46 results about "Signcryption" patented technology

The present invention discloses a ring signcryption generation method, system and device based on the SM9 digital signature algorithm. The present invention utilizes the bilinearity, non-degeneracy and computability characteristics of bilinear mapping, and adopts the SM9 digital signature algorithm and a hash function to construct a ring signcryption scheme. By optimizing the SM9 digital signature algorithm, the present invention has lower computational overhead and communication overhead, is particularly suitable for communication environments with limited energy and bandwidth, and fills the gap of the SM9 digital signature algorithm in ring signcryption schemes.

The invention relates to a stream data sharing method and system based on bidirectional Hash chain symmetric encryption and signcryption in the technical field of data sharing. The method comprises the following steps: calculating an original beginning left key corresponding to a first encryption time unit and an original ending right key corresponding to a last encryption time unit in a maximum time interval; on the basis of the original beginning left key and the original ending right key, original encryption sub-keys corresponding to other encryption time units are calculated to generate an encryption key; performing symmetric encryption on the stream data by using the encryption key, obtaining response data of a request time period based on the application request, and performing signcryption processing on the response data to obtain signcryption data; and sending the signcryption data to the data application user, so that the data application user performs de-signcryption on the signcryption data to obtain the response data, and performs decryption processing on the response data to obtain the target data, thereby solving the problems of relatively high resource consumption and relatively low confidentiality during point-to-point data transmission of the existing stream data.

The invention belongs to the field of secure communication in the Internet of Vehicles, and particularly relates to a lightweight certificateless signcryption method capable of proving security in the Internet of Vehicles, which comprises the following steps: constructing an Internet of Vehicles system consisting of a key generation center KGC, a roadside unit, a vehicle and a block chain, and initializing system parameters; the vehicle-mounted unit in the vehicle and the roadside unit outside the vehicle respectively register in the key generation center, and system parameters and pseudonyms are returned after KGC verification is passed; the KGC generates a part of keys for the pseudonym and returns the keys to the vehicle, and the vehicle calculates and generates a key and a public key according to the returned part of keys and the pseudonym, and uploads the public key and the pseudonym to the block chain; the vehicle signcrypts the message according to the key, obtains the public key of the receiver from the block chain according to the pseudonym of the opposite side, and then sends the signcryption message to the receiver; and the target vehicle or the roadside unit receives the message and performs message de-signcryption, and uploads a transaction record to the block chain for storage. According to the invention, while anonymous and secure communication of each entity in the Internet of Vehicles system is ensured, the communication efficiency is improved by reducing the vehicle calculation pressure and the communication overhead.

The invention relates to a bank-enterprise direct connection scene-oriented revocable security signcryption method, and belongs to the field of information security. According to the method, digital signature and encryption are deeply coupled in a single logic step, so that the calculation complexity is reduced, and the requirements of confidentiality, integrity and non-repudiation of information transmission in a financial scene are met; and meanwhile, a key updating mechanism is designed, so that access blocking of the history and the newly-added ciphertext after permission revocation is ensured. In order to solve a subversive attack possibly initiated by an internal opponent, a password reverse firewall architecture is introduced, an encrypted ciphertext is reconstructed through a re-randomization module, and algorithm risks possibly caused by tampering of a random number generator are blocked. A block chain intelligent contract and aggregation signature technology is further introduced, a fair and reliable decentralized verification platform supporting batch verification is constructed for bank and enterprise users, the cloud verification efficiency is improved, and responsibility tracing can be performed through records on the block chain when major property safety accidents occur.

The invention discloses an Internet of Vehicles heterogeneous signcryption communication system and method based on a double-layer block chain, relates to the technical field of Internet of Vehicles, and solves the technical problems that the Internet of Vehicles technology is insufficient in expansibility and poor in compatibility, safety and efficiency are difficult to consider, and use requirements are difficult to meet. The system comprises a private key generation center PKG, a secret key generation center KGC, an on-board unit OBU, a roadside unit RSU and a double-layer block chain device. The private key generation center PKG is used for generating and distributing a public key and private key pair of the identity signcryption IBC; the key generation center KGC is used for key updating and management of the certificateless signcryption CLC; the OBU is used for performing communication between the vehicle and other vehicles or the road side unit; the roadside unit RSU is used for communication support and data forwarding; and the double-layer block chain equipment is used for carrying out data storage and security verification in the communication system. According to the invention, the calculation overhead and communication cost of the system are obviously reduced, and safe, efficient and extensible authentication and data transmission in a high-dynamic and large-scale V2X environment is realized.

