12 results about "Signcryption" patented technology

The invention discloses an Internet of Vehicles heterogeneous signcryption communication system and method based on a double-layer block chain, relates to the technical field of Internet of Vehicles, and solves the technical problems that the Internet of Vehicles technology is insufficient in expansibility and poor in compatibility, safety and efficiency are difficult to consider, and use requirements are difficult to meet. The system comprises a private key generation center PKG, a secret key generation center KGC, an on-board unit OBU, a roadside unit RSU and a double-layer block chain device. The private key generation center PKG is used for generating and distributing a public key and private key pair of the identity signcryption IBC; the key generation center KGC is used for key updating and management of the certificateless signcryption CLC; the OBU is used for performing communication between the vehicle and other vehicles or the road side unit; the roadside unit RSU is used for communication support and data forwarding; and the double-layer block chain equipment is used for carrying out data storage and security verification in the communication system. According to the invention, the calculation overhead and communication cost of the system are obviously reduced, and safe, efficient and extensible authentication and data transmission in a high-dynamic and large-scale V2X environment is realized.

The invention discloses an anti-quantum attack certificateless signcryption method, system and device in the Internet of Vehicles, and relates to the technical field of Internet of Vehicles information security, and the method comprises the steps: generating a system public parameter, a main public key and a main private key through a system parameter and a security parameter preset by a vehicle Internet of Vehicles system by a key generation center; obtaining a partial private key based on the identity identifier of the sender, and combining the partial private key with a locally generated random vector to obtain a complete private key of the sender; the sender vehicle performs signcryption operation on the plaintext message by using the complete private key of the sender vehicle and the public key of the receiver, and generates a signcryption text containing a ciphertext and a link label; the receiver carries out decryption and signature verification on the received signcryption text by using a private key of the receiver; according to the method, the lattice cryptographic algorithm based on the error learning and short integer solution problem is introduced, so that the capability of resisting quantum attacks is realized, and the security requirement of the Internet of Vehicles for resisting quantum computing threats in the future is met.

The invention discloses a PKI-to-IBC heterogeneous broadcast signcryption and key negotiation method oriented to Internet of Things communication equipment. The method sequentially comprises six stages of system initialization, data collection base station registration, terminal sensing equipment registration, heterogeneous signcryption, de-signcryption and key negotiation. In a system initialization stage, a registration management mechanism generates elliptic curve parameters and a system master key, and issues system parameters including a system public key, a related hash function and the like; in the registration stage, a data collection base station obtains a digital certificate through a PKI mechanism, and terminal sensing equipment obtains a private key and public key reconstruction factor through an IBC mechanism; in the signcryption stage, the data collection base station signcrypts messages based on a broadcast mechanism and sends the messages to multiple devices at the same time; in the de-signcryption stage, the terminal sensing device verifies the message integrity and the source legality by using the own key; in the key negotiation stage, the data collection base station and the terminal sensing device cooperatively generate a shared session key and establish a secure communication channel.

This invention discloses a certificate-free cross-domain authentication method in the cloud, comprising deploying key distribution centers in both the CLC domain and the trusted domain and generating system parameters; the user and the cloud service provider (CSP) each applying for partial private keys and combining them with secret values ​​to generate public-key and private-key pairs; the user calculating authentication information and sending an encrypted request; the CSP verifying the user's legitimacy and returning an encrypted response upon successful verification; the user receiving the response message, verifying the synchronized valid sequence number and the CSP; upon successful verification, saving the legitimate provider information, receiving cloud service resources, and establishing a cross-domain trust relationship and session negotiation key. This invention constructs a certificate-free cross-domain authentication method that abandons the complex certificate chain management of traditional PKI; it adopts a signature and signcryption-based primitive, balancing data confidentiality, integrity, and low computational complexity; and through session key negotiation and a local legitimate user list caching mechanism, it avoids duplicate authentication and improves processing efficiency.

The present application belongs to the field of vehicle safety communication, and particularly relates to a self-adaptive signature and signcryption vehicle networking certificateless privacy protection method, which comprises: initializing vehicle networking system parameters; a KGC generates a pseudo identity and a partial private key of a corresponding vehicle networking vehicle according to identity information submitted by the vehicle networking vehicle, and sends the pseudo identity and the partial private key to the vehicle networking vehicle terminal through a secure channel; the vehicle networking vehicle terminal generates a private key and a public key based on the received pseudo identity, the partial private key and the system parameters; a first vehicle networking vehicle generates a message tuple by using a self-adaptive signature and signcryption algorithm based on to-be-sent information and privacy requirements, a public key of a second vehicle networking vehicle and system parameters, and sends the message tuple to the second vehicle networking vehicle; after receiving the message tuple, the second vehicle networking vehicle executes a signature and signcryption verification algorithm according to a private key, system parameters and a public key of the first vehicle networking vehicle, restores original information and verifies the correctness of the original information, and realizes efficient message authentication of vehicle networking.

The invention provides a mixed attribute base searchable signcryption method, and relates to the technical field of cryptography. The method comprises the steps that a decryptor encrypts a retrieval keyword according to a classic decryption key to generate a search token and sends the search token to a cloud server; wherein the classic decryption key is information obtained by encrypting a decryption attribute set of a decryptor by the key generation center; the cloud server adopts a cloud private key, searches a target hybrid ciphertext matched with the keyword from the keyword components of the plurality of hybrid ciphertexts according to the search token, and sends the target hybrid ciphertext to a decipherer; each hybrid ciphertext is information obtained after the signcryption person encrypts the message to be signcrypted and the keyword information of the message to be signcrypted according to the post-quantum public key; and the decryptor decrypts the target hybrid ciphertext by using the post-quantum private key and determines the message to be signcrypted, and the post-quantum public key and the post-quantum private key are keys pre-generated by the key generation center. According to the invention, fusion of an anti-quantum key encapsulation mechanism and an attribute-based searchable encryption technology can be realized.

The application discloses a kind of smart grid data encryption transmission method and system based on homomorphic sign cipher, belongs to smart grid data transmission technical field, including power operation center generates public parameter and sends to user;User generates private key based on the public parameter, and the public parameter and the private key are used to the power data to be transmitted in user to sign and cipher, generate user report and send to gateway;Gateway uses the homomorphism of sign and cipher to aggregate the user report, obtain aggregated report, and send aggregated report to power operation center;Power operation center is decrypted to power data by aggregated report, and completes smart grid data encryption transmission;The application uses sign and cipher scheme, and the encryption and signature of data are completed by one calculation, effectively solve the problem of low encryption and decryption efficiency and large communication overhead in traditional method by superimposing encryption and signature steps to realize privacy and authentication.

The invention discloses a distributed responsibility-traceable cross-chain data consistency verification method and system applied to block chain cross-chain, and belongs to the field of block chain cross-chain technology and information security. According to the method, a tetragonal framework comprising a data owner, a source chain, a target chain and an independent auditing chain is constructed, a distributed processing mechanism based on certificateless threshold signcryption is deployed on the two sides of the source chain and the target chain, and full-process decentralization of cross-chain data interaction is achieved; blocking a node private key reconstruction and signature repudiation path from a cryptography bottom layer by designing an anti-collusion parameter broadcast and identity disclosure strategy; an auditing chain is introduced to serve as a supervision layer, an aggregation verification algorithm based on homomorphic hash is adopted, and batch consistency auditing is achieved on the premise that original data privacy is not leaked. And when verification fails, the system accurately locates malicious nodes through a specific responsibility investigation algorithm and automatically punishes the malicious nodes. According to the invention, while the confidentiality and integrity of cross-chain data are guaranteed, the robustness and supervisibility of the system are significantly improved.

The application provides a lattice-based signcryption method with a commission test function, which comprises the following steps: a commission server receives a first signcryption text and a first authorization trapdoor sent by a first receiving user, and receives a second signcryption text and a second authorization trapdoor sent by a second receiving user; the commission server judges whether the plaintext corresponding to the first signcryption text and the plaintext corresponding to the second signcryption text are consistent, and sends the judgment result to the first receiving user and the second receiving user. The application can construct an equivalent test framework capable of resisting quantum computer attacks under a standard model, and can be applied to signcryption technology, so that the integrity and traceability of the ciphertext information are ensured, and the security level is improved.

The application relates to a signcryption method with equality test attribute, which comprises the following steps: obtaining a public parameter set pp; generating a first key k r and a second key k s according to the public parameter set pp; encrypting an initial plaintext mu according to the above content and a first timestamp T to obtain an initial ciphertext; signing the initial plaintext mu, the first public key pk r and the initial ciphertext to obtain a final ciphertext ct; obtaining the initial plaintext mu according to a second public key pk s , a first private key sk r and the final ciphertext ct, and verifying a signature e corresponding to a sender; generating a trapdoor corresponding to a second timestamp according to the second timestamp and the first private key sk r to obtain a verification label and sending the verification label to a third party; the third party obtains a hash value H(mu) of the final ciphertext ct respectively according to the verification label and the final ciphertext ct, and judges whether different final ciphertexts ct are obtained by signcryption of the same initial plaintext mu according to the hash value H(mu). Through the technical scheme, the risk of privacy leakage of encrypted data is reduced, and the security of data is improved.

The invention discloses a signcryption method of customs intelligent equipment and a signcryption system using the same, and relates to the technical field of encryption and identity authentication, and the method comprises an initialization stage, a key generation stage, a signcryption stage and a de-signcryption stage; in the de-signcryption stage, a verification party sequentially calculates W '= U * (xR + yR) and B' = H2 (RIDR, U, W ') by using a complete public key PKm = {Xm, Am} of customs intelligent equipment; and the verifier continues to calculate hm '= H3 (RIDm, Xm, Am, c, U, T) and verifies whether the condition is true or not. The invention mainly solves the problem of how to provide a signcryption method and a signcryption system for customs intelligent equipment. According to the method, the security of the customs intelligent equipment, the verification party and the authentication server is improved, and in addition, in the initialization stage, quantum computing attacks can be resisted after the finite field and the elliptic curve E with the high level are selected.

The application discloses a ring signature method based on SM9 and meeting self-proving, and comprises the following steps: generating system parameters according to an SM9 algorithm; generating a user private key according to a user identity based on an SM9 identification algorithm; a real ring signature user combines other user public keys to generate a ring signature corresponding to a plaintext file; a receiver decrypts and verifies whether the received ring signature is valid; and the real ring signature user proves to a receiving user that the real signature user of the ring signature is himself. The application realizes the ring signature method meeting self-proving in the national cryptography system, is beneficial to constructing a data security system which is self-controllable, safe, credible, efficient and usable, and can be used for constructing an anonymous reward reporting scheme in a new smart city, such as a smart public security and a smart discipline inspection and supervision.