107 results about "Ring signature" patented technology

The invention discloses an anonymous identity authentication method and device, electronic equipment and a storage medium, and relates to the technical field of anonymous identity authentication or other related fields, and the method comprises the steps: obtaining a public key set containing a trusted user public key, and extracting a local private key of a target anonymous user; a ring signature is generated based on the public key set and the private key, certification information is generated based on the private key and the ring signature, the ring signature is used for certifying that the target anonymous user belongs to one of trusted users, and the certification information is used for certifying that the ring signature is legal; packaging the ring signature, the certification information and the timestamp identifier into an authentication request, submitting the authentication request to an authentication system, and returning an authentication result; and obtaining an identity authentication token indicating that authentication passes in the authentication result, and logging in the authentication system based on the identity authentication token. According to the method and the device, the technical problem of identity authentication failure caused by information leakage and unreliable authentication due to the fact that security attacks are easily encountered in the identity authentication process in related technologies is solved.

The invention discloses a privacy protection method, system and device for block chain network node audit management, and the method specifically comprises the steps: generating a node anonymous voucher for a candidate node, carrying out the privacy authentication, mapping the sensitive information of the authenticated candidate node into an irreversible cryptographic hash value, and storing the irreversible cryptographic hash value in a distributed key management node; constructing a dynamic credible auditing group, selecting verification nodes from the candidate nodes, and performing uplink evidence storage after BLS aggregation signature; performing privacy aggregation calculation on the node behavior data of the verification node to generate an audit score ciphertext; fine-grained access control is realized through attribute-based encryption, and a node reputation level is dynamically bound through an auditing strategy; adaptive noise is added to an audit result by adopting a differential privacy mechanism, and the epsilon-differential privacy constraint condition is met by dynamically adjusting the noise amount; in the reward and punishment execution stage, a ring signature and a stealth address technology are combined, so that reward and punishment records are unhooked from real identities of nodes, and meanwhile, the trade traceability is ensured.

The invention relates to the technical field of identity authentication and information security, in particular to an SM2 ring signature scheme with revocable and anonymity. According to the scheme, the data can be digitally signed while the privacy security of a signer is protected, and any user can verify the correctness of the digital signature. In addition, identity tracking is performed on the signer of the dishonor, the identity of the dishonor is exposed, and the possibility of occurrence of the dishonor behavior is reduced. When a signer executes a signature process, the signer must firstly send a unique identity tag ID to a third party, and the third party adds the ID into a set L and returns a signature parameter R to the signer. And the signer executes an SM2 ring signature algorithm with revocation and anonymity by using the R to generate a digital signature and a revocation label. And the user requests to use the data, discovers that the data has problems in the use process, requests the third party to cancel the anonymity of the signer, executes a signature cancel algorithm by using a cancel label, and returns the identity of the signer, so that the real signer is exposed.

The invention belongs to the technical field of information security, and particularly relates to a decentralized traceable ring signature method and system based on a block chain. The method comprises the following steps: S1, generating global parameters through a system initializer, and respectively generating respective key pairs for a signature user and a tracer group; s2, constructing and generating a traceable ring signature according to respective key pairs of the signature user and the tracer group generated in the step S1; and S3, when the identity of the signer needs to be revealed, submitting a secret key share by a traceability reaching a set threshold, jointly recovering the traceability, and positioning a real signature user according to the traceable ring signature. The method has the advantages of being safer, more reliable and more transparent, meeting the decentration principle and meanwhile being capable of guaranteeing anonymity of user data processing.

The invention discloses a federal recommendation privacy protection method based on ring signature and selective aggregation, which realizes anonymization privacy protection and selective aggregation in a federal learning process through an innovative double-server architecture and a hierarchical security mechanism. The method comprises the following steps: 1) deploying an aggregation server and a security server in a system initialization stage, and completing parameter initialization and key distribution; 2) the client executes local model training, and anonymization privacy protection uploading is realized by adopting a ring signature technology; 3) the security server performs selective aggregation of credibility verification, and completes grouping and parameter fusion based on user similarity; and 4) ensuring the completeness and source credibility of model updating through a hierarchical security parameter distribution mechanism. While the recommendation precision is ensured, the user identity leakage and privacy tracking are effectively prevented, the comprehensive security guarantee is provided for the federal recommendation system, and the method has the advantages of low calculation overhead and high communication efficiency.

The invention relates to the technical field of block chains, in particular to a method and a system for realizing unified security and credible authentication of multiple accounts based on a block chain technology, and the method comprises the steps: generating a globally unique decentralized identity (DID) and an asymmetric key pair through a digital identity wallet, and carrying out the uplink storage of DID related information; establishing a binding relationship between the DID and the multi-platform account through the smart contract, and keeping a tamper-proof record; when an external platform initiates an authentication challenge, a user signs a response through a private key, and the smart contract verifies the signature legality and the binding relationship; all the operation logs are chained through the auditing module to form a traceable track, and privacy protection is achieved in combination with technologies such as zero-knowledge proof and ring signature. The system solves the problems of account dispersion, mutual trust insufficiency, privacy disclosure and the like in a traditional centralized authentication system, has the advantages of cross-platform unified authentication, security and counterfeiting resistance, autonomous identity control of a user, audibility, expandability and the like, and is suitable for multiple scenes such as government affairs, finance, education, Internet of Things and the like.

The invention belongs to the technical field of federated learning privacy protection, and discloses an anonymous and Byzantine robust federated learning privacy protection method and system with safe and efficient aggregation. Firstly, the invention provides a single mask protocol, which not only can effectively protect the security of privacy data, but also improves the aggregation efficiency. And then, anonymous ring signature and secure shuffling are used, so that the metadata of the client message is eliminated while the identity of the client is ensured to be legal, and the legality and anonymity of the identity of the client are ensured at the same time. The invention also realizes a baffle mechanism for malicious update, so that the influence of the malicious update on the global model can be ignored, thereby realizing Byzantine robustness.

The invention provides an anti-quantum security-oriented identity-based multivariable ring signature method and system. The system comprises a key distribution module, a signature end module and a verification end module, completing identity mapping according to the user identity information, and generating a private key pair of the user; the signature user constructs a signature ring, generates an anonymous signature and outputs a signature vector; and the verifier verifies the signature and judges whether the signature is valid or not. According to the method, an identity-based signature mechanism and a UOV structure are fused, the signature efficiency and deployment flexibility of the system in a post-quantum environment are improved, the capability of resisting quantum computing threats is achieved, currently known multivariate algebraic attacks can be effectively prevented, and high security guarantee is achieved; according to the method, a ring signature mechanism is introduced, any members in the ring are supported to generate verifiable signatures, identity information of the members is effectively hidden, the method is particularly suitable for application scenes with high requirements for signer privacy, and the method has the advantages of being untraceable for signers, lightweight in public keys, resistant to quantum attacks and the like.

The present invention proposes an anonymous cloud auditing method that supports dynamic aggregation of tags. It can not only achieve anonymous privacy protection for data uploaders but also dynamically aggregate tags according to the system operation status to improve storage efficiency. It mainly consists of the following steps: system initialization stage, key generation stage, tag generation stage, challenge stage, response stage, verification stage, and also includes the following optional steps: key expansion stage, aggregation stage. This method has the following characteristics: 1. It does not rely on ring signature or group signature technology to achieve the anonymous privacy protection function of data uploaders. A data tag is composed of only one group element before aggregation; 2. It supports aggregation operations on data tags. Multiple data tags can be aggregated into one tag to reduce storage overhead. The aggregated tags can execute the normal audit process without the need to verify the aggregated multiple index positions as a whole. That is, it can audit one or more specific positions after the aggregation of multiple tag index positions.

The invention discloses a ring signature method, device and equipment and a computer readable storage medium, which are applied to the technical field of information security, and the method comprises the following steps: a prover generates a public and private key pair corresponding to each ring member based on security parameters; the certifier constructs a set membership certification protocol based on the public and private key pair, the private key ownership certification, the ring membership certification and the to-be-signed message corresponding to each ring member, and determines signature information based on the set membership certification protocol; the private key ownership certificate is a relational expression for proving that a signer has a private key by utilizing zero knowledge; the ring member qualification proof is a relational expression which proves that the public key belongs to a given ring member public key set; and the verifier verifies the signature information to obtain a verification result. According to the method and the device, the ring member identity certification is realized by utilizing the set membership certification protocol, and the use requirements of the existing ring signature on the Merkle tree and the Merkle certification are avoided, so that the signature process is simplified, and the signature efficiency is improved.

This invention discloses a post-quantum secure linkable ring signature method and system resistant to internal attacks, comprising: a first service device generating public parameters; each user device generating its own public-private key pair using the public parameters and sending its public key to the first service device for registration; the first service device verifying all received identity information and forming a public key ring from the public keys of all verified user devices and making it public; when any user device needs to send a message to a second service device, it generates a ring signature containing a linkable tag based on its own private key, the message, and the public key ring, and sends the ring signature and the message to the second service device; the second service device performing security verification on each ring signature and, after successful verification, verifying whether different ring signatures belong to the same user device based on the linkable tag. This invention can protect user privacy in anonymous scenarios, enable multiple signatures from the same user, and resist attacks from within.

The embodiment of the invention provides a lightweight lattice-based ring signature method suitable for a satellite network. The method is applied to the technical field of information security and comprises the steps that a ground control center generates system public parameters; the user generates a complete signature key pair based on the NTRU grid, and a compression verification identifier for the identity identifier is obtained through calculation of a complete signature public key; the ground control center constructs a gridding user set by using a space-time fragmentation technology, calculates Merkle tree roots as ring fingerprints and distributes the ring fingerprints to satellites; the user generates an anti-replay ring signature and member proof in combination with ephemeris information and spatio-temporal context; the satellite node executes lightweight rapid pre-verification according to the time, the position and the ring fingerprint; and the ground control center executes complete ring signature and membership verification. The method effectively solves the contradiction between limited satellite network resources and high-security requirements, and has the capability of resisting quantum computing attack.

The invention discloses a privacy protection data aggregation method and device of a distributed system, equipment and a medium, and relates to the technical field of computers. Comprising the following steps: determining a target ring signature algorithm, and sending the target ring signature algorithm to a plurality of terminal nodes connected with an aggregator; a fully homomorphic encryption algorithm and a fully homomorphic encryption public key corresponding to the control center are obtained from the control center, and the fully homomorphic encryption algorithm and the fully homomorphic encryption public key are sent to a plurality of terminal nodes connected with the aggregator; obtaining a target message from a plurality of terminal nodes based on a preset time period, and performing data aggregation operation on the target message by using a target signature algorithm to obtain a corresponding aggregated message; and sending the aggregation message to a control center to complete data aggregation. Therefore, a more complex aggregation mode can be realized, and when the terminal node is offline, the control center can recover the aggregation data of the node without extra communication overhead.

The present disclosure provides a method for generating an isogeny-based ring signature. The method includes executing a setup algorithm to establish public parameters includ¬ ing a base elliptic curve, generating key pairs for a plurality of users, and executing a signing algorithm by a signer. The signing algorithm involves selecting a random isogeny, iteratively computing isogenies, scalar values, basis points, subgroups, and additional isogenies for users in a ring, computing signer-specific isogenies and subgroups, deriving a dual isogeny, and outputting a ring signature comprising the computed isogenies and basis points. The method enables generation of an anonymous ring signature based on isogeny computations over elliptic curves, providing enhanced security in cryptographic systems.

Embodiments of the present application disclose a data processing method and system in a smart grid based on a blockchain, the method comprising: each service node in a smart grid platform jointly generating a system public parameter; a user node sending a key acquisition application to the smart grid platform; if the identity information of the user node is authenticated by each service node, each service node jointly calculates partial key information and user secret share information, and the smart grid platform returns the partial key information and the user secret share information to the user node; the user node generates a key according to the partial key information and the user secret share information, selects a user node identifier set to generate a ring signature on power data, and sends the power data with the ring signature to a power center device; the power center device first verifies the ring signature of the received power data, and after verification, stores the power data to a blockchain, thereby ensuring the security and tamper resistance of the power data.

The invention discloses a security key processing method and device, a storage medium and an electronic device, and relates to the technical field of information security. The security key processing method comprises the following steps: receiving a signature request sent by a signature requester; in response to the signature request, generating a first random number, and selecting a group of target micro-services from the micro-service set; transmitting the first key derivation information and the first random number to a group of target micro-services through a micro-service bus, so that the group of target micro-services perform ring signature on the first key derivation information by using the first random number and a ring signature private key of the group of target micro-services; and under the condition that first signature information returned by the group of target micro-services is received, sending a signature response message to the signature requester. Through application of the method and the device, the problem that the identity exposure risk is relatively high in a security key processing method in the related technology is solved, and the effect of improving the security of the signature information is further achieved.

The invention discloses a data security transmission method and device, equipment and a storage medium, and relates to the technical field of information security, and the method comprises the steps: obtaining a data transmission parameter generated based on a ring signature in a block chain network, generating a target key pair of each transaction party, generating corresponding hidden address information based on the data transmission parameter and a public key of a receiver, and transmitting the hidden address information to the block chain network; encrypting the to-be-transmitted data according to the waiting party public key, the hidden address information and the transmitting party key pair; generating data supervision information of the to-be-transmitted data and identity supervision information of the receiver public key based on the supervisor public key; data transmission content is constructed according to the hidden address information, the to-be-transmitted data ciphertext, the data supervision information and the identity supervision information, the supervision party verifies the data transmission content based on the supervision party private key and the supervision list, and after it is judged that the identities of the data transmission party and the data receiving party are correct, the data transmission party completes data transmission through the block chain network. Privacy protection and supervision auditing of data can be balanced, and recovery and supervision of transmission data are realized.

Embodiments of the present application provide a service request verification method and device, electronic equipment and storage medium. The method comprises: based on the service application request of a user, signing a set data packet using a user private key to generate a first target signature; sending the first target signature to an authorized end to enable the authorized end to verify the first target signature, and in the case where the verification is passed, signing the identity label, set commitment protocol parameters and proof type label using an authorized end private key to generate a second target signature; based on the service application request, generating range proof information according to a ring signature range proof protocol, signing the identity label and range proof information using a user private key to generate a third target signature, and sending the third target signature to a service provider end to enable the service provider end to verify the third target signature based on the second target signature through an identity verification end. The present application has high security.

A method and a system for eliminating digital signing delays in online conferences can be configured to provide the integration of the digital signature concept into online conferences. According to the invention, during a conference, a set of people is considered which want to agree on an idea or a document that is distributed via screen sharing. After having the agreement of all the people in the conference, it is possible to automatically sign the document either independently or using a digital ring signature.

According to the double-blind information distribution method, device and computer readable storage medium provided by the scheme, the client sends a privacy information request carrying a ring signature to the system server; the system server sends a random number set corresponding to the overall privacy information and a system public key to the client; the client generates an encryption ciphertext public key according to a target random number in the random number set and the system public key, and sends the encryption ciphertext public key to the system server; the system server generates an encryption function according to the encryption ciphertext public key, and sends an information ciphertext including the encryption function and the overall privacy information to the client; the client calculates a ciphertext decryption public key corresponding to the system public key and a preset user decryption private key through elliptic curve multiplication, and obtains the privacy information corresponding to the ciphertext decryption public key in the information ciphertext according to the ciphertext decryption public key. Through the implementation of the scheme, the system server and the client are double-blind, and the security of the user and system privacy information is ensured.

The present application relates to a kind of logistics security management method and system based on big data environment application, for each user is assigned unique user public key, according to the position of recipient public key in public key ring generates first public key sequence, recipient further extracts part of public key in sequence to generate second public key sequence for executing signing authentication function, and using second public key sequence is signed for the order identification associated, and the identity of the signature is confirmed by the ring signature data feedbacked by the terminal of recipient in logistics management center, the order identification associated by the identity information of signature is compared with signature content in local storage, if match is consistent, it can be judged that current logistics order is personally signed by recipient, using ring signature completes logistics signing operation, it has unconditional anonymity to outside, only logistics management center can identify the real identity of the signer inside, while avoiding the information of signature being leaked, prevent signature forgery, realizes safe signing.

This invention belongs to the field of information security technology, specifically to a decentralized traceable ring signature method and system based on blockchain. The method comprises: S1, generating global parameters through a system initializer and generating key pairs for the signing user and the tracer group; S2, constructing and generating a traceable ring signature based on the key pairs generated in step S1 for the signing user and the tracer group; S3, when the identity of the signer needs to be revealed, tracers who meet a set threshold submit key shares, jointly restore traceability, and locate the true signing user based on the traceable ring signature. This invention is more secure, reliable, transparent, and conforms to the principle of decentralization, while also ensuring the anonymity of user data processing.

The invention discloses a timed anonymous ring traceability method based on a smart contract, and belongs to the technical field of data security and block chains. In the system initialization stage, a fully homomorphic encryption and ring signature key pair is generated, and public parameters are disclosed; the block chain node cooperatively generates an RSA modulus N through homomorphic encryption; a user selects a public key to form a signature ring, generates a ring signature by using a private key of the user, calculates a decryption parameter r in combination with a timestamp T, encrypts the public key of the user, and publishes and synchronizes the public key to the smart contract; when the time reaches T, the smart contract calculates r through the same parameter, decrypts to obtain a user public key and publishes the user public key to complete identity traceability; through innovatively combining the block chain technology, the homomorphic encryption technology, the intelligent contract technology, the ring signature technology and the like, an efficient and safe solution with wide adaptability is provided, and the method has a good application prospect and popularization value.

This application provides a blockchain creation method, apparatus, device, storage medium, and program product, relating to the field of blockchain technology. The method includes: receiving a blockchain creation request sent by a user terminal, wherein the blockchain creation request includes creation information and a ring signature result, wherein the creation information includes configuration parameters and a consortium node identifier; sending the creation information and the ring signature result to the consortium node terminal corresponding to the consortium node identifier, so that the consortium node terminal verifies the ring signature result and obtains a verification result; if the verification result is normal, outputting creation information; receiving decision results sent by each consortium node terminal based on the creation information; if all decision results are in agreement, creating a new blockchain using the configuration parameters. This method creates a blockchain through a blockchain-based blockchain creation process, increasing the security of the blockchain creation process.

A ring signature system according to one aspect of the present disclosure comprises: a plurality of member terminals belonging to a ring signature group; and a verifier terminal for verifying a ring signature. The member terminal includes a key generation unit configured to generate a public key and a private key of lattice encryption as a verification key and a signature key, respectively, and a signature generation unit configured to generate a signature for a message via a combinable ring signature to which a Schnorr signature is applied, by using its own signature key and a verification key of another member terminal. The verifier terminal includes a verification unit configured to verify the signature by using the verification key of the member terminal and the message.

The invention relates to an SM2 ring signature method based on a constant-level signature size, a digital signature technology effectively ensures the authenticity, integrity and identity verifiability of communication data, but in the scenes of anonymous voting, anonymous payment and the like, a traditional digital signature leaks sensitive information. And the ring signature can hide the signer in the user group, so that the privacy of the signer can be effectively protected. Due to the fact that the size of most existing ring signatures and the number of ring members are in a linear increasing relation, research proposes that a bilinear pair accumulator is used for achieving constant-level ring signatures, and many constant-level ring signature schemes appear subsequently and are also achieved based on bilinear pairing. However, a standard elliptic curve used by the domestic password SM2 does not support bilinear pairing, and the constant-level ring signature of the SM2 cannot be realized, so that through the fusion design of the RSA accumulator and the SM2 signature, the constant signature size is realized while the compatibility of the domestic password algorithm is kept.

This invention relates to the field of blockchain consensus and discloses a dual-master node Byzantine Fault-Tolerant Consensus method based on a reputation evaluation model. This method aims to solve the problems of centralized power among master nodes and privacy leaks in communication in the traditional PBFT algorithm. The technical solution includes establishing a multi-dimensional reputation evaluation model and dynamically electing master nodes P1 and P2 based on node reputation. Master node P1 is responsible for generating and broadcasting pre-prepared messages, while master node P2 is responsible for receiving replica votes and performing threshold judgments, achieving mutual checks and balances through a power separation mechanism. A linkable ring signature technology is introduced into the consensus interaction; replica nodes generate key mirrors and vote anonymously, and the verification master node deduplicates votes based on the key mirror set to prevent duplicate voting. This method effectively improves the security and privacy protection capabilities of the consensus system, reduces centralization risks, and is suitable for consortium blockchains and distributed systems with high security requirements.

The application discloses a periodic non-repudiation ring signature method and system based on an SM9 national encryption algorithm, relates to the technical field of ring signature and information security, and comprises the following steps: S1, initializing public parameters and a master key pair; S2, generating a signer private key according to the identity of a signer; S3, the signer selects ring members participating in signature to form a ring group, the ring group signs a message according to the signer private key, obtains a ring signature, and sends the message and the ring signature to a verifier; S4, the verifier verifies the ring signature, and if the verification is passed, the process proceeds to S5, otherwise, the signature is stopped; S5, the verifier sends a verification message to ring members in the ring group to confirm the signer. The application introduces a time period, realizes periodic non-repudiation ring signature, modifies a confirmation and denial algorithm, and ensures that the scheme can not only complete identity privacy protection, but also track a real signer without the participation of a trusted third party.

The application relates to a blockchain-based power grid IT asset data management method and device. Based on a data governance platform, the extraction of IT asset data of multiple business systems is realized, and ring signature generation is carried out. When the IT asset data is chained, the blockchain platform responds to the data chaining request of the data governance platform, verifies the ring signature, and when the verification is passed, the blockchain platform and the data governance platform are linked, and the IT asset data is chained and stored. In the signature verification mode before chaining, the data is chained based on the blockchain between the blockchain platform and the data governance platform. The ring label is generated through the shorthand selection, which can protect user privacy and prevent data tampering. The efficiency of the ring signature in this mode can be guaranteed, which is beneficial to realizing the data governance efficiency of massive asset data management in the power grid scenario.

The embodiment of the invention provides a data verification method and equipment, and the method comprises the steps: determining a minimum node set covering a target interval in a perfect binary tree structure, so as to represent the target interval through a plurality of nodes. And extracting a bit with a specific length from the to-be-verified data, and determining a first integer corresponding to each node. And constructing a target set based on the plurality of first integers and the to-be-verified data, calculating an auxiliary value of each pair of adjacent elements in the target set, and generating sub-evidences based on the auxiliary values and the commitment values of each pair of adjacent elements, so as to verify the association relationship between the adjacent elements through the sub-evidences. A decimal numerical value corresponding to each node and a first commitment value of a first integer corresponding to each node are used to construct a public key corresponding to each node, and a real private key matched with the node is used for ring signature, so that the ring signature can be realized on the premise of not exposing a specific numerical value. And proving that the to-be-verified data is located in any specified interval to the data verification end.