The invention relates to a broadcast signcryption method, a broadcast signcryption system, broadcast signcryption equipment and a readable medium. The method comprises the following steps: a trusted center generates and issues public parameters of a system according to preset security parameters; the receiver generates registration parameters including a key pair, a challenge-response pair and a physical protection parameter, and discloses a public key of the registration parameters; the method comprises the following steps: generating registration parameters including challenge-response pairs and physical protection parameters according to a pseudonym and a part of private keys generated by a sender; the sender judges the physical attack based on own registration parameters; encrypting the confidential information to generate a broadcast ciphertext; broadcasting the broadcast ciphertext and the pseudonym of the sender to each receiver; and each receiver judges the physical attack based on the respective registration parameter, judges the validity of the received broadcast ciphertext, generates a verification parameter to verify the broadcast ciphertext, and decrypts the confidential message in the unattacked broadcast ciphertext. According to the invention, secure communication between the unmanned aerial vehicle and the ground station is realized.

The invention belongs to the field of computer and information security, and discloses a blockchain anti-long-range attack certificateless puncturable signcryption method, which comprises seven steps of system initialization and parameter establishment, user part private key extraction, puncture key updating, secret value extraction, public key generation, signcryption and de-signcryption. An authoritative node set in the block chain is adopted to initialize the system and generate a user part private key and a puncture key, so that the defect of key distribution based on a centralized entity is overcome; a puncturable technology is embedded, and the private key of the user is associated with the message, so that the capability of operating specific messages is realized, and long-range attacks caused by key leakage in the block chain are resisted; in addition, the signcryption and de-signcryption operation not only saves the calculation and communication cost, but also ensures the confidentiality and integrity of the block chain message. According to the method, the problems that long-range attacks exist in centralized entities and block chain rights and interests in the prior art, and confidentiality and integrity of messages on a chain cannot be provided at the same time in the prior art are solved.

The invention discloses an identity hiding post-quantum identity-based ciphertext signcryption method, which adopts bilinear pairing as a basic structure, innovatively introduces a lattice-based post-quantum symmetric encryption algorithm, and introduces an identity hiding characteristic on the basis of a traditional identity-based signcryption scheme. Meanwhile, the post-quantum encryption algorithm is integrated into the signcryption process, so that the anti-quantum performance of the scheme is remarkably enhanced. The hybrid design not only retains the advantages of identity-based passwords, but also provides strong post-quantum security assurance.

The invention provides a cleanable certificateless signcryption method, a cleanable certificateless signcryption device, cleanable certificateless signcryption equipment and a cleanable certificateless signcryption system. Receiving a signcryption ciphertext which is sent by the data sending end and contains signature information and ciphertext information; verifying the signcryption ciphertext according to the public parameter and the key information; and after the verification is passed, re-randomizing signature information and ciphertext information in the signcryption ciphertext in an undecrypted state to obtain a purified signcryption ciphertext, and sending the purified signcryption ciphertext to a data receiving end to trigger the data receiving end to verify and decrypt the purified signcryption ciphertext to obtain plaintext information corresponding to the ciphertext information. According to the method and the device, the signcryption ciphertext can be re-random on the premise that the ciphertext is not unlocked, and meanwhile, the re-random signcryption ciphertext is ensured to still meet confidentiality and integrity and can be verified by a receiving end, so that leakage attack behaviors of a malicious data sender are effectively prevented.

According to the linkable post-quantum certificateless signcryption method and system, a new post-quantum CLSC scheme is provided, the linkable IoMT is realized, the design provided by the invention is convenient for safely transmitting medical data between a doctor and a patient, the legality of a user is effectively verified, and the user experience is improved. And the risk of private information leakage is reduced to the greatest extent. In order to achieve the purpose, a lattice sampling algorithm and a hash function are used for forming a secret key, then a signature encryption method is adopted, and a link label is designed at the same time.

The present invention discloses a lightweight quantum digital signature and quantum digital signcryption method. The quantum digital signature method includes: user A generates a request req for performing a quantum digital signature on data M and sends the request req to a trusted CA center; user A registers in the trusted CA center and negotiates with the trusted CA center to generate and store a one-time certificate for signature; user A then signs the data M to generate a signature file M-SIGN; user A generates a transmission file DOC based on the signature file M-SIGN and sends it to user B, and user B performs a signature verification operation on the signature file M-SIGN in the transmission file DOC. User A of the present invention uses a signature certificate otCA, its own public CA certificate CA 1A etc. to sign the data M, realizing the binding of the transmitted data M to the identity of user A; and the communication data is only transmitted between users A and B, and no third party will receive the communication data, ensuring that the communication data will not be known to irrelevant third parties.

The invention discloses a multi-message multi-receiver signcryption method and system on a ring. The method comprises the following steps: generating a key; the sender selects a random number, signcrypts the message according to the key and the random number, and generates a ciphertext data packet; the sender sends the ciphertext data packet to a receiver; and the receiver receives the corresponding ciphertext data packet, unsigncrypts the ciphertext data packet by using the private key and the public key of the sender, and obtains the message. The method and the system can reduce the sizes of the public and private keys, reduce the calculation amount and the data amount of the ciphertext, and improve the calculation efficiency.

The invention discloses an anti-quantum attack certificateless signcryption method, system and device in the Internet of Vehicles, and relates to the technical field of Internet of Vehicles information security, and the method comprises the steps: generating a system public parameter, a main public key and a main private key through a system parameter and a security parameter preset by a vehicle Internet of Vehicles system by a key generation center; obtaining a partial private key based on the identity identifier of the sender, and combining the partial private key with a locally generated random vector to obtain a complete private key of the sender; the sender vehicle performs signcryption operation on the plaintext message by using the complete private key of the sender vehicle and the public key of the receiver, and generates a signcryption text containing a ciphertext and a link label; the receiver carries out decryption and signature verification on the received signcryption text by using a private key of the receiver; according to the method, the lattice cryptographic algorithm based on the error learning and short integer solution problem is introduced, so that the capability of resisting quantum attacks is realized, and the security requirement of the Internet of Vehicles for resisting quantum computing threats in the future is met.

The present invention discloses a blockchain-assisted conditional privacy protection method and system based on ring signcryption, belonging to the field of blockchain technology. The method comprises: protecting the vehicle network by embedding a first blockchain and a second blockchain in a vehicle network consisting of a trusted authority (TA), a roadside unit (RSU), and vehicles equipped with an OBU. The first blockchain is used to store the identity and public key information of the vehicle user. When a vehicle engages in malicious behavior, the TA removes the malicious vehicle from the first blockchain and stores it in the second blockchain. The present invention can be used to maintain the security and data integrity of vehicle communications through blockchain. By storing traffic data on the blockchain, it can ensure that the data is not tampered with or forged, helping to prevent the spread of false information and increase the credibility of vehicle communications, thereby reducing the threat of false and malicious vehicles.

The invention belongs to the technical field of medical data security, and particularly discloses a medical data security system and method based on attribute-based signcryption ABSC, and the system comprises a system initialization module which generates a public key and a master key of the system through a trusted authority TA, and is responsible for participating in identity verification and key distribution of entities; the key generation and registration module is used for generating a random value for a participating entity through a trusted institution TA and obtaining a signature key, a verification key and a decryption key; the data encryption and storage module encrypts the medical data collected by the intelligent device SD, and stores the encrypted data on a block chain through an edge node ED; and the data access and decryption module is used for decrypting the data stored on the block chain and is internally provided with a predefined access control strategy. By the adoption of the medical data security system and method based on the attribute-based signcryption ABSC, the performance of the system in the aspects of data security, privacy protection, calculation efficiency and expandability can be comprehensively improved.

The invention discloses a PKI-to-IBC heterogeneous broadcast signcryption and key negotiation method oriented to Internet of Things communication equipment. The method sequentially comprises six stages of system initialization, data collection base station registration, terminal sensing equipment registration, heterogeneous signcryption, de-signcryption and key negotiation. In a system initialization stage, a registration management mechanism generates elliptic curve parameters and a system master key, and issues system parameters including a system public key, a related hash function and the like; in the registration stage, a data collection base station obtains a digital certificate through a PKI mechanism, and terminal sensing equipment obtains a private key and public key reconstruction factor through an IBC mechanism; in the signcryption stage, the data collection base station signcrypts messages based on a broadcast mechanism and sends the messages to multiple devices at the same time; in the de-signcryption stage, the terminal sensing device verifies the message integrity and the source legality by using the own key; in the key negotiation stage, the data collection base station and the terminal sensing device cooperatively generate a shared session key and establish a secure communication channel.

This invention discloses a certificate-free cross-domain authentication method in the cloud, comprising deploying key distribution centers in both the CLC domain and the trusted domain and generating system parameters; the user and the cloud service provider (CSP) each applying for partial private keys and combining them with secret values ​​to generate public-key and private-key pairs; the user calculating authentication information and sending an encrypted request; the CSP verifying the user's legitimacy and returning an encrypted response upon successful verification; the user receiving the response message, verifying the synchronized valid sequence number and the CSP; upon successful verification, saving the legitimate provider information, receiving cloud service resources, and establishing a cross-domain trust relationship and session negotiation key. This invention constructs a certificate-free cross-domain authentication method that abandons the complex certificate chain management of traditional PKI; it adopts a signature and signcryption-based primitive, balancing data confidentiality, integrity, and low computational complexity; and through session key negotiation and a local legitimate user list caching mechanism, it avoids duplicate authentication and improves processing efficiency.

The present application belongs to the field of vehicle safety communication, and particularly relates to a self-adaptive signature and signcryption vehicle networking certificateless privacy protection method, which comprises: initializing vehicle networking system parameters; a KGC generates a pseudo identity and a partial private key of a corresponding vehicle networking vehicle according to identity information submitted by the vehicle networking vehicle, and sends the pseudo identity and the partial private key to the vehicle networking vehicle terminal through a secure channel; the vehicle networking vehicle terminal generates a private key and a public key based on the received pseudo identity, the partial private key and the system parameters; a first vehicle networking vehicle generates a message tuple by using a self-adaptive signature and signcryption algorithm based on to-be-sent information and privacy requirements, a public key of a second vehicle networking vehicle and system parameters, and sends the message tuple to the second vehicle networking vehicle; after receiving the message tuple, the second vehicle networking vehicle executes a signature and signcryption verification algorithm according to a private key, system parameters and a public key of the first vehicle networking vehicle, restores original information and verifies the correctness of the original information, and realizes efficient message authentication of vehicle networking.

The invention provides a mixed attribute base searchable signcryption method, and relates to the technical field of cryptography. The method comprises the steps that a decryptor encrypts a retrieval keyword according to a classic decryption key to generate a search token and sends the search token to a cloud server; wherein the classic decryption key is information obtained by encrypting a decryption attribute set of a decryptor by the key generation center; the cloud server adopts a cloud private key, searches a target hybrid ciphertext matched with the keyword from the keyword components of the plurality of hybrid ciphertexts according to the search token, and sends the target hybrid ciphertext to a decipherer; each hybrid ciphertext is information obtained after the signcryption person encrypts the message to be signcrypted and the keyword information of the message to be signcrypted according to the post-quantum public key; and the decryptor decrypts the target hybrid ciphertext by using the post-quantum private key and determines the message to be signcrypted, and the post-quantum public key and the post-quantum private key are keys pre-generated by the key generation center. According to the invention, fusion of an anti-quantum key encapsulation mechanism and an attribute-based searchable encryption technology can be realized.

The application discloses a kind of smart grid data encryption transmission method and system based on homomorphic sign cipher, belongs to smart grid data transmission technical field, including power operation center generates public parameter and sends to user;User generates private key based on the public parameter, and the public parameter and the private key are used to the power data to be transmitted in user to sign and cipher, generate user report and send to gateway;Gateway uses the homomorphism of sign and cipher to aggregate the user report, obtain aggregated report, and send aggregated report to power operation center;Power operation center is decrypted to power data by aggregated report, and completes smart grid data encryption transmission;The application uses sign and cipher scheme, and the encryption and signature of data are completed by one calculation, effectively solve the problem of low encryption and decryption efficiency and large communication overhead in traditional method by superimposing encryption and signature steps to realize privacy and authentication.

Method for confirming ownership of digital assets based on hash algorithm and method for tracing to a source of digital assets based on hash algorithm are provided. Entities involved in confirming the ownership of digital assets include an original user, a CA authentication center and a digital asset authentication center. The process of confirming the ownership includes generating a one-time CA certificate by the original user, authenticating the digital assets by the digital asset authorization center and the original user, generating an ownership confirming document by the original user, creating a quantum digital signature by a three-party, and the like. The method for tracing includes generating subsidiary documents in real time, constructing a unique identity for a digital asset at an accessing moment, traceability analysis, and so on.

The invention provides an SM2 signcryption method and system supporting rapid revocation in a vehicle-mounted network environment. The method comprises the steps of generating a global public parameter set and a master key of the system, initializing roadside infrastructures, initializing an authentication server, generating a vehicle anonymous identity and an implicit certificate, generating a vehicle and a corresponding private key, generating a signcryption ciphertext, decrypting and verifying, and tracking and cancelling. The invention further provides an SM2 signcryption system supporting rapid revocation in the vehicle-mounted network environment, and the SM2 signcryption system comprises a system initialization module, a legal vehicle registration module, a vehicle pseudonym generation module, a message signcryption generation module, a message decryption verification module and a tracking revocation module. And the storage capacity of the block chain is not additionally increased. When the vehicle breaks the law, the trusted center can realize quick revocation through a method of logically deleting the certificate of the vehicle.

The invention is applicable to the technical field of information, and provides a carbon emission permit transaction method based on a block chain, and the method comprises the steps: enabling an intelligent contract deployed in the block chain to generate a corresponding pseudonym for each enterprise according to the identity information of a first enterprise and a second enterprise in a first password system and a second password system, based on the public key of the first enterprise and the pseudonym of the second enterprise, the second enterprise performs signcryption on the carbon quota transaction information by adopting a signcryption strategy and uploads an obtained transaction ciphertext to the block chain, and the smart contract performs a multi-ciphertext equivalent test on the ciphertext in the block chain according to a test trap door uploaded by the first enterprise. According to the method and the device, the trade ciphertext matched with the test trap door is obtained, the first enterprise performs de-signcryption on the trade ciphertext according to the de-signcryption strategy to obtain carbon quota trade information, so that secure heterogeneous communication among enterprises under different password systems is realized in a complex and changeable carbon emission permit trade platform, the privacy of a user is protected, and the security of the trade information is improved. And the data confidentiality, security and efficiency of the transaction are also improved.

The invention discloses an Internet of Things privacy protection method based on lattice ring signcryption. The method comprises the steps of system initialization, generation of partial private keys of intelligent equipment of the Internet of Things, generation of partial private keys of a third-party server, generation of public and private keys of the intelligent equipment of the Internet of Things, certificateless ring signcryption and unsigncryption. In the step of certificateless ring signcryption, the problems of public key encryption, certificateless ring signature and quantum computing in the Internet of Things environment are solved at the same time, the computing efficiency is improved, the privacy security of the Internet of Vehicles is realized, the problem of dependence on a secure channel is avoided, and the problems of certificate management and key escrow are also eliminated. The method has the advantages of low calculation complexity, quantum security and the like, and can be applied to the field of network information security.

The invention discloses a carbon monitoring platform user identity authentication method, device and system, and a storage medium. The method comprises the following steps: S1, obtaining relay chain parameters; s2, a cross-chain gateway DCCG of the application chain carries out application chain registration through the relay chain according to the relay chain parameters; s3, the user sends a cross-chain user registration request to the relay chain through the registered application chain; and S4, according to the relay chain parameters, realizing identity authentication of the user through signcryption and de-signcryption of the plaintext message. By adopting the technical scheme of the invention, the problems of low decentration, high resource consumption, low confidentiality of identity interaction information and high time overhead in the identity authentication of the current carbon monitoring platform are solved.

The invention belongs to the field of network connection automobile safety communication, and particularly relates to an adaptive signature and signcryption vehicle networking certificateless condition privacy protection method comprising the following steps: initializing vehicle networking system parameters; the KGC generates a pseudo identity and a part of private keys corresponding to the networked automobile according to identity information submitted by the registered networked automobile, and sends the pseudo identity and the part of private keys to the networked automobile terminal through the secure channel; the networked automobile terminal generates a private key and a public key based on the received pseudo identity, partial private key and system parameters; the first networked automobile generates a message tuple by adopting an adaptive signature and signcryption algorithm based on the to-be-sent information, the privacy demand, the public key of the second networked automobile and the system parameters, and sends the message tuple to the second networked automobile; and after receiving the message tuple, the second networked automobile executes a signature and signcryption verification algorithm according to the private key of the message tuple, the system parameters and the public key of the first networked automobile, original information is recovered, the correctness of the original information is verified, and efficient message authentication of the Internet of Vehicles is realized.

The invention discloses a distributed responsibility-traceable cross-chain data consistency verification method and system applied to block chain cross-chain, and belongs to the field of block chain cross-chain technology and information security. According to the method, a tetragonal framework comprising a data owner, a source chain, a target chain and an independent auditing chain is constructed, a distributed processing mechanism based on certificateless threshold signcryption is deployed on the two sides of the source chain and the target chain, and full-process decentralization of cross-chain data interaction is achieved; blocking a node private key reconstruction and signature repudiation path from a cryptography bottom layer by designing an anti-collusion parameter broadcast and identity disclosure strategy; an auditing chain is introduced to serve as a supervision layer, an aggregation verification algorithm based on homomorphic hash is adopted, and batch consistency auditing is achieved on the premise that original data privacy is not leaked. And when verification fails, the system accurately locates malicious nodes through a specific responsibility investigation algorithm and automatically punishes the malicious nodes. According to the invention, while the confidentiality and integrity of cross-chain data are guaranteed, the robustness and supervisibility of the system are significantly improved.

The application provides a lattice-based signcryption method with a commission test function, which comprises the following steps: a commission server receives a first signcryption text and a first authorization trapdoor sent by a first receiving user, and receives a second signcryption text and a second authorization trapdoor sent by a second receiving user; the commission server judges whether the plaintext corresponding to the first signcryption text and the plaintext corresponding to the second signcryption text are consistent, and sends the judgment result to the first receiving user and the second receiving user. The application can construct an equivalent test framework capable of resisting quantum computer attacks under a standard model, and can be applied to signcryption technology, so that the integrity and traceability of the ciphertext information are ensured, and the security level is improved.

The application relates to a signcryption method with equality test attribute, which comprises the following steps: obtaining a public parameter set pp; generating a first key k r and a second key k s according to the public parameter set pp; encrypting an initial plaintext mu according to the above content and a first timestamp T to obtain an initial ciphertext; signing the initial plaintext mu, the first public key pk r and the initial ciphertext to obtain a final ciphertext ct; obtaining the initial plaintext mu according to a second public key pk s , a first private key sk r and the final ciphertext ct, and verifying a signature e corresponding to a sender; generating a trapdoor corresponding to a second timestamp according to the second timestamp and the first private key sk r to obtain a verification label and sending the verification label to a third party; the third party obtains a hash value H(mu) of the final ciphertext ct respectively according to the verification label and the final ciphertext ct, and judges whether different final ciphertexts ct are obtained by signcryption of the same initial plaintext mu according to the hash value H(mu). Through the technical scheme, the risk of privacy leakage of encrypted data is reduced, and the security of data is improved.

The invention discloses a privacy protection method, system and device for an intelligent electric meter and a medium, the method is applied to the intelligent electric meter, and comprises the following steps: requesting a credible detection agent to carry out attribute authentication so as to ensure the integrity of a credible module; if the attribute authentication is passed, receiving a fifth part private key sent by the trusted detection agent; obtaining a private key of the intelligent electric meter according to the fifth part private key; sending the intelligent electric meter identity to a power service provider to request the power service provider to generate a pseudo identity; receiving a pseudo identity sent by the power service provider; signcryption is carried out on the electricity utilization information through the pseudo identity by adopting a ring signcryption algorithm, and signcrypted electricity utilization information is obtained; and sending the signcrypted power utilization information to the regional gateway in a pseudo identity manner, so that the power utilization information is verified by the regional gateway, restored by the control center and sent to the corresponding user by the power service provider in sequence. According to the invention, an attacker can be prevented from attacking the intelligent electric meter to obtain privacy, and privacy protection of a user is realized under the condition of ensuring credibility of the intelligent electric meter.