67 results about "Ring signature" patented technology

The invention discloses a federal recommendation privacy protection method based on ring signature and selective aggregation, which realizes anonymization privacy protection and selective aggregation in a federal learning process through an innovative double-server architecture and a hierarchical security mechanism. The method comprises the following steps: 1) deploying an aggregation server and a security server in a system initialization stage, and completing parameter initialization and key distribution; 2) the client executes local model training, and anonymization privacy protection uploading is realized by adopting a ring signature technology; 3) the security server performs selective aggregation of credibility verification, and completes grouping and parameter fusion based on user similarity; and 4) ensuring the completeness and source credibility of model updating through a hierarchical security parameter distribution mechanism. While the recommendation precision is ensured, the user identity leakage and privacy tracking are effectively prevented, the comprehensive security guarantee is provided for the federal recommendation system, and the method has the advantages of low calculation overhead and high communication efficiency.

The invention relates to the technical field of block chains, in particular to a method and a system for realizing unified security and credible authentication of multiple accounts based on a block chain technology, and the method comprises the steps: generating a globally unique decentralized identity (DID) and an asymmetric key pair through a digital identity wallet, and carrying out the uplink storage of DID related information; establishing a binding relationship between the DID and the multi-platform account through the smart contract, and keeping a tamper-proof record; when an external platform initiates an authentication challenge, a user signs a response through a private key, and the smart contract verifies the signature legality and the binding relationship; all the operation logs are chained through the auditing module to form a traceable track, and privacy protection is achieved in combination with technologies such as zero-knowledge proof and ring signature. The system solves the problems of account dispersion, mutual trust insufficiency, privacy disclosure and the like in a traditional centralized authentication system, has the advantages of cross-platform unified authentication, security and counterfeiting resistance, autonomous identity control of a user, audibility, expandability and the like, and is suitable for multiple scenes such as government affairs, finance, education, Internet of Things and the like.

This invention discloses a post-quantum secure linkable ring signature method and system resistant to internal attacks, comprising: a first service device generating public parameters; each user device generating its own public-private key pair using the public parameters and sending its public key to the first service device for registration; the first service device verifying all received identity information and forming a public key ring from the public keys of all verified user devices and making it public; when any user device needs to send a message to a second service device, it generates a ring signature containing a linkable tag based on its own private key, the message, and the public key ring, and sends the ring signature and the message to the second service device; the second service device performing security verification on each ring signature and, after successful verification, verifying whether different ring signatures belong to the same user device based on the linkable tag. This invention can protect user privacy in anonymous scenarios, enable multiple signatures from the same user, and resist attacks from within.

The embodiment of the invention provides a lightweight lattice-based ring signature method suitable for a satellite network. The method is applied to the technical field of information security and comprises the steps that a ground control center generates system public parameters; the user generates a complete signature key pair based on the NTRU grid, and a compression verification identifier for the identity identifier is obtained through calculation of a complete signature public key; the ground control center constructs a gridding user set by using a space-time fragmentation technology, calculates Merkle tree roots as ring fingerprints and distributes the ring fingerprints to satellites; the user generates an anti-replay ring signature and member proof in combination with ephemeris information and spatio-temporal context; the satellite node executes lightweight rapid pre-verification according to the time, the position and the ring fingerprint; and the ground control center executes complete ring signature and membership verification. The method effectively solves the contradiction between limited satellite network resources and high-security requirements, and has the capability of resisting quantum computing attack.

The present disclosure provides a method for generating an isogeny-based ring signature. The method includes executing a setup algorithm to establish public parameters includ¬ ing a base elliptic curve, generating key pairs for a plurality of users, and executing a signing algorithm by a signer. The signing algorithm involves selecting a random isogeny, iteratively computing isogenies, scalar values, basis points, subgroups, and additional isogenies for users in a ring, computing signer-specific isogenies and subgroups, deriving a dual isogeny, and outputting a ring signature comprising the computed isogenies and basis points. The method enables generation of an anonymous ring signature based on isogeny computations over elliptic curves, providing enhanced security in cryptographic systems.

Embodiments of the present application disclose a data processing method and system in a smart grid based on a blockchain, the method comprising: each service node in a smart grid platform jointly generating a system public parameter; a user node sending a key acquisition application to the smart grid platform; if the identity information of the user node is authenticated by each service node, each service node jointly calculates partial key information and user secret share information, and the smart grid platform returns the partial key information and the user secret share information to the user node; the user node generates a key according to the partial key information and the user secret share information, selects a user node identifier set to generate a ring signature on power data, and sends the power data with the ring signature to a power center device; the power center device first verifies the ring signature of the received power data, and after verification, stores the power data to a blockchain, thereby ensuring the security and tamper resistance of the power data.

The invention discloses a security key processing method and device, a storage medium and an electronic device, and relates to the technical field of information security. The security key processing method comprises the following steps: receiving a signature request sent by a signature requester; in response to the signature request, generating a first random number, and selecting a group of target micro-services from the micro-service set; transmitting the first key derivation information and the first random number to a group of target micro-services through a micro-service bus, so that the group of target micro-services perform ring signature on the first key derivation information by using the first random number and a ring signature private key of the group of target micro-services; and under the condition that first signature information returned by the group of target micro-services is received, sending a signature response message to the signature requester. Through application of the method and the device, the problem that the identity exposure risk is relatively high in a security key processing method in the related technology is solved, and the effect of improving the security of the signature information is further achieved.

The invention discloses a data security transmission method and device, equipment and a storage medium, and relates to the technical field of information security, and the method comprises the steps: obtaining a data transmission parameter generated based on a ring signature in a block chain network, generating a target key pair of each transaction party, generating corresponding hidden address information based on the data transmission parameter and a public key of a receiver, and transmitting the hidden address information to the block chain network; encrypting the to-be-transmitted data according to the waiting party public key, the hidden address information and the transmitting party key pair; generating data supervision information of the to-be-transmitted data and identity supervision information of the receiver public key based on the supervisor public key; data transmission content is constructed according to the hidden address information, the to-be-transmitted data ciphertext, the data supervision information and the identity supervision information, the supervision party verifies the data transmission content based on the supervision party private key and the supervision list, and after it is judged that the identities of the data transmission party and the data receiving party are correct, the data transmission party completes data transmission through the block chain network. Privacy protection and supervision auditing of data can be balanced, and recovery and supervision of transmission data are realized.

According to the double-blind information distribution method, device and computer readable storage medium provided by the scheme, the client sends a privacy information request carrying a ring signature to the system server; the system server sends a random number set corresponding to the overall privacy information and a system public key to the client; the client generates an encryption ciphertext public key according to a target random number in the random number set and the system public key, and sends the encryption ciphertext public key to the system server; the system server generates an encryption function according to the encryption ciphertext public key, and sends an information ciphertext including the encryption function and the overall privacy information to the client; the client calculates a ciphertext decryption public key corresponding to the system public key and a preset user decryption private key through elliptic curve multiplication, and obtains the privacy information corresponding to the ciphertext decryption public key in the information ciphertext according to the ciphertext decryption public key. Through the implementation of the scheme, the system server and the client are double-blind, and the security of the user and system privacy information is ensured.

The present application relates to a kind of logistics security management method and system based on big data environment application, for each user is assigned unique user public key, according to the position of recipient public key in public key ring generates first public key sequence, recipient further extracts part of public key in sequence to generate second public key sequence for executing signing authentication function, and using second public key sequence is signed for the order identification associated, and the identity of the signature is confirmed by the ring signature data feedbacked by the terminal of recipient in logistics management center, the order identification associated by the identity information of signature is compared with signature content in local storage, if match is consistent, it can be judged that current logistics order is personally signed by recipient, using ring signature completes logistics signing operation, it has unconditional anonymity to outside, only logistics management center can identify the real identity of the signer inside, while avoiding the information of signature being leaked, prevent signature forgery, realizes safe signing.

The invention discloses a timed anonymous ring traceability method based on a smart contract, and belongs to the technical field of data security and block chains. In the system initialization stage, a fully homomorphic encryption and ring signature key pair is generated, and public parameters are disclosed; the block chain node cooperatively generates an RSA modulus N through homomorphic encryption; a user selects a public key to form a signature ring, generates a ring signature by using a private key of the user, calculates a decryption parameter r in combination with a timestamp T, encrypts the public key of the user, and publishes and synchronizes the public key to the smart contract; when the time reaches T, the smart contract calculates r through the same parameter, decrypts to obtain a user public key and publishes the user public key to complete identity traceability; through innovatively combining the block chain technology, the homomorphic encryption technology, the intelligent contract technology, the ring signature technology and the like, an efficient and safe solution with wide adaptability is provided, and the method has a good application prospect and popularization value.

This application provides a blockchain creation method, apparatus, device, storage medium, and program product, relating to the field of blockchain technology. The method includes: receiving a blockchain creation request sent by a user terminal, wherein the blockchain creation request includes creation information and a ring signature result, wherein the creation information includes configuration parameters and a consortium node identifier; sending the creation information and the ring signature result to the consortium node terminal corresponding to the consortium node identifier, so that the consortium node terminal verifies the ring signature result and obtains a verification result; if the verification result is normal, outputting creation information; receiving decision results sent by each consortium node terminal based on the creation information; if all decision results are in agreement, creating a new blockchain using the configuration parameters. This method creates a blockchain through a blockchain-based blockchain creation process, increasing the security of the blockchain creation process.

This invention relates to the field of blockchain consensus and discloses a dual-master node Byzantine Fault-Tolerant Consensus method based on a reputation evaluation model. This method aims to solve the problems of centralized power among master nodes and privacy leaks in communication in the traditional PBFT algorithm. The technical solution includes establishing a multi-dimensional reputation evaluation model and dynamically electing master nodes P1 and P2 based on node reputation. Master node P1 is responsible for generating and broadcasting pre-prepared messages, while master node P2 is responsible for receiving replica votes and performing threshold judgments, achieving mutual checks and balances through a power separation mechanism. A linkable ring signature technology is introduced into the consensus interaction; replica nodes generate key mirrors and vote anonymously, and the verification master node deduplicates votes based on the key mirror set to prevent duplicate voting. This method effectively improves the security and privacy protection capabilities of the consensus system, reduces centralization risks, and is suitable for consortium blockchains and distributed systems with high security requirements.

The application discloses a periodic non-repudiation ring signature method and system based on an SM9 national encryption algorithm, relates to the technical field of ring signature and information security, and comprises the following steps: S1, initializing public parameters and a master key pair; S2, generating a signer private key according to the identity of a signer; S3, the signer selects ring members participating in signature to form a ring group, the ring group signs a message according to the signer private key, obtains a ring signature, and sends the message and the ring signature to a verifier; S4, the verifier verifies the ring signature, and if the verification is passed, the process proceeds to S5, otherwise, the signature is stopped; S5, the verifier sends a verification message to ring members in the ring group to confirm the signer. The application introduces a time period, realizes periodic non-repudiation ring signature, modifies a confirmation and denial algorithm, and ensures that the scheme can not only complete identity privacy protection, but also track a real signer without the participation of a trusted third party.

The application relates to a blockchain-based power grid IT asset data management method and device. Based on a data governance platform, the extraction of IT asset data of multiple business systems is realized, and ring signature generation is carried out. When the IT asset data is chained, the blockchain platform responds to the data chaining request of the data governance platform, verifies the ring signature, and when the verification is passed, the blockchain platform and the data governance platform are linked, and the IT asset data is chained and stored. In the signature verification mode before chaining, the data is chained based on the blockchain between the blockchain platform and the data governance platform. The ring label is generated through the shorthand selection, which can protect user privacy and prevent data tampering. The efficiency of the ring signature in this mode can be guaranteed, which is beneficial to realizing the data governance efficiency of massive asset data management in the power grid scenario.

This invention discloses a conditionally traceable ring signature method, system, electronic device, and storage medium. The method includes: setting system parameters; generating keys for the user and the anonymous revocation authority based on the digital signature algorithm and system parameters; generating a ring signature based on the keys; verifying the ring signature, outputting a first predetermined result if the verification passes, and outputting a second predetermined result if the verification fails; linking the ring signatures, and determining whether to add the ring signature to a signature list based on the ring signature link; if the ring signature appears in the signature list, and the anonymous revocation authority wants to recover the signing public key using its private key, it substitutes the private key of the anonymous revocation authority into a pre-mixed set of public keys to trace the public key of the actual signer; the ring signature algorithm of this invention incorporates a signature list function, enabling the anonymous revocation authority to revoke the anonymity of ring signatures in the signature list only, thereby reducing the authority of the anonymous revocation authority and achieving partial traceability of the ring signature.

This invention discloses a method for protecting CA privacy in a blockchain-based PKI system. The method first generates a user's private and public keys, along with corresponding parameters, and the issuing CA generates a chainable ring signature for message m. Next, the domain owner performs certificate registration and requests certificate renewal from the ring CA before the certificate expires. Upon successful verification, the certificate is renewed for the domain owner. Then, if the domain owner's personal information changes, or if the certificate's private key is lost or leaked, the domain owner requests certificate revocation from the ring CA. Upon successful verification, the certificate is revoked for the domain owner. Finally, when a client initiates a TLS connection request to the domain, the client verifies the validity and authenticity of the certificate. Upon successful certificate verification, the client establishes a TLS connection with the domain. This invention prevents attackers from launching attacks against the issuing CA of high-value target domains, improves the security of the PKI system, and enhances the efficiency of rapid certificate response.

The invention discloses a lattice-based linkable linear homomorphic ring signature method. The method comprises the steps of system initialization, user key generation, ring signature generation, ring signature verification, signature link judgment and homomorphic signature combination and verification. According to the method, a ring public key with a fixed size is constructed through trap door derivation and matrix aggregation technologies, so that the problem of linear increase of storage overhead when the ring scale is expanded is solved, and the storage efficiency is remarkably improved; and meanwhile, by utilizing a link label mechanism based on a fault-tolerant learning problem, association judgment of signatures generated by the same signer is realized on the premise of protecting the anonymity of the signer, and verifiability and supervision are provided for data calculation in an anonymous environment.

This invention discloses a decentralized, traceable ring signature authentication method, system, and storage medium. The ring signature result is verified against a public key vector to confirm the legitimacy of the signer corresponding to the ring signature result. If the ring signature result passes verification and the number of users agreeing to trace it is greater than or equal to a threshold, the index of the signer members can be obtained through the fragmented private keys of the traced users, thereby completing the traceability operation. The technical solution of this invention provides anonymity and decentralized traceability for signers, improving the security and reliability of digital signatures.

Embodiments include systems and methods for searching, tracing, and tracking Monero transaction chains. An exemplary method includes receiving, at a user interface using a plurality of Monero transaction menus, Monero transaction identification data for searching, tracing, and tracking Monero transaction chains. The method also includes determining, at the server computing device, an input of the Monero transaction identification data and an output of the Monero transaction identification data. The method also includes analyzing, at the server computing device, the input of the Monero transaction identification data determining a ring signature of the input of the Monero transaction identification data, the ring signature may include a plurality of decoys and a spendable and valid input. The method also includes generating, with a processor, a user interface displaying the plurality of decoys and the spendable and valid input.

The application discloses a privacy protection method for finding maximum and minimum values in a decentralized scene based on a block chain, and relates to the fields of block chains and privacy calculation. S1: each participant determines a data range containing data held by all participants through a ring signature algorithm based on a block chain; S2: the data range is divided into a plurality of intervals, each participant checks whether the participant has data belonging to the interval from one side of the boundary, and exchanges checking information through privacy calculation, so that the maximum and minimum value intervals are found; and S3: the maximum and minimum values under ideal accuracy are found by continuously dividing the intervals in S2 and repeatedly performing S2.

The invention relates to an auditing-supporting SM2 linkable ring signature generation and verification method, and provides an auditing-supporting SM2 linkable ring signature generation and verification method for solving the problem that a current SM2-based linkable ring signature does not have the function of tracing a signer implementing improper behaviors. The anonymity and linkability of the original linkable ring signature are ensured, and the signer can be traced in time when carrying out improper behaviors, so that the method has practical application value; auditing performance is increased for the linkable ring signature based on SM2, and a supervisor is allowed to use an auditing private key to unconditionally track an actual signer of the ring signature; according to the scheme, the anonymity of the signer is still ensured, the entity without the audit private key cannot trace the identity of the signature user from the signature result, and the confidentiality effect is good.

The present application relates to a kind of blockchain-based vehicle networking energy security transaction method, belong to vehicle networking and distributed energy transaction field.The method aims at solving the problem of fair pricing under asymmetric information, user privacy protection and transaction efficiency.The gist is that: authority issues certificate for vehicle and roadside unit;Vehicle node signs broadcast transaction request;Roadside unit verifies and broadcasts demand and collects response, then triggers smart contract;The contract is based on bayesian Nash equilibrium model, and the optimal equilibrium transaction volume and price are obtained by solving the first-order condition of maximum expected utility, to realize automatic matching;Identity and data privacy are protected by combining ring signature and zero-knowledge proof;Hybrid consensus mechanism is used to improve efficiency;Finally, deposit escrow, settlement and default handling are automatically completed by contract.The method is used to build decentralized, safe and reliable vehicle networking energy transaction market.

The invention discloses a trusted anonymous voting system based on privacy calculation, and belongs to the technical field of privacy calculation and cryptography. The system comprises a user identity information acquisition module used for acquiring user identity information including a name, a citizen identity card number ID and a handwritten signature; the digital authentication module is used for verifying the identity of an operator according to the received user identity information and the user public key, performing face verification, verifying voting qualification through a trusted data source and generating a digital certificate Cert; the privacy verification module is used for receiving the digital certificate Cert, constructing a proof circuit based on a Groth16 protocol and generating a zero-knowledge proof pi; the proving circuit comprises a certificate validity verification sub-circuit and a voting qualification condition judgment sub-circuit, and the proving generation time is less than or equal to 200ms; the ring signature verification module comprises a block chain verification node and is used for receiving and verifying Cert and pi and generating a temporary session key SK after verification is passed; and the ring signature generation module is used for receiving the SK and generating a signature sigma by adopting an improved DLP-based ring signature algorithm.

The invention discloses a cloud network security protection linkage system and a use method, and relates to the technical field of zero-trust cloud network security protection. Comprising a cryptographic operation track holographic feature extraction module, a trust dimension dynamic anchoring module, a dynamic trust anchoring voucher generation module, a protection strategy pre-judgment linkage triggering module and a holographic track feedback self-optimization module which are connected in series in a closed loop mode. According to the method, the problems of password operation track waste, dynamic trust voucher missing, trust evaluation lagging and untimely protection linkage are solved by utilizing holographic track feature extraction, dynamic trust dimension anchoring, dynamic voucher generation supported by SM3 hash and SM9 ring signature, double protection linkage and feedback self-optimization closed-loop technology; real-time accurate trust evaluation, efficient threat interception and system adaptive optimization of the cloud network are realized, and data transmission and access security is guaranteed.

The application discloses a homologous-based traceable ring signature method and system, wherein the method comprises a key generation step, a signature generation step, a signature verification step and a signature tracing step, and the OR protocol and the FS conversion are introduced to construct a signature algorithm, while the correctness and linkability of the traceable ring signature are ensured, the function characteristic of traceability is met, and the system can be effectively instantiated by using different security level parameters of CSIDH. The application has the advantages of high security and small signature size, provides the tracing function on the basis of the linkable ring signature, can be widely applied to multiple application fields such as block chain anonymous voting and electronic cash systems, and can resist quantum attacks.

A kind of monitorable data flow transfer privacy protection method, including initialization phase: establishment center committee, user is registered in blockchain and center committee;Request negotiation phase: user and center committee negotiate service parameters;Agent service stage: user generates data fragment and conversion key, sends to center committee, carries out threshold agent re-encryption service, and the result is broadcasted on blockchain, and user receives own information and decrypts data;Supervision phase: center committee organizes regulatory agency to form consensus, and votes to decide whether to decrypt or not.This method uses ring signature and blockchain broadcast mode to break the link between data sender and data receiver, achieving privacy protection;Threshold agent re-encryption algorithm is used to protect the privacy of data and the mapping relationship between the two parties in the flow transfer process, and the informed consent and supervision power of the flow transfer process are distributed to multiple subjects by secret sharing, realizing fair supervision and access mechanism of seeking the consent of data owner.

The application relates to the technical field of blockchains, in particular to a smart contract chain on-line identity authentication permission authentication method and system. The method comprises the following steps: generating a private certificate that can be directly verified in a cipher domain by adopting Paillier homomorphic encryption and zero-knowledge proof technology; structurally storing the private certificate by adopting a hierarchical Merkle tree, and taking a root hash as an efficient on-line identity identifier; realizing cross-chain anonymous authentication by adopting ring signature, guaranteeing the privacy of interaction; after authentication, constructing a channel based on a two-way commitment and a time lock, and ensuring that the encryption attribute is safely and atomically exchanged between chains; and introducing a differential privacy mechanism, adding noise to an authentication log, and generating privacy protection data that can be used for safe auditing. The application scheme constructs a decentralized identity authentication system that has strong privacy protection, high security and cross-chain interoperability.

The invention discloses an identity tracing method and device for a ring signature in a transaction process. The method comprises the following steps: constructing a block chain system comprising a plurality of block chains and a notarist node independent of each block chain; the user randomly selects a first block chain, and the user and the key generation center respectively perform information interaction with the notarist node to verify the identity; a user initiates a first request for accessing a data node in a second block chain through a first block chain, and when a first cross-chain agent node monitors that the first request is located at the head of a task queue, the first request is audited and signature operation is executed on the first request by using a Sign signature algorithm and a user private key; the second block chain verifies the received first request of the first signature by using a Verify algorithm; and the notarist node regularly tracks and traces the signature operation. According to the method, malicious signatures can be tracked on the basis of resisting quantum attacks.

The application belongs to the field of cryptography, and particularly relates to a revocable lattice ring signature method with forward security, which constructs a ring signature system with quantum resistance based on a lattice cryptography, and comprises a trusted agency, a user and a verification party; the working process of the ring signature system comprises six main stages: a parameter initialization stage, a lattice key generation stage, a forward security update stage, a ring signature generation stage, a signature revocation verification stage and a signature correctness verification stage; the application realizes periodic update and revocation mechanism of short-term keys, and enhances the security and practicability of the signature system.