57 results about "Signcryption" patented technology

The present invention discloses a ring signcryption generation method, system and device based on the SM9 digital signature algorithm. The present invention utilizes the bilinearity, non-degeneracy and computability characteristics of bilinear mapping, and adopts the SM9 digital signature algorithm and a hash function to construct a ring signcryption scheme. By optimizing the SM9 digital signature algorithm, the present invention has lower computational overhead and communication overhead, is particularly suitable for communication environments with limited energy and bandwidth, and fills the gap of the SM9 digital signature algorithm in ring signcryption schemes.

The invention relates to a stream data sharing method and system based on bidirectional Hash chain symmetric encryption and signcryption in the technical field of data sharing. The method comprises the following steps: calculating an original beginning left key corresponding to a first encryption time unit and an original ending right key corresponding to a last encryption time unit in a maximum time interval; on the basis of the original beginning left key and the original ending right key, original encryption sub-keys corresponding to other encryption time units are calculated to generate an encryption key; performing symmetric encryption on the stream data by using the encryption key, obtaining response data of a request time period based on the application request, and performing signcryption processing on the response data to obtain signcryption data; and sending the signcryption data to the data application user, so that the data application user performs de-signcryption on the signcryption data to obtain the response data, and performs decryption processing on the response data to obtain the target data, thereby solving the problems of relatively high resource consumption and relatively low confidentiality during point-to-point data transmission of the existing stream data.

The invention belongs to the field of secure communication in the Internet of Vehicles, and particularly relates to a lightweight certificateless signcryption method capable of proving security in the Internet of Vehicles, which comprises the following steps: constructing an Internet of Vehicles system consisting of a key generation center KGC, a roadside unit, a vehicle and a block chain, and initializing system parameters; the vehicle-mounted unit in the vehicle and the roadside unit outside the vehicle respectively register in the key generation center, and system parameters and pseudonyms are returned after KGC verification is passed; the KGC generates a part of keys for the pseudonym and returns the keys to the vehicle, and the vehicle calculates and generates a key and a public key according to the returned part of keys and the pseudonym, and uploads the public key and the pseudonym to the block chain; the vehicle signcrypts the message according to the key, obtains the public key of the receiver from the block chain according to the pseudonym of the opposite side, and then sends the signcryption message to the receiver; and the target vehicle or the roadside unit receives the message and performs message de-signcryption, and uploads a transaction record to the block chain for storage. According to the invention, while anonymous and secure communication of each entity in the Internet of Vehicles system is ensured, the communication efficiency is improved by reducing the vehicle calculation pressure and the communication overhead.

The invention relates to a bank-enterprise direct connection scene-oriented revocable security signcryption method, and belongs to the field of information security. According to the method, digital signature and encryption are deeply coupled in a single logic step, so that the calculation complexity is reduced, and the requirements of confidentiality, integrity and non-repudiation of information transmission in a financial scene are met; and meanwhile, a key updating mechanism is designed, so that access blocking of the history and the newly-added ciphertext after permission revocation is ensured. In order to solve a subversive attack possibly initiated by an internal opponent, a password reverse firewall architecture is introduced, an encrypted ciphertext is reconstructed through a re-randomization module, and algorithm risks possibly caused by tampering of a random number generator are blocked. A block chain intelligent contract and aggregation signature technology is further introduced, a fair and reliable decentralized verification platform supporting batch verification is constructed for bank and enterprise users, the cloud verification efficiency is improved, and responsibility tracing can be performed through records on the block chain when major property safety accidents occur.

The invention discloses an Internet of Vehicles heterogeneous signcryption communication system and method based on a double-layer block chain, relates to the technical field of Internet of Vehicles, and solves the technical problems that the Internet of Vehicles technology is insufficient in expansibility and poor in compatibility, safety and efficiency are difficult to consider, and use requirements are difficult to meet. The system comprises a private key generation center PKG, a secret key generation center KGC, an on-board unit OBU, a roadside unit RSU and a double-layer block chain device. The private key generation center PKG is used for generating and distributing a public key and private key pair of the identity signcryption IBC; the key generation center KGC is used for key updating and management of the certificateless signcryption CLC; the OBU is used for performing communication between the vehicle and other vehicles or the road side unit; the roadside unit RSU is used for communication support and data forwarding; and the double-layer block chain equipment is used for carrying out data storage and security verification in the communication system. According to the invention, the calculation overhead and communication cost of the system are obviously reduced, and safe, efficient and extensible authentication and data transmission in a high-dynamic and large-scale V2X environment is realized.

The invention relates to a broadcast signcryption method, a broadcast signcryption system, broadcast signcryption equipment and a readable medium. The method comprises the following steps: a trusted center generates and issues public parameters of a system according to preset security parameters; the receiver generates registration parameters including a key pair, a challenge-response pair and a physical protection parameter, and discloses a public key of the registration parameters; the method comprises the following steps: generating registration parameters including challenge-response pairs and physical protection parameters according to a pseudonym and a part of private keys generated by a sender; the sender judges the physical attack based on own registration parameters; encrypting the confidential information to generate a broadcast ciphertext; broadcasting the broadcast ciphertext and the pseudonym of the sender to each receiver; and each receiver judges the physical attack based on the respective registration parameter, judges the validity of the received broadcast ciphertext, generates a verification parameter to verify the broadcast ciphertext, and decrypts the confidential message in the unattacked broadcast ciphertext. According to the invention, secure communication between the unmanned aerial vehicle and the ground station is realized.

The invention provides an Internet of Vehicles lattice-based condition privacy protection certificateless proxy authentication method, which comprises the following steps of: generating a hash function, a main public key and a private key of a tracking server through a key generation center, and forming a system public parameter based on the hash function; based on an anonymization request initiated by a vehicle, a pseudo name of the vehicle is generated through a tracking server in combination with a system public parameter; a vehicle, a roadside unit and an application server are interacted with a key generation center, and respective public and private key pairs are generated in combination with system public parameters; the roadside unit interacts with the vehicle, and generates a proxy key of the vehicle and a proxy public key of the vehicle by using the system public parameters; a signcryption result is generated for the vehicle through the roadside unit, and the signcryption result is sent to the application server to be verified and received; and the real identity information of the vehicle is obtained through the tracking server. According to the invention, based on the certificateless password, the security problems of certificate management and key escrow are solved.

The invention belongs to the field of computer and information security, and discloses a blockchain anti-long-range attack certificateless puncturable signcryption method, which comprises seven steps of system initialization and parameter establishment, user part private key extraction, puncture key updating, secret value extraction, public key generation, signcryption and de-signcryption. An authoritative node set in the block chain is adopted to initialize the system and generate a user part private key and a puncture key, so that the defect of key distribution based on a centralized entity is overcome; a puncturable technology is embedded, and the private key of the user is associated with the message, so that the capability of operating specific messages is realized, and long-range attacks caused by key leakage in the block chain are resisted; in addition, the signcryption and de-signcryption operation not only saves the calculation and communication cost, but also ensures the confidentiality and integrity of the block chain message. According to the method, the problems that long-range attacks exist in centralized entities and block chain rights and interests in the prior art, and confidentiality and integrity of messages on a chain cannot be provided at the same time in the prior art are solved.

The invention discloses a certificateless strong anonymous aggregation signcryption method in the Internet of Vehicles, and belongs to the technical field of information security. Based on a certificateless cryptosystem, the problems of certificate management and key escrow are effectively solved; a vehicle pseudonym autonomous dynamic updating mechanism based on pseudonym root parameters is designed, dependence of pseudonym updating on time is eliminated, a vehicle sends a registration application and a pseudonym activation application to different trusted mechanisms, the problem that the trusted mechanisms directly and independently restore the real identity of a vehicle user is solved, strong anonymity of the vehicle is guaranteed, and the reliability of the vehicle is improved. The public and private keys of the vehicle can be updated along with the update of the pseudonym, so that the forward security of the method is ensured; according to the aggregation signcryption method disclosed by the invention, a sender is allowed to perform encryption and signature operations on the message at the same time, and a verifier can verify a plurality of signatures at the same time, so that the calculation overhead in the signature generation and verification process is reduced while the message confidentiality is ensured; the method can effectively resist various attacks such as adaptive selection message attacks, adaptive selection ciphertext attacks, replay attacks and man-in-the-middle attacks, is low in calculation cost and low in communication overhead, and has a wide application prospect in the field of the Internet of Vehicles in which a large number of message signatures exist at the same time and message privacy needs to be protected.

The invention discloses an identity hiding post-quantum identity-based ciphertext signcryption method, which adopts bilinear pairing as a basic structure, innovatively introduces a lattice-based post-quantum symmetric encryption algorithm, and introduces an identity hiding characteristic on the basis of a traditional identity-based signcryption scheme. Meanwhile, the post-quantum encryption algorithm is integrated into the signcryption process, so that the anti-quantum performance of the scheme is remarkably enhanced. The hybrid design not only retains the advantages of identity-based passwords, but also provides strong post-quantum security assurance.

The invention provides a cleanable certificateless signcryption method, a cleanable certificateless signcryption device, cleanable certificateless signcryption equipment and a cleanable certificateless signcryption system. Receiving a signcryption ciphertext which is sent by the data sending end and contains signature information and ciphertext information; verifying the signcryption ciphertext according to the public parameter and the key information; and after the verification is passed, re-randomizing signature information and ciphertext information in the signcryption ciphertext in an undecrypted state to obtain a purified signcryption ciphertext, and sending the purified signcryption ciphertext to a data receiving end to trigger the data receiving end to verify and decrypt the purified signcryption ciphertext to obtain plaintext information corresponding to the ciphertext information. According to the method and the device, the signcryption ciphertext can be re-random on the premise that the ciphertext is not unlocked, and meanwhile, the re-random signcryption ciphertext is ensured to still meet confidentiality and integrity and can be verified by a receiving end, so that leakage attack behaviors of a malicious data sender are effectively prevented.

The invention discloses a data transmission method and device, a medium, equipment and a product, relates to the technical field of communication, and is used for improving the security of an industrial network. The method comprises the steps that the method is applied to an industrial computing network platform ICNP; the method comprises the following steps: receiving an aggregation ciphertext from an industrial hyper-edge server; the aggregated ciphertext is obtained by aggregating signcryption ciphertexts of multiple pieces of ICN; under the condition that the anti-collusion factor of the aggregated ciphertext is a target anti-collusion factor, acquiring a to-be-transmitted plaintext from the aggregated ciphertext; the anti-collusion factor is determined by performing hash operation according to the signcryption ciphertext of each ICN; the signcryption ciphertext comprises a first sub-signcryption ciphertext and a second sub-signcryption ciphertext; the first sub signcryption ciphertext is obtained by performing XOR operation on the to-be-transmitted plaintext; the second sub signcryption ciphertext is determined by performing hash operation according to the signcryption factor; the signcryption factor comprises a random number and a first sub-signcryption ciphertext.

According to the linkable post-quantum certificateless signcryption method and system, a new post-quantum CLSC scheme is provided, the linkable IoMT is realized, the design provided by the invention is convenient for safely transmitting medical data between a doctor and a patient, the legality of a user is effectively verified, and the user experience is improved. And the risk of private information leakage is reduced to the greatest extent. In order to achieve the purpose, a lattice sampling algorithm and a hash function are used for forming a secret key, then a signature encryption method is adopted, and a link label is designed at the same time.

The present invention discloses a lightweight quantum digital signature and quantum digital signcryption method. The quantum digital signature method includes: user A generates a request req for performing a quantum digital signature on data M and sends the request req to a trusted CA center; user A registers in the trusted CA center and negotiates with the trusted CA center to generate and store a one-time certificate for signature; user A then signs the data M to generate a signature file M-SIGN; user A generates a transmission file DOC based on the signature file M-SIGN and sends it to user B, and user B performs a signature verification operation on the signature file M-SIGN in the transmission file DOC. User A of the present invention uses a signature certificate otCA, its own public CA certificate CA 1A etc. to sign the data M, realizing the binding of the transmitted data M to the identity of user A; and the communication data is only transmitted between users A and B, and no third party will receive the communication data, ensuring that the communication data will not be known to irrelevant third parties.

The invention discloses a multi-message multi-receiver signcryption method and system on a ring. The method comprises the following steps: generating a key; the sender selects a random number, signcrypts the message according to the key and the random number, and generates a ciphertext data packet; the sender sends the ciphertext data packet to a receiver; and the receiver receives the corresponding ciphertext data packet, unsigncrypts the ciphertext data packet by using the private key and the public key of the sender, and obtains the message. The method and the system can reduce the sizes of the public and private keys, reduce the calculation amount and the data amount of the ciphertext, and improve the calculation efficiency.

The invention discloses an anti-quantum attack certificateless signcryption method, system and device in the Internet of Vehicles, and relates to the technical field of Internet of Vehicles information security, and the method comprises the steps: generating a system public parameter, a main public key and a main private key through a system parameter and a security parameter preset by a vehicle Internet of Vehicles system by a key generation center; obtaining a partial private key based on the identity identifier of the sender, and combining the partial private key with a locally generated random vector to obtain a complete private key of the sender; the sender vehicle performs signcryption operation on the plaintext message by using the complete private key of the sender vehicle and the public key of the receiver, and generates a signcryption text containing a ciphertext and a link label; the receiver carries out decryption and signature verification on the received signcryption text by using a private key of the receiver; according to the method, the lattice cryptographic algorithm based on the error learning and short integer solution problem is introduced, so that the capability of resisting quantum attacks is realized, and the security requirement of the Internet of Vehicles for resisting quantum computing threats in the future is met.

The present invention discloses a blockchain-assisted conditional privacy protection method and system based on ring signcryption, belonging to the field of blockchain technology. The method comprises: protecting the vehicle network by embedding a first blockchain and a second blockchain in a vehicle network consisting of a trusted authority (TA), a roadside unit (RSU), and vehicles equipped with an OBU. The first blockchain is used to store the identity and public key information of the vehicle user. When a vehicle engages in malicious behavior, the TA removes the malicious vehicle from the first blockchain and stores it in the second blockchain. The present invention can be used to maintain the security and data integrity of vehicle communications through blockchain. By storing traffic data on the blockchain, it can ensure that the data is not tampered with or forged, helping to prevent the spread of false information and increase the credibility of vehicle communications, thereby reducing the threat of false and malicious vehicles.

The invention belongs to the technical field of medical data security, and particularly discloses a medical data security system and method based on attribute-based signcryption ABSC, and the system comprises a system initialization module which generates a public key and a master key of the system through a trusted authority TA, and is responsible for participating in identity verification and key distribution of entities; the key generation and registration module is used for generating a random value for a participating entity through a trusted institution TA and obtaining a signature key, a verification key and a decryption key; the data encryption and storage module encrypts the medical data collected by the intelligent device SD, and stores the encrypted data on a block chain through an edge node ED; and the data access and decryption module is used for decrypting the data stored on the block chain and is internally provided with a predefined access control strategy. By the adoption of the medical data security system and method based on the attribute-based signcryption ABSC, the performance of the system in the aspects of data security, privacy protection, calculation efficiency and expandability can be comprehensively improved.

The invention discloses a PKI-to-IBC heterogeneous broadcast signcryption and key negotiation method oriented to Internet of Things communication equipment. The method sequentially comprises six stages of system initialization, data collection base station registration, terminal sensing equipment registration, heterogeneous signcryption, de-signcryption and key negotiation. In a system initialization stage, a registration management mechanism generates elliptic curve parameters and a system master key, and issues system parameters including a system public key, a related hash function and the like; in the registration stage, a data collection base station obtains a digital certificate through a PKI mechanism, and terminal sensing equipment obtains a private key and public key reconstruction factor through an IBC mechanism; in the signcryption stage, the data collection base station signcrypts messages based on a broadcast mechanism and sends the messages to multiple devices at the same time; in the de-signcryption stage, the terminal sensing device verifies the message integrity and the source legality by using the own key; in the key negotiation stage, the data collection base station and the terminal sensing device cooperatively generate a shared session key and establish a secure communication channel.

This invention discloses a certificate-free cross-domain authentication method in the cloud, comprising deploying key distribution centers in both the CLC domain and the trusted domain and generating system parameters; the user and the cloud service provider (CSP) each applying for partial private keys and combining them with secret values ​​to generate public-key and private-key pairs; the user calculating authentication information and sending an encrypted request; the CSP verifying the user's legitimacy and returning an encrypted response upon successful verification; the user receiving the response message, verifying the synchronized valid sequence number and the CSP; upon successful verification, saving the legitimate provider information, receiving cloud service resources, and establishing a cross-domain trust relationship and session negotiation key. This invention constructs a certificate-free cross-domain authentication method that abandons the complex certificate chain management of traditional PKI; it adopts a signature and signcryption-based primitive, balancing data confidentiality, integrity, and low computational complexity; and through session key negotiation and a local legitimate user list caching mechanism, it avoids duplicate authentication and improves processing efficiency.

The present application belongs to the field of vehicle safety communication, and particularly relates to a self-adaptive signature and signcryption vehicle networking certificateless privacy protection method, which comprises: initializing vehicle networking system parameters; a KGC generates a pseudo identity and a partial private key of a corresponding vehicle networking vehicle according to identity information submitted by the vehicle networking vehicle, and sends the pseudo identity and the partial private key to the vehicle networking vehicle terminal through a secure channel; the vehicle networking vehicle terminal generates a private key and a public key based on the received pseudo identity, the partial private key and the system parameters; a first vehicle networking vehicle generates a message tuple by using a self-adaptive signature and signcryption algorithm based on to-be-sent information and privacy requirements, a public key of a second vehicle networking vehicle and system parameters, and sends the message tuple to the second vehicle networking vehicle; after receiving the message tuple, the second vehicle networking vehicle executes a signature and signcryption verification algorithm according to a private key, system parameters and a public key of the first vehicle networking vehicle, restores original information and verifies the correctness of the original information, and realizes efficient message authentication of vehicle networking.

The invention provides a mixed attribute base searchable signcryption method, and relates to the technical field of cryptography. The method comprises the steps that a decryptor encrypts a retrieval keyword according to a classic decryption key to generate a search token and sends the search token to a cloud server; wherein the classic decryption key is information obtained by encrypting a decryption attribute set of a decryptor by the key generation center; the cloud server adopts a cloud private key, searches a target hybrid ciphertext matched with the keyword from the keyword components of the plurality of hybrid ciphertexts according to the search token, and sends the target hybrid ciphertext to a decipherer; each hybrid ciphertext is information obtained after the signcryption person encrypts the message to be signcrypted and the keyword information of the message to be signcrypted according to the post-quantum public key; and the decryptor decrypts the target hybrid ciphertext by using the post-quantum private key and determines the message to be signcrypted, and the post-quantum public key and the post-quantum private key are keys pre-generated by the key generation center. According to the invention, fusion of an anti-quantum key encapsulation mechanism and an attribute-based searchable encryption technology can be realized.

The application discloses a kind of smart grid data encryption transmission method and system based on homomorphic sign cipher, belongs to smart grid data transmission technical field, including power operation center generates public parameter and sends to user;User generates private key based on the public parameter, and the public parameter and the private key are used to the power data to be transmitted in user to sign and cipher, generate user report and send to gateway;Gateway uses the homomorphism of sign and cipher to aggregate the user report, obtain aggregated report, and send aggregated report to power operation center;Power operation center is decrypted to power data by aggregated report, and completes smart grid data encryption transmission;The application uses sign and cipher scheme, and the encryption and signature of data are completed by one calculation, effectively solve the problem of low encryption and decryption efficiency and large communication overhead in traditional method by superimposing encryption and signature steps to realize privacy and authentication.

The invention discloses a data transmission method and device, a medium, equipment and a product, relates to the technical field of communication, and is used for improving encrypted data transmission efficiency. The method comprises the steps of performing signcryption on a to-be-transmitted plaintext to obtain a signcryption ciphertext; the signcryption ciphertext comprises a first sub-signcryption ciphertext and a second sub-signcryption ciphertext; the first sub signcryption ciphertext is obtained by performing XOR operation on the to-be-transmitted plaintext; the second sub signcryption ciphertext is determined by performing hash operation according to the signcryption factor; the signcryption factor comprises a random number and a first sub-signcryption ciphertext; and sending the signcryption ciphertext to a receiving device.

Method for confirming ownership of digital assets based on hash algorithm and method for tracing to a source of digital assets based on hash algorithm are provided. Entities involved in confirming the ownership of digital assets include an original user, a CA authentication center and a digital asset authentication center. The process of confirming the ownership includes generating a one-time CA certificate by the original user, authenticating the digital assets by the digital asset authorization center and the original user, generating an ownership confirming document by the original user, creating a quantum digital signature by a three-party, and the like. The method for tracing includes generating subsidiary documents in real time, constructing a unique identity for a digital asset at an accessing moment, traceability analysis, and so on.

A lightweight attribute-based signcryption (ABSC) method for cloud-fog-assisted Internet-of-things: performing, by a central authority, system initialization to generate a system key pair, and disclosing a public key, the public key including a symmetric encryption algorithm (SEA) and a key derivation function (KDF); generating, by the central authority, a decryption key and an outsourcing decryption key based on a decryption attribute set of a data user, and generating a signature key and an outsourcing signature key based on a signature access structure; calling, by a data owner, a fog node for outsourcing signature, performing symmetric encryption on a plaintext based on a symmetric key, and performing ABSC on the symmetric key based on a defined encryption access structure; and calling, by the data user, a fog node for outsourcing signature verification, calling a fog node for outsourcing decryption, and performing symmetric decryption on a ciphertext based on an outsourcing decryption result.

The invention provides an SM2 signcryption method and system supporting rapid revocation in a vehicle-mounted network environment. The method comprises the steps of generating a global public parameter set and a master key of the system, initializing roadside infrastructures, initializing an authentication server, generating a vehicle anonymous identity and an implicit certificate, generating a vehicle and a corresponding private key, generating a signcryption ciphertext, decrypting and verifying, and tracking and cancelling. The invention further provides an SM2 signcryption system supporting rapid revocation in the vehicle-mounted network environment, and the SM2 signcryption system comprises a system initialization module, a legal vehicle registration module, a vehicle pseudonym generation module, a message signcryption generation module, a message decryption verification module and a tracking revocation module. And the storage capacity of the block chain is not additionally increased. When the vehicle breaks the law, the trusted center can realize quick revocation through a method of logically deleting the certificate of the vehicle.

The invention is applicable to the technical field of information, and provides a carbon emission permit transaction method based on a block chain, and the method comprises the steps: enabling an intelligent contract deployed in the block chain to generate a corresponding pseudonym for each enterprise according to the identity information of a first enterprise and a second enterprise in a first password system and a second password system, based on the public key of the first enterprise and the pseudonym of the second enterprise, the second enterprise performs signcryption on the carbon quota transaction information by adopting a signcryption strategy and uploads an obtained transaction ciphertext to the block chain, and the smart contract performs a multi-ciphertext equivalent test on the ciphertext in the block chain according to a test trap door uploaded by the first enterprise. According to the method and the device, the trade ciphertext matched with the test trap door is obtained, the first enterprise performs de-signcryption on the trade ciphertext according to the de-signcryption strategy to obtain carbon quota trade information, so that secure heterogeneous communication among enterprises under different password systems is realized in a complex and changeable carbon emission permit trade platform, the privacy of a user is protected, and the security of the trade information is improved. And the data confidentiality, security and efficiency of the transaction are also improved.

The invention discloses an Internet of Things privacy protection method based on lattice ring signcryption. The method comprises the steps of system initialization, generation of partial private keys of intelligent equipment of the Internet of Things, generation of partial private keys of a third-party server, generation of public and private keys of the intelligent equipment of the Internet of Things, certificateless ring signcryption and unsigncