating a secret key of an oblivious pseudo-random function OPRF, and a judge is responsible for generating and publishing an RSA public key; the authority carries out OPRF operation and blind encryption on the elements in the full set, and the elements are stored in a Bloom filter and sent to a referee; obtaining an OPRF value of the private set element, and performing blind encryption on the set by using the OPRF value and the RSA public key; and the referee verifies and signs the set by using the RSA private key, and the client removes a blinding factor according to a signature result returned by the referee and recovers a legal signature set on the legal complete set. According to the method, the malicious client can be prevented from forgery input, and the privacy and the data security in the data intersection solving process are ensured.

The invention relates to an NTRU lattice-based batch blind signature round optimization method and device, equipment and a medium, and the method comprises the steps: after a server side receives a first round of information, if first zero-knowledge proof verification is passed, taking each to-be-signed vector as an input, generating an original image pair of the to-be-signed vector, and sending the original image pair to the server side; generating a second round of message according to an original image pair set constructed by all the original image pairs meeting the length constraint, and sending the second round of message to the user side; after receiving the second round of message, the user side constructs a second zero knowledge proof based on the system main public key, all the first hash values in the first round of message, the message commitment, the random number commitment and all the primary image pairs in the second round of message, and constructs a final signature through all the first hash values in the first round of message and the second zero knowledge proof; and the verifier verifies the second zero-knowledge proof, and if the verification is passed, the final signature is determined to be valid. According to the application, the signature and interaction cannot be associated, and the legality and privacy of the signature are guaranteed.

The invention relates to the technical field of identity authentication, and relates to an SM9-based traceable blind signature data protection system. And the server initializes and publishes the data protection parameters. And the server determines a private key and a data tracking label of the first terminal according to the data protection parameter, and sends the private key and the data tracking label to the first terminal. And the first terminal blinds the to-be-transacted data according to the data protection parameter, the private key of the first terminal and the data tracking tag to determine blind data. And performing blind signature on the blind data through an SM9 algorithm. And generating a blind solving key of the blind data after blind signature. And sending the blind data after blind signature to a server. And the second terminal purchases the blind data through the server. And the second terminal sends the decryption request and the purchase voucher to the first terminal and receives the blind decryption key sent by the first terminal. And recovering the blind data after blind signature according to the blind resolution key. It can be ensured that the server and the second terminal cannot know the original data content before obtaining the blind decoding key.

This invention discloses a continuous authentication protocol for maintaining user privacy. The protocol process includes four stages: system initialization, credential registration, legitimacy check, and consistency check. First, the system generates public parameters, and the credential issuer generates a public-private key pair and an update key. The user and the credential issuer generate credentials using blind signatures. Then, the user generates and submits a randomized credential to the network service provider (ISP). The ISP verifies the legitimacy of the user's credential based on the credential issuer's public key and its specific service access conditions. Finally, during continuous authentication, consistency proof generation and verification enable the ISP to perform identity consistency checks based on user autonomy. This invention places greater emphasis on protecting user data privacy at the ISP's location.

A computer-implemented method for generating a signature of a message is disclosed. A user device processes a message and random data to generate a commitment to the message and sends the commitment to a signer device. The signer device derives a short vector that solves a lattice problem including the target vector from the commitment and a sample using a secret trapdoor function. Next, the signer device sends the short vector to the user device, and the user device verifies that the short vector solves the lattice problem. After successful verification of the short vector, the user device generates a signature that proves knowledge of the short vector based on the message and public data.

The invention discloses a block chain currency mixing method using restrictive group blind signature, and relates to the technical field of information security. The method comprises the following steps: a plurality of users and a currency mixing center respectively obtain a block chain public key and a block chain private key; a plurality of users form a group and determine a group administrator of the group; the group administrator is used for generating a group public key and a group private key, and the administrator generates the group public key and the group private key; a user calls a restrictive group blind signature algorithm to sign a one-time effective signature on a transfer instruction, encrypts the instruction and the signature by using a random AES key to obtain a message ciphertext, encrypts the AES key by using a public key of a currency mixing center to obtain a key ciphertext, and sends the two ciphertexts to the currency mixing center; and the currency mixing center decrypts the AES secret key by using a private key, then decrypts the message, constructs a signature set according to an instruction and a signature, verifies the validity and repeatability of the signature by using a group public key, and determines an execution result and responds to a default user accordingly. According to the invention, the security of the user and the currency mixing center can be ensured while the transaction privacy of the user is protected.

To provide a method for verifying an execution trail of a protective storage processing section which is appropriate for utilization as a settlement processing method for digital currency and a system therefor, a program therefor and an execution trail verification device for a protective storage processing section.SOLUTION: When a verification of a first execution trail of an observer program transmitted from a user terminal 1 and installed in a protective storage processing section 2 is made successful, in a second execution trail including a blind signature which is performed on a public key transmitted from the user terminal 1 and certification information transmitted from the protective storage processing section 2 to the user terminal 1 and certifying that a private key corresponding to the public key is owned, the blind signature and the certification information are received by a reliable facility terminal 3 and it is confirmed that the blind signature and the certification information are authentic, thereby verifying that the second execution trail transmitted from the protective storage processing section 2 is authenticated.SELECTED DRAWING: Figure 1

The invention provides an SM2-based message recoverable blind signature generation method and system, and the method specifically comprises the following steps: a system administrator generates system parameters, and shares the system parameters to two entities, namely a signer and a user; the signer generates a public key and a private key, randomly selects parameters to generate temporary variables and sends the temporary variables to the user; after the user receives the temporary variable, blind processing is carried out on the temporary variable by introducing a random parameter, and a new parameter is generated and fed back to the signer; the signer calculates a temporary signature parameter according to the new parameter and sends the temporary signature parameter to the user; and the user generates a final blind signature by using the temporary signature parameter and outputs the final blind signature, thereby completing the message recoverable blind signature generation process based on SM2. According to the method, the message is hidden in the signature value, a verifier directly decodes the message without extra bandwidth, the storage and communication cost is effectively reduced, meanwhile, an untraceable design is provided, and the data security and privacy protection requirements in the fields of electronic voting, anonymous payment and the like are met.

The invention provides a collaborative signature method and device, equipment, a medium and a program product, and the method is characterized in that the method comprises the steps: obtaining a public key, and transmitting the public key to a block chain network for storage; dynamically updating the credibility score of each node in the node cluster through historical behavior data recorded by a block chain network; on the basis of a preset lowest credibility accumulation threshold value, according to the credibility score of each node, effective signature nodes and a dynamic threshold value are determined, and the dynamic threshold value represents the number of the nodes participating in signature; obtaining blind signature parameters based on the effective signature nodes, and sending the aggregated blind signature parameters to a requester; and receiving a transaction ciphertext sent by the requester, generating a signature fragment corresponding to each effective signature node based on the transaction ciphertext, and sending the signature fragments to the requester. According to the invention, a single-point fault can be avoided, and the signature security and efficiency are balanced.

The present application relates to the technical field of identity authentication, and relates to a traceable blind signature data protection system based on SM9. A server initializes data protection parameters and discloses them. The server determines a private key of a first terminal and a data tracking label according to the data protection parameters, and sends them to the first terminal. The first terminal blinds transaction data according to the data protection parameters, the private key of the first terminal and the data tracking label, and determines blinded data. The blinded data is blindly signed through an SM9 algorithm. A deblinding key of the blindly signed blinded data is generated. The blindly signed blinded data is sent to the server. A second terminal purchases the blinded data through the server. The second terminal sends a decryption request and a purchase voucher to the first terminal and receives the deblinding key sent by the first terminal. The blindly signed blinded data is recovered according to the deblinding key. It can be ensured that the server and the second terminal cannot know the original data content before obtaining the deblinding key.

This invention discloses a multi-factor SM9 blind signature big data privacy protection method and system, relating to the field of privacy protection technology. The method includes: acquiring user-related data; performing information blinding processing on the user-related data based on user nodes to obtain blinded data; sending the blinded data to a signing node; the signing node performing signature processing on the blinded data to obtain signed information data; sending the signed information data to both the user node and a verification node; the user node deblinding the signed information data to obtain a real signature; sending the real signature to the verification node; and the verification node using the real signature to verify the signed information data. If verification fails, the user-related data is reacquired and processed for verification again. If verification succeeds, privacy-protected data is obtained.

The present invention provides an auxiliary heterogeneous remote authentication method and system with blind verification capabilities. Each TEE platform uses the remote attestation agent module to complete remote attestation with the other end, and each TEE platform does not need to be compatible with the authentication logic of other heterogeneous TEE platforms. The present invention supports privacy computing for interactions between heterogeneous TEEs and also incorporates RSA blind signature technology to provide anonymity and security. This combination provides an additional security layer for interactions between nodes, enhancing the security and reliability of network communications; it not only ensures security but also provides anonymity support for node interactions between heterogeneous TEEs.

The invention discloses a multi-authoritative attribute-based blind signature method with bidirectional privacy protection, and relates to the technical field of cyberspace security, the method comprises the following steps: constructing a multi-authoritative attribute-based blind signature system with entities including a central attribute authority, a distributed attribute authority, a signer, a user and a verifier, establishing system parameters and initializing the system parameters; generating a secret key for a signer by using a hash function and a multiple polynomial through the central attribute authority and the distributed attribute authority respectively; the user blinds the message needing blind signature and sends the blinded message to the signer; the signer calculates the signature of the blind message and sends the signature to the user; the user carries out blind solution calculation on the signature of the received blind message to obtain a blind signature and sends the blind signature to a verifier; and the verifier verifies the blind signature. According to the method, the privacy of the user is protected, the signature is prevented from being tracked and associated, the privacy protection of the signer is enhanced, and the flexibility is high.