The invention relates to a distributed
digital signature suitable for a block chain environment, and discloses an identity-based threshold signature
algorithm suitable for a block chain to support a
password reverse firewall, which can prove that existence unforgeability security under
adaptive selection message
attack can be satisfied under a
random oracle model. The method is characterized in that an identity-based threshold signature mechanism is adopted, so that the overhead of
certificate generation, management and
revocation in a traditional PKI
system is avoided, and the method is suitable for a scene of
direct binding of an identity and a key in a block chain. Besides, according to the
algorithm, when the signature key and the random number are generated, a Shamir
secret sharing technology is combined, so that an effective signature can be synthesized when the number of participating users reaches a preset threshold value, the
system security is guaranteed, and
fault tolerance and flexibility are enhanced. Meanwhile, a
password reverse firewall (CRF) is introduced, privacy information is re-randomized in the signature process,
information leakage attacks can be effectively resisted, even if secret keys of part of participants are leaked, the
system can still keep overall safety and cannot be counterfeited for signature, and robustness and
usability in a complex hostile environment are remarkably improved.