174 results about "Ring signature" patented technology

The invention belongs to the technical field of ring signature zero-knowledge proof, and discloses a block chain-based data sharing method and system, and the method comprises the steps: collecting heterogeneous data from different enterprises, determining the identity verification of each participant through a decentralized identity DID, and carrying out the preprocessing of the collected data; defining a smart contract on the block chain, allowing participants passing identity verification to execute operations by using ring signature zero-knowledge proof, and recording data operations on the block chain; a data encryption and casual transmission method is adopted to carry out secure transmission and decryption key transmission on the shared data; a data receiver initiates a sharing request based on a decentralized identity (DID) and uses a ring signature zero-knowledge proof to prove own authority; according to the method, the single-point fault risk is reduced through introduction of the ring signature zero-knowledge proof, the overall robustness and credibility are improved, and it is ensured that only strictly verified participants can execute data operation.

The invention relates to the technical field of data distributed storage, and discloses a distributed storage method and system for clinical test data, and the method comprises the steps: carrying out the ring signature encryption processing of the patient test data of a plurality of data centers, and obtaining a patient anonymization identifier and standardized clinical data; performing two-stage random storage node configuration to obtain an optimal storage node configuration scheme; constructing an LPPMM-DA data aggregation model based on the optimal storage node configuration scheme, and performing fragmentation processing on the patient test data to obtain a plurality of target data fragments; performing dynamic operation envelope analysis and alliance graph game calculation on the multiple target data fragments to obtain a storage resource scheduling scheme; according to the storage resource scheduling scheme and the anonymization identifier, distributed data block storage and access authentication are executed on the multiple target data fragments, data block storage distribution information is generated, a complete data access control system is constructed, and safe and reliable storage of clinical test data is ensured.

The invention provides a double-stream video conference privacy tracing method based on a block chain, and the method comprises the steps: building a tracing evidence obtaining model which comprises information uplink and tracing evidence obtaining; the information uploading comprises the following steps: in a video conference process, audio and video data and related conference information are uploaded to an interstellar file system for storage and verification after being subjected to encryption and signature processing through a threshold ring signature mechanism, and key evidence is uploaded to a block chain; the intelligent contract is used for automatically managing data storage; the traceability evidence obtaining comprises the following steps: after leaked picture information is obtained, detecting a traceability identifier in a video or a picture, and comparing the traceability identifier with information stored on a chain; a secret divulging block point is automatically tracked and positioned through an intelligent contract, and the real identity of a secret divulging party is decrypted. According to the method, tampering resistance, transparency, decentration and anonymity of chain information in the traceability evidence obtaining process are achieved, and automatic evidence obtaining and traceability operation is supported.

The invention discloses an anonymous identity authentication method and device, electronic equipment and a storage medium, and relates to the technical field of anonymous identity authentication or other related fields, and the method comprises the steps: obtaining a public key set containing a trusted user public key, and extracting a local private key of a target anonymous user; a ring signature is generated based on the public key set and the private key, certification information is generated based on the private key and the ring signature, the ring signature is used for certifying that the target anonymous user belongs to one of trusted users, and the certification information is used for certifying that the ring signature is legal; packaging the ring signature, the certification information and the timestamp identifier into an authentication request, submitting the authentication request to an authentication system, and returning an authentication result; and obtaining an identity authentication token indicating that authentication passes in the authentication result, and logging in the authentication system based on the identity authentication token. According to the method and the device, the technical problem of identity authentication failure caused by information leakage and unreliable authentication due to the fact that security attacks are easily encountered in the identity authentication process in related technologies is solved.

The invention discloses a privacy protection method, system and device for block chain network node audit management, and the method specifically comprises the steps: generating a node anonymous voucher for a candidate node, carrying out the privacy authentication, mapping the sensitive information of the authenticated candidate node into an irreversible cryptographic hash value, and storing the irreversible cryptographic hash value in a distributed key management node; constructing a dynamic credible auditing group, selecting verification nodes from the candidate nodes, and performing uplink evidence storage after BLS aggregation signature; performing privacy aggregation calculation on the node behavior data of the verification node to generate an audit score ciphertext; fine-grained access control is realized through attribute-based encryption, and a node reputation level is dynamically bound through an auditing strategy; adaptive noise is added to an audit result by adopting a differential privacy mechanism, and the epsilon-differential privacy constraint condition is met by dynamically adjusting the noise amount; in the reward and punishment execution stage, a ring signature and a stealth address technology are combined, so that reward and punishment records are unhooked from real identities of nodes, and meanwhile, the trade traceability is ensured.

The invention discloses a decentralized traceable ring signature authentication method and system, and a storage medium, and the method comprises the steps: carrying out the verification of a ring signature result and a public key vector, and verifying the legality of a signer corresponding to the ring signature result; and if the ring signature result passes verification and the number of the users agreeing to trace is greater than or equal to the threshold, obtaining the index of the signer member by tracing the fragment private key of the user, thereby completing the tracing operation. By adopting the technical scheme provided by the invention, the traceability of anonymity and decentralization can be provided for a signer, and the security and reliability of digital signature are improved.

Aiming at the problem existing in medical data sharing at present, the invention provides a linkable and traceable ring signature based on a double-ring signature. A signer is allowed to sign anonymously, and the real identity of the signer is traced for a group of signature links of the same signer if necessary. And a traceable medical data sharing model is provided based on an alliance chain in combination with an attribute encryption technology.

The invention relates to a distributed identity-based ring signature algorithm supporting malicious termination resistance and suitable for a block chain, which is characterized in that a threshold identity-based ring signature algorithm, a Joint-Shamir-RSS secret sharing algorithm, a KZG commitment algorithm and an information theory message verification code (IT-MAC) technology are fused. A threshold identity-based ring signature generation process and an anti-malicious termination function without participation of a trusted third party are realized. A main public key of a ring is generated by using a public key aggregation method, and safe and secret sharing of main and private keys is realized by combining a Joint-Shamir-RSS secret sharing algorithm and a KZG commitment algorithm, so that dependence on trusted KGC is eliminated; by introducing IT-MAC into a threshold identity-based ring signature algorithm, a data uploading node can effectively check the validity of a part of signatures generated by an assisting node, so that the function of resisting malicious termination is realized. The distributed signature scheme not only can provide an additional privacy protection function for a signer, but also has the capability of effectively resisting malicious termination, has higher security, and is suitable for being applied to a block chain system.

The invention relates to the technical field of identity authentication and information security, in particular to an SM2 ring signature scheme with revocable and anonymity. According to the scheme, the data can be digitally signed while the privacy security of a signer is protected, and any user can verify the correctness of the digital signature. In addition, identity tracking is performed on the signer of the dishonor, the identity of the dishonor is exposed, and the possibility of occurrence of the dishonor behavior is reduced. When a signer executes a signature process, the signer must firstly send a unique identity tag ID to a third party, and the third party adds the ID into a set L and returns a signature parameter R to the signer. And the signer executes an SM2 ring signature algorithm with revocation and anonymity by using the R to generate a digital signature and a revocation label. And the user requests to use the data, discovers that the data has problems in the use process, requests the third party to cancel the anonymity of the signer, executes a signature cancel algorithm by using a cancel label, and returns the identity of the signer, so that the real signer is exposed.

The invention discloses a transaction trajectory processing method, which comprises the following steps of: S1, performing identity authentication on a user, and verifying the identity by using an asymmetric encryption technology; s2, recording an operation behavior, and generating a record containing a hash value of a previous operation record; s3, carrying out signature confirmation on the record, and storing the record in a chain type data structure by using a multi-ring signature chain encryption algorithm to form an irreversible chain; s4, recording application and approval operations in transaction processing, and generating a transaction chain; s5, a time sequence consistency consensus algorithm is adopted to ensure that all the nodes are consistent; s6, storing the chain in a distributed account book; s7, when a tampering attempt is detected, performing anomaly detection and preventing tampering by using a multi-dimensional behavior analysis detection algorithm; and S8, auditing the suspicious operation record and generating an auditing conclusion. Through encryption and a consensus algorithm, data tampering resistance and operation traceability are ensured, and system security is improved.

The invention relates to a linkable double-ring signature method, device and equipment based on an NTRU lattice and a medium, and the method comprises the steps: a server side generates a signature link label I < pi > based on a user identity id < pi > corresponding to a ring member user < pi > when the ring member user < pi > signs a message m, generating a signature sigpi according to a user private key skpi, a main public key mpk, an identity set ID of all users in the ring member list and a system global parameter pp; the server side verifies the signature sigpi based on the message m, the identity set ID of all users in the ring member list and the system global parameter pp; and the server side obtains the first signature and the second signature of different messages, and determines that the first signature and the second signature are from the same user according to the link label of the first signature and the link label of the second signature so as to complete the linkable double-ring signature based on the NTRU grid. According to the method, the storage overhead and the time overhead of the server during calculation can be reduced, and the practicability is improved.

The invention relates to the technical field of intelligent power grid privacy protection, in particular to an intelligent power grid-oriented bill charging method based on inner product encryption, which comprises the following steps that: a KDC server generates public parameters and public and private keys, and an intelligent electric meter end generates a certificateless ring signature after collecting user data according to a load monitoring period; in order to ensure that a unique random number is generated in a non-linkability manner, and packaged data containing power consumption data is sent to an aggregator. And the aggregator performs batch signature verification after receiving the packaged data, aggregates the data qualified in signature verification to obtain partial region load data, and sends data including a timestamp, an ID and load information to the block chain. And the intelligent electric meter obtains the public key and the private key and stores the public key and the private key as an electric power data vector according to a charging period, the electric power data vector and a real-time electric power price vector are subjected to inner product encryption to obtain a ciphertext, and after the ciphertext is signed, the packed data is sent to the block chain. And after the block chain receives the data, batch signature verification is carried out, and the ciphertext load and the bill are decrypted, so that the load data and bill information of the whole area are obtained. In the whole process, the load data and the bill data are stored on the block chain, and it is guaranteed that the key data are open and transparent and cannot be tampered.

The invention belongs to the technical field of information security, and particularly relates to a decentralized traceable ring signature method and system based on a block chain. The method comprises the following steps: S1, generating global parameters through a system initializer, and respectively generating respective key pairs for a signature user and a tracer group; s2, constructing and generating a traceable ring signature according to respective key pairs of the signature user and the tracer group generated in the step S1; and S3, when the identity of the signer needs to be revealed, submitting a secret key share by a traceability reaching a set threshold, jointly recovering the traceability, and positioning a real signature user according to the traceable ring signature. The method has the advantages of being safer, more reliable and more transparent, meeting the decentration principle and meanwhile being capable of guaranteeing anonymity of user data processing.

The invention discloses a federal recommendation privacy protection method based on ring signature and selective aggregation, which realizes anonymization privacy protection and selective aggregation in a federal learning process through an innovative double-server architecture and a hierarchical security mechanism. The method comprises the following steps: 1) deploying an aggregation server and a security server in a system initialization stage, and completing parameter initialization and key distribution; 2) the client executes local model training, and anonymization privacy protection uploading is realized by adopting a ring signature technology; 3) the security server performs selective aggregation of credibility verification, and completes grouping and parameter fusion based on user similarity; and 4) ensuring the completeness and source credibility of model updating through a hierarchical security parameter distribution mechanism. While the recommendation precision is ensured, the user identity leakage and privacy tracking are effectively prevented, the comprehensive security guarantee is provided for the federal recommendation system, and the method has the advantages of low calculation overhead and high communication efficiency.

The invention relates to the technical field of block chains, in particular to a method and a system for realizing unified security and credible authentication of multiple accounts based on a block chain technology, and the method comprises the steps: generating a globally unique decentralized identity (DID) and an asymmetric key pair through a digital identity wallet, and carrying out the uplink storage of DID related information; establishing a binding relationship between the DID and the multi-platform account through the smart contract, and keeping a tamper-proof record; when an external platform initiates an authentication challenge, a user signs a response through a private key, and the smart contract verifies the signature legality and the binding relationship; all the operation logs are chained through the auditing module to form a traceable track, and privacy protection is achieved in combination with technologies such as zero-knowledge proof and ring signature. The system solves the problems of account dispersion, mutual trust insufficiency, privacy disclosure and the like in a traditional centralized authentication system, has the advantages of cross-platform unified authentication, security and counterfeiting resistance, autonomous identity control of a user, audibility, expandability and the like, and is suitable for multiple scenes such as government affairs, finance, education, Internet of Things and the like.

The invention belongs to the technical field of federated learning privacy protection, and discloses an anonymous and Byzantine robust federated learning privacy protection method and system with safe and efficient aggregation. Firstly, the invention provides a single mask protocol, which not only can effectively protect the security of privacy data, but also improves the aggregation efficiency. And then, anonymous ring signature and secure shuffling are used, so that the metadata of the client message is eliminated while the identity of the client is ensured to be legal, and the legality and anonymity of the identity of the client are ensured at the same time. The invention also realizes a baffle mechanism for malicious update, so that the influence of the malicious update on the global model can be ignored, thereby realizing Byzantine robustness.

The invention discloses a signature and verification method and device, equipment and a medium, and relates to the technical field of digital signatures, and the method comprises the steps: randomly selecting a first random number from a first preset addition cycle group, enabling the first random number to serve as a signer private key, and determining a signer public key according to a preset system parameter and the signer private key; determining a signer label according to the signer private key and a preset system parameter, and generating a target linkable ring signature corresponding to the target message according to the preset system parameter, the signer label and a target public key set containing a signer public key; and sending the target message and the target linkable ring signature to a signature verification end, so that the signature verification end performs correctness verification on the plurality of linkable ring signatures corresponding to the plurality of received messages, and determines a linkable signature based on the target linkable ring signature. Thus, it can be ensured that the linkable ring signature is independent of the group, and then the linkable signature from the same signer can be determined in any case.

The invention provides an anti-quantum security-oriented identity-based multivariable ring signature method and system. The system comprises a key distribution module, a signature end module and a verification end module, completing identity mapping according to the user identity information, and generating a private key pair of the user; the signature user constructs a signature ring, generates an anonymous signature and outputs a signature vector; and the verifier verifies the signature and judges whether the signature is valid or not. According to the method, an identity-based signature mechanism and a UOV structure are fused, the signature efficiency and deployment flexibility of the system in a post-quantum environment are improved, the capability of resisting quantum computing threats is achieved, currently known multivariate algebraic attacks can be effectively prevented, and high security guarantee is achieved; according to the method, a ring signature mechanism is introduced, any members in the ring are supported to generate verifiable signatures, identity information of the members is effectively hidden, the method is particularly suitable for application scenes with high requirements for signer privacy, and the method has the advantages of being untraceable for signers, lightweight in public keys, resistant to quantum attacks and the like.

The present invention proposes an anonymous cloud auditing method that supports dynamic aggregation of tags. It can not only achieve anonymous privacy protection for data uploaders but also dynamically aggregate tags according to the system operation status to improve storage efficiency. It mainly consists of the following steps: system initialization stage, key generation stage, tag generation stage, challenge stage, response stage, verification stage, and also includes the following optional steps: key expansion stage, aggregation stage. This method has the following characteristics: 1. It does not rely on ring signature or group signature technology to achieve the anonymous privacy protection function of data uploaders. A data tag is composed of only one group element before aggregation; 2. It supports aggregation operations on data tags. Multiple data tags can be aggregated into one tag to reduce storage overhead. The aggregated tags can execute the normal audit process without the need to verify the aggregated multiple index positions as a whole. That is, it can audit one or more specific positions after the aggregation of multiple tag index positions.

The invention discloses a ring signature method, device and equipment and a computer readable storage medium, which are applied to the technical field of information security, and the method comprises the following steps: a prover generates a public and private key pair corresponding to each ring member based on security parameters; the certifier constructs a set membership certification protocol based on the public and private key pair, the private key ownership certification, the ring membership certification and the to-be-signed message corresponding to each ring member, and determines signature information based on the set membership certification protocol; the private key ownership certificate is a relational expression for proving that a signer has a private key by utilizing zero knowledge; the ring member qualification proof is a relational expression which proves that the public key belongs to a given ring member public key set; and the verifier verifies the signature information to obtain a verification result. According to the method and the device, the ring member identity certification is realized by utilizing the set membership certification protocol, and the use requirements of the existing ring signature on the Merkle tree and the Merkle certification are avoided, so that the signature process is simplified, and the signature efficiency is improved.

This invention discloses a post-quantum secure linkable ring signature method and system resistant to internal attacks, comprising: a first service device generating public parameters; each user device generating its own public-private key pair using the public parameters and sending its public key to the first service device for registration; the first service device verifying all received identity information and forming a public key ring from the public keys of all verified user devices and making it public; when any user device needs to send a message to a second service device, it generates a ring signature containing a linkable tag based on its own private key, the message, and the public key ring, and sends the ring signature and the message to the second service device; the second service device performing security verification on each ring signature and, after successful verification, verifying whether different ring signatures belong to the same user device based on the linkable tag. This invention can protect user privacy in anonymous scenarios, enable multiple signatures from the same user, and resist attacks from within.

The embodiment of the invention provides a lightweight lattice-based ring signature method suitable for a satellite network. The method is applied to the technical field of information security and comprises the steps that a ground control center generates system public parameters; the user generates a complete signature key pair based on the NTRU grid, and a compression verification identifier for the identity identifier is obtained through calculation of a complete signature public key; the ground control center constructs a gridding user set by using a space-time fragmentation technology, calculates Merkle tree roots as ring fingerprints and distributes the ring fingerprints to satellites; the user generates an anti-replay ring signature and member proof in combination with ephemeris information and spatio-temporal context; the satellite node executes lightweight rapid pre-verification according to the time, the position and the ring fingerprint; and the ground control center executes complete ring signature and membership verification. The method effectively solves the contradiction between limited satellite network resources and high-security requirements, and has the capability of resisting quantum computing attack.

The invention discloses an under-chain computing privacy protection method based on hierarchical excitation. The method comprises the steps that a request node issues a computing task to a block chain through a smart contract; the block chain verifies the calculation task and issues the calculation task; the computing node selects the computing task matched with the level of the computing node through the smart contract and participates in receiving of the computing task; a random selection algorithm is used to select any computing node from the same computing node hierarchy as an executor, the computing node generates a ring signature by using auction information encrypted by a public key and a private key, and after the ring signature passes verification, the computing node sends the auction information to a trusted execution environment of the executor. Executing a task allocation process in the trusted execution environment, and feeding back an allocation result to the computing node; the computing node completes the computing task and feeds back a computing result to the block chain; wherein the executor can be a computing node for executing the task at the same time. The computing node utilization rate and the task execution efficiency can be improved.

The invention discloses a privacy protection data aggregation method and device of a distributed system, equipment and a medium, and relates to the technical field of computers. Comprising the following steps: determining a target ring signature algorithm, and sending the target ring signature algorithm to a plurality of terminal nodes connected with an aggregator; a fully homomorphic encryption algorithm and a fully homomorphic encryption public key corresponding to the control center are obtained from the control center, and the fully homomorphic encryption algorithm and the fully homomorphic encryption public key are sent to a plurality of terminal nodes connected with the aggregator; obtaining a target message from a plurality of terminal nodes based on a preset time period, and performing data aggregation operation on the target message by using a target signature algorithm to obtain a corresponding aggregated message; and sending the aggregation message to a control center to complete data aggregation. Therefore, a more complex aggregation mode can be realized, and when the terminal node is offline, the control center can recover the aggregation data of the node without extra communication overhead.

The present disclosure provides a method for generating an isogeny-based ring signature. The method includes executing a setup algorithm to establish public parameters includ¬ ing a base elliptic curve, generating key pairs for a plurality of users, and executing a signing algorithm by a signer. The signing algorithm involves selecting a random isogeny, iteratively computing isogenies, scalar values, basis points, subgroups, and additional isogenies for users in a ring, computing signer-specific isogenies and subgroups, deriving a dual isogeny, and outputting a ring signature comprising the computed isogenies and basis points. The method enables generation of an anonymous ring signature based on isogeny computations over elliptic curves, providing enhanced security in cryptographic systems.

Embodiments of the present application disclose a data processing method and system in a smart grid based on a blockchain, the method comprising: each service node in a smart grid platform jointly generating a system public parameter; a user node sending a key acquisition application to the smart grid platform; if the identity information of the user node is authenticated by each service node, each service node jointly calculates partial key information and user secret share information, and the smart grid platform returns the partial key information and the user secret share information to the user node; the user node generates a key according to the partial key information and the user secret share information, selects a user node identifier set to generate a ring signature on power data, and sends the power data with the ring signature to a power center device; the power center device first verifies the ring signature of the received power data, and after verification, stores the power data to a blockchain, thereby ensuring the security and tamper resistance of the power data.

The invention discloses a security key processing method and device, a storage medium and an electronic device, and relates to the technical field of information security. The security key processing method comprises the following steps: receiving a signature request sent by a signature requester; in response to the signature request, generating a first random number, and selecting a group of target micro-services from the micro-service set; transmitting the first key derivation information and the first random number to a group of target micro-services through a micro-service bus, so that the group of target micro-services perform ring signature on the first key derivation information by using the first random number and a ring signature private key of the group of target micro-services; and under the condition that first signature information returned by the group of target micro-services is received, sending a signature response message to the signature requester. Through application of the method and the device, the problem that the identity exposure risk is relatively high in a security key processing method in the related technology is solved, and the effect of improving the security of the signature information is further achieved.

The invention discloses a data security transmission method and device, equipment and a storage medium, and relates to the technical field of information security, and the method comprises the steps: obtaining a data transmission parameter generated based on a ring signature in a block chain network, generating a target key pair of each transaction party, generating corresponding hidden address information based on the data transmission parameter and a public key of a receiver, and transmitting the hidden address information to the block chain network; encrypting the to-be-transmitted data according to the waiting party public key, the hidden address information and the transmitting party key pair; generating data supervision information of the to-be-transmitted data and identity supervision information of the receiver public key based on the supervisor public key; data transmission content is constructed according to the hidden address information, the to-be-transmitted data ciphertext, the data supervision information and the identity supervision information, the supervision party verifies the data transmission content based on the supervision party private key and the supervision list, and after it is judged that the identities of the data transmission party and the data receiving party are correct, the data transmission party completes data transmission through the block chain network. Privacy protection and supervision auditing of data can be balanced, and recovery and supervision of transmission data are realized.

Embodiments of the present application provide a service request verification method and device, electronic equipment and storage medium. The method comprises: based on the service application request of a user, signing a set data packet using a user private key to generate a first target signature; sending the first target signature to an authorized end to enable the authorized end to verify the first target signature, and in the case where the verification is passed, signing the identity label, set commitment protocol parameters and proof type label using an authorized end private key to generate a second target signature; based on the service application request, generating range proof information according to a ring signature range proof protocol, signing the identity label and range proof information using a user private key to generate a third target signature, and sending the third target signature to a service provider end to enable the service provider end to verify the third target signature based on the second target signature through an identity verification end. The present application has high security.

A method and a system for eliminating digital signing delays in online conferences can be configured to provide the integration of the digital signature concept into online conferences. According to the invention, during a conference, a set of people is considered which want to agree on an idea or a document that is distributed via screen sharing. After having the agreement of all the people in the conference, it is possible to automatically sign the document either independently or using a digital ring signature.