64 results about "Group signature" patented technology

The invention relates to an alliance chain identity privacy protection method and system based on multi-level group signature and distributed key management, and belongs to the field of block chain technology, network and information security. According to the method, a multi-level group signature structure is adopted, anonymous identity verification is achieved in the transaction process, privacy protection is further enhanced through zero-knowledge proof, anonymous identity verification is achieved in the transaction process, it is ensured that privacy of participants is not leaked, a homomorphic encryption algorithm is used in the signature and verification process of transaction data, and the transaction data are subjected to identity authentication. And privacy leakage is prevented. And meanwhile, the Shamir secret sharing algorithm divides the master key and stores the master key in a plurality of sub-group members in a distributed manner, so that the anti-attack capability and the key security are enhanced. According to the method, a dynamic group member management and double signature verification mechanism is further introduced, so that the flexibility and the overall security are improved. The method has significant advantages in the aspects of identity anonymity, data integrity and efficiency, and is suitable for alliance chain application scenarios with high privacy and security requirements.

The invention relates to the technical field of security authentication and ubiquitous networks, and discloses a ubiquitous-network-oriented cloud-side collaborative multi-factor identity authentication method and system, and the method comprises the steps: issuing an identity certificate based on an elliptic curve and a PUF challenge-response library of a parameter initialization edge node through a cloud, and achieving the cloud-side bidirectional authentication; when the terminal is accessed, multi-factor authentication combining PUF challenge and a dynamic threshold value is adopted, so that the capability of resisting counterfeiting and replay attacks is improved; after the authentication is passed, the edge node generates a group public key locally and constructs a binary tree group key structure with a preset depth, and post-quantum safe and efficient group signature management is supported; when a newly added terminal joins, generating a secret key based on an elliptic curve algorithm and distributing a group signature private key share to realize lightweight member management; the integrity, confidentiality and traceability are realized while the transmission efficiency is guaranteed, and safe communication and dynamic revocation in an edge resource limited environment are effectively supported.

The invention discloses a carbon emission abnormity traceability method and device, a medium and equipment, and belongs to the field of carbon emission, and the method comprises the steps: receiving a traceability request containing a to-be-verified data identifier, positioning target link data from a block chain storage, and executing signature verification and Hash consistency verification, thereby guaranteeing the authenticity and consistency of the data. And if the verification of the target link data is passed, verifying the inclusion relation of Merkle tree root hash of each link upwards layer by layer to confirm the integrity of the full-chain data. And if verification failure of any level is found, the feature data of the level is combined with an anomaly detection model based on an isolated forest algorithm, and an abnormal data node is positioned. And then, according to the signature information of the abnormal data node and the preset tracking secret key, a group signature verification and private key derivation process is applied, the responsibility participant is traced, and the tracing process of the carbon emission abnormity is completed, so that the problem that the carbon emission abnormal point cannot be accurately and efficiently traced in the prior art is effectively solved.

Methods for hiding the identity of communications devices in a continuous group key agreement are provided. A group member making a request relating to changing a group state provides a signed challenge value to a server, which signed challenge value has been signed using a group signature key. The server checks the signed challenge value to determine if the group member is in possession of the group signature key and is therefore a member of the group. As the group signature key is used, the server cannot determine the identity of the group member making the request.

The invention provides a block chain-oriented forward security group signature system and method based on lattice cryptography, and belongs to the field of group signature. The system comprises an anti-quantum signature module, a dynamic group management module, a key evolution module, a privacy protection module and a supervision and tracing module. A post-quantum signature algorithm based on an ideal lattice is designed, the anti-quantum characteristic is achieved through the calculation complexity of the shortest integer solution (RSIS) problem on a ring, and meanwhile the storage efficiency is optimized through a cyclic matrix structure of the ideal lattice; secondly, constructing a dynamic group signature mechanism supporting complete anonymity, and realizing transaction traceability while protecting user privacy in combination with a Nor-Yung dual encryption and VLR revocation mechanism; finally, an improved bonsai tree key evolution scheme is introduced, forward security guarantee is provided through periodic key updating, and it is ensured that the historical transaction security is not affected even if a current key is leaked; according to the method, the problems of quantum computing threat, insufficient privacy protection and key leakage risk faced by a block chain system can be effectively solved.

The invention discloses a double offline payment transaction method based on a CA center and a group signature, which relates to the technical field of information security, and comprises the following steps: the CA center sets system parameters, generates a group and a key pair, allocates an anonymous identifier for each group member in the group, generates a private key for each group member in the group according to the system parameters, the group and the key pair, and sends the private key to the group member; synchronously broadcasting the system parameters, the group, the key pair and the private key to the user terminal and the merchant terminal; the user terminal receives the transaction amount, performs group signature according to the system parameters, the group, the private key and the dynamic anonymity degree adjustment strategy to generate a signature, and sends the signature to the merchant terminal; and the merchant terminal performs secret key verification on the signature according to the system parameters and the secret key pair, if the signature is valid, the transaction is continuously processed according to the transaction amount, otherwise, the transaction is refused. According to the invention, the group signature technology is adopted to realize privacy protection of small-amount transactions and effective identity tracing of large-amount transactions under digital RMB double-offline payment, and user privacy and supervision requirements are balanced.

The invention relates to the field of cryptography and network security, and discloses a group signature method based on a trusted execution environment, which comprises the following steps of: S1, performing identity authentication and secure session key negotiation between communication participants, and verifying the integrity of the trusted execution environment of a group administrator; s2, the group administrator generates a public parameter of the group signature system and a private key of the group administrator in the trusted execution environment, and encrypts and stores the private key; and S3, the group administrator receives a join application of a new member, generates exclusive private key information of the new member and a unique identifier of the exclusive private key information based on the application in the trusted execution environment, and encrypts and returns the unique identifier to the new member. According to the technical scheme, generation and storage of a group administrator private key and a group member private key and key cryptographic operation are performed in a trusted execution environment, so that the technical effect of enhancing the security of the key is achieved.

The present invention proposes an anonymous cloud auditing method that supports dynamic aggregation of tags. It can not only achieve anonymous privacy protection for data uploaders but also dynamically aggregate tags according to the system operation status to improve storage efficiency. It mainly consists of the following steps: system initialization stage, key generation stage, tag generation stage, challenge stage, response stage, verification stage, and also includes the following optional steps: key expansion stage, aggregation stage. This method has the following characteristics: 1. It does not rely on ring signature or group signature technology to achieve the anonymous privacy protection function of data uploaders. A data tag is composed of only one group element before aggregation; 2. It supports aggregation operations on data tags. Multiple data tags can be aggregated into one tag to reduce storage overhead. The aggregated tags can execute the normal audit process without the need to verify the aggregated multiple index positions as a whole. That is, it can audit one or more specific positions after the aggregation of multiple tag index positions.

The application discloses a kind of traceable privacy protection methods and systems for crowd-sensing. The method comprises the following steps: step 1: system initialization;Step 2: data demander registration;Step 3: task group building;Step 4: data collection submission;Step 5: user traceability.The application solves the problem of user privacy leakage in the traditional blockchain traceability process by combining blockchain technology and group signature technology.Group signature allows users to participate anonymously in transactions while ensuring the non-forgery and traceability of the signature.In protecting user privacy, it can effectively trace malicious behavior.When there is a dispute or the need for audit, the auditor can trace the signature without revealing the privacy of other users, ensuring the accuracy and fairness of the traceability.

The application provides a kind of unmanned plane anonymous authentication and identity remote identification method, unmanned plane and its supervision equipment, the method includes: by unmanned plane service provider in advance selecting system main private key and main public key, define attribute set;And by unmanned plane registration process, generate and issue certificate for the unmanned plane;Unmanned plane running process, generate RID data packet that can be anonymous authentication and meet RID rule;RID data packet includes the following information: unmanned plane position, unmanned plane speed, unmanned plane attribute ciphertext, unmanned plane operator's location ciphertext, encrypted unmanned plane public key information, time stamp, group signature;Timing broadcast RID data packet, so that receiver obtains the position and flight speed of unmanned plane according to the received RID data packet. Utilize the scheme of the application, the effective management and privacy protection of unmanned plane can be realized.

The application discloses a kind of seller autonomous auction system and method with bidding anonymity and bid privacy, system includes four entities of seller, bidder, auction platform and anonymous identity provider, and is divided into six stages of initialization, registration, auction release, bidding, winner calculation and transaction.The invention aims at the trade-off between seller autonomy and buyer privacy protection in anonymous auction, and designs a group signature variant-zero-knowledge screenable group signature.The signature combines zero-knowledge proof with group signature, ensuring that the black list screening mechanism defined by the seller does not destroy the anonymity of the bidder.At the same time, by using homomorphic encryption technology, the winning bid calculation of the auction is carried out entirely in ciphertext, realizing the bidding amount and ordering privacy of the bidder.In the final transaction stage, the winner opens the value by presenting the bidding commitment of the winning bid, enabling the seller to correctly identify the winner without revealing their identity, ensuring smooth transaction.

A method is disclosed. The method includes generating, by a first user device in association with a second user device, a second secret key on the second user device. The second secret key is derived from a first secret held by the first user device. The method includes generating a first commitment, transmitting, to the second user device, the first commitment, receiving, from the second user device, a second commitment, receiving, from the second user device, a random value and a ciphertext. The ciphertext is generated using the first commitment, the second commitment, and the random value. The method also includes verifying the ciphertext, and in response to verifying the ciphertext, modifying a group to include the second user device.

One task is to enable the specification of an in-vehicle electronic device, which is a signer, from a digital signature in a case where the authenticity of the digital signature cannot be verified, while simultaneously protecting privacy. To this end, a key generation and management device 11 generates and manages a signature key that is used to generate a signature to be added to vehicle data transmitted by an in-vehicle electronic device 21.The key generation management device 11 comprises a key generation unit 102, which generates a plurality of signature keys with different values ​​and a verification key corresponding to the plurality of signature keys using a group signature scheme; a communication unit 101, which receives the signature generated by the vehicle's in-vehicle electronic device 21 using the signature key and subjects it to processing to verify the authenticity of the signature using the verification key; and a signer verification processing unit 103, which performs signer verification processing to specify that the vehicle's in-vehicle electronic device 21 corresponds to the signer that generated the signature on the signature received by the communication unit 101.

A trust measurement and remote certification method and system for the perception layer of an Internet of Things, characterized in that the method comprises the following steps: step 1, establishing a trust measurement model based on the static parameters and dynamic parameters of the perception nodes in the perception layer, and obtaining weights of different trust measurement models based on measurement time and information entropy in different networking modes of the perception layer of the Internet of Things to achieve the solution of a comprehensive trust value; step 2, using the comprehensive trust value and the energy trust value of the perception node to perform trustworthy logical grouping on the perception node; step 3, generating a group signature of the perception node through a dynamically updated key, and achieving trustworthy certification of the perception node from a remote node based on unforgeability analysis and anonymity analysis.

The invention discloses a security federal learning method and system based on a dynamic group signature, an administrator generates a bilinear group and public and private keys, and a client encrypts gradient information after applying for joining the group and uploads the gradient information with a group signature. And the server decrypts and verifies the validity of the signature, detects malicious clients through cosine similarity, removes malicious nodes and generates a blacklist, and contributes a three-dimensional weight aggregation model to normal clients according to data volume, quality and history. According to the scheme, identity anonymous authentication and malicious detection are achieved, model aggregation safety is guaranteed, federal learning robustness and efficiency are improved, and the method is suitable for data privacy sensitive scenes.

The invention relates to the technical field of secure communication, and discloses a mobile intelligent node dynamic networking security control system, which comprises a group division module, a key management module, a member access module, a secure communication module, a tracking and revocation module and a controller module. The group division module realizes self-adaptive stable clustering by adopting a K-Means algorithm and combining Z-score standardization on the basis of feature vectors of the speed, the position, the type and the direction of the mobile node; the key management module initializes and maintains a post-quantum lattice base group public key, a member private key and a tracking key in each cluster; the member access module completes hardware identity binding and distributes signature private keys through PUF challenge-response and zero-knowledge proof; the secure communication module performs anonymous signature and verification on the service message by adopting a quantum group signature scheme after the lattice difficulty problem; and the tracking and revocation module opens a group signature to position a signer by using the tracking key, and maintains a revocation list to timely eliminate failure nodes.

The present invention relates to the field of network security and communication technologies, specifically disclosing a cross-domain authentication method and system for a vehicle-mounted ad hoc network. The method is implemented based on a cross-domain authentication system for the vehicle-mounted ad hoc network, which includes a key generation center, a trusted authority within at least one domain corresponding to each area, and several roadside units and vehicles within each area. The method includes the following steps: system initialization, vehicle initialization, roadside unit initialization, construction of a threshold group signature, identity update, intra-domain identity authentication, inter-domain identity authentication, identification of illegal users, and deregistration of illegal users. The present invention provides a cross-domain authentication method that effectively addresses issues such as privacy protection, cross-domain device collaboration, and malicious entity tracking in vehicle networks, promoting the rapid development of smart transportation.

Various methods for authenticating user devices in a group messaging protocol, such as messaging layer security (MLS), are described. Some methods make use of public and private tokens wherein the public token is derivable from the public token by use of a one-way function. Further methods replace the tokens with one-time signature key pairs. A further method makes use of a group signature scheme to allow traceability of user devices.

The application discloses a threshold structure keeping signature generation method and system on equivalence classes, wherein the method comprises the following steps: 1) a signing party generates its own signature public and private key pair, and initializes a plurality of ideal function functions; 2) t signing parties generate signature shares by using their own private key shares; and 3) an integrated signature is generated by aggregating the signature shares of the t signing parties, and the legality of the signature is verified. The application has the advantages of high security, small communication cost and the like, and can be applied to multiple fields such as anonymous credentials, group signature and the like.

The application discloses a kind of high-performance blockchain consensus algorithm, the method includes: in current block period, based on preset clustering algorithm, all senior consensus nodes in the senior consensus group to be clustered are clustered to obtain m signature groups;Based on BLS aggregation signature, determine two deputy leader nodes in each signature group and the group signature block corresponding to each deputy leader node, that is, obtain 2m deputy leader nodes and 2m group signature blocks;Based on the coin protocol of verifiable key sharing, the leader node is elected from the deputy leader node and the block corresponding to each leader node, that is, obtain m leader nodes and m blocks;The credit value of each node in the blockchain network is obtained, and the new senior consensus group to be clustered is determined, steps 1 to 4 are continued to be executed, to realize blockchain consensus.The consensus algorithm of the application has high consensus efficiency, high scalability, high block efficiency, high chain quality and other performances.

According to one embodiment of the present invention, a group signature-based federated learning method by a group signature-based federated learning system including at least one client terminal and an administrator terminal provided as a group, and a server distributing a federated learning model to the at least one client terminal may comprise requesting, by the client terminal, a group signature to the administrator terminal; transmitting, by the administrator terminal, a group signature response to the client terminal in response to the request for the group signature; generating, by the client terminal, update information of signed federated learning using the group signature response and transmitting it to the server to request participation in federated learning update; transmitting, when the server receives the request for participation in the federated learning update, a latest group signature request to the administrator terminal and receiving a latest group signature response from the administrator terminal; and comparing, by the server, the latest group signature response with update information of the signed federated learning to determine whether signatures match, and if the signatures match, updating and redistributing the federated learning model to at least one client terminal.

Provided is an electronic currency system comprising: a remittance apparatus, which is the remittance source of electronic currency to which additional information is added each time remittance is made; and a receiving apparatus, which is the remittance destination of the electronic currency. The remittance apparatus comprises a verification key reception unit configured to receive a group verification key of a group to which the receiving apparatus belongs, a signature unit configured to use a member signature key of the remittance apparatus to generate a group signature for the group verification key and a hash value of the additional information that is most recently added to the electronic currency, and a currency transmission unit configured to transmit to the receiving apparatus the electronic currency to which the group verification key, the hash value, and the group signature have been added as the additional information. This makes it possible to appropriately ensure the anonymity of a user of electronic currency while maintaining the traceability.

An anti-quantum anonymous authentication method based on a dynamic group signature comprises the steps of system initialization and key generation, group member joining, group member signature, signature verification by a verifier, signature identity tracing, tracing result judgment and group member revocation. According to the method, the step of adding the group members and the step of revoking the group members are adopted, and an efficient accumulator mechanism and a zero-knowledge proof technology are used in the two steps, so that the technical problem that in the prior art, the signature cost, the public key cost and the key size cost are high is solved, and the efficiency of the dynamic group signature method is improved. According to the method, the size of the group public key and the size of the secret key are irrelevant to the number of group members and can be added and revoked in real time at the logarithm level, the communication cost is reduced, a group signature framework is constructed by adopting a lattice password, and quantum can be resisted. The method has the advantages of high security, low communication cost, high privacy, capability of resisting quantum computing attack and the like, and can be used in the technical field of anonymous authentication.

The invention belongs to the technical field of block chains, and particularly relates to an air quality data management method and device and a medium, and the method comprises the steps: combining a block chain technology with a linkable group signature mechanism, taking an ecological environment department node as a group administrator, and taking an air quality data collection node as a group member; and safety management and credible uplink of the air quality data in the whole process of acquisition, transmission and storage are realized. The data acquisition node performs group signature on the air quality data and uploads the air quality data on the premise of not exposing the real identity, so that the privacy of the data source node is protected, and a single-point device is prevented from being maliciously targeted; meanwhile, a link detection algorithm is introduced on the basis that group signature verification is passed and is used for identifying whether multiple signatures are from the same data acquisition node or not, so that Sybil attacks and malicious quantity swiping behaviors are effectively prevented, and extra calculation overhead caused by frequent opening of the group signatures is avoided.

Various methods for authenticating a user device in a group messaging protocol, such as messaging security (MLS), are described. Some methods utilize a public token and a private token, wherein the public token is derivable from the public token using a one-way function. Other methods replace the token with a one-time signature key pair. Yet another method utilizes a group signature scheme to allow traceability of user devices.

The invention discloses an efficient privacy protection authentication scheme for an edge-assisted Internet of Things security warning system, belongs to the technical field of Internet of Things privacy protection, and is based on an improved linkable group signature mechanism and a security warning system architecture. The security warning system architecture comprises a trusted authorization mechanism TA, edge nodes ENs and equipment. Comprising a system initialization stage, an equipment registration stage, a message transmission stage, a verification and decryption stage and a malicious tracing stage. According to the efficient privacy protection authentication scheme for the edge-assisted Internet of Things security warning system, balance between anonymity and responsibility of the edge nodes can be realized, key challenges of maintaining privacy while ensuring security early warning integrity are completed, Sybil attacks are effectively resisted, and the security early warning system has the advantages that the security early warning integrity is ensured, the security early warning safety is ensured, and the security early warning safety is ensured. And safety measures in the system are further enhanced.

The present invention discloses an anonymous identity authentication method, system and product based on group signature and blockchain. First, the system administrator generates system public parameters and maintains user public keys and identity numbers on the management node. Then the user needs to initiate group member registration to the management node, and the management node issues group member credentials for user verification. Then the user generates a group signature based on the group member credentials, the administrator's public key and the group member's private key, and sends it to the verifier; the verifier calculates and verifies whether the group signature is valid. In addition, the verifier records the corresponding group signature and submits it to the blockchain. Finally, the verifier passes the transaction number of the group signature stored in the blockchain to the management node for the management node to subsequently supervise and track the members who signed the group signature. The present invention adopts group signature technology, has anonymity, and uses the tamper-proof nature of the blockchain to provide strong evidence for the management node to track and supervise users.

The present invention relates to the field of security authentication and ubiquitous network technology, and discloses a cloud-edge collaborative multi-factor identity authentication method and system for ubiquitous networks. The method realizes cloud-edge two-way authentication by issuing identity credentials based on elliptic curves and parameter initialization of the PUF challenge-response library of the edge node. When the terminal accesses, the multi-factor authentication combining PUF challenge and dynamic threshold is adopted to improve the resistance to forgery and replay attacks. After the authentication is passed, the edge node generates a group public key locally and constructs a binary tree group key structure of preset depth, supporting post-quantum security and efficient group signature management. When a new terminal joins, the method generates a key based on the elliptic curve algorithm and allocates a group signature private key share to realize lightweight member management. The method achieves integrity, confidentiality and traceability while ensuring transmission efficiency, effectively supporting secure communication and dynamic revocation in an edge resource-constrained environment.

The invention belongs to the technical field of copyright protection, and discloses a federated learning model-oriented anonymous traceable protection method, which comprises the following stages: system initialization and multi-key distribution, gradient updating and signature, federated aggregation, signature mapping and federated node fingerprint embedding and model distribution. According to the anonymous traceable protection method oriented to the federated learning model, a unique signature is introduced for each node and a training round in federated learning, and measurement based on cosine similarity is designed to detect a model leakage person; according to the method, group signatures and model watermarks are combined, model leakers are accurately tracked while anonymity of legal nodes is guaranteed, traceability is achieved, feasibility and practicability in actual federal learning application are guaranteed, anonymous tracking and responsibility attribution of potential leakers are achieved on the premise that model performance is not sacrificed, and the method is suitable for popularization and application. Therefore, the overall safety and reliability of the system are improved.

The present invention discloses a group signature authentication method and system, which relates to the field of information security technology. It includes: building a group including a group administrator and multiple members; wherein the group administrator has an independent identity identifier; the members have mutually confidential identity identifiers; the group administrator's group signature result G for the message m S Authentication: Create a public information list NList and an identity tracing list TRlist; obtain the group signature result of the digital signature of message m within the group; traverse the group signature result in the public information list NList to verify the validity of the group signature result and obtain the identity of the signing member; traverse the identity of the signing member corresponding to the valid group signature result in the identity tracing list TRlist to obtain the specific identity information of the signing member to complete the authentication of the group signature. This invention can provide anonymity for the signing member and traceability for the group administrator, thereby improving the security and reliability of the digital signature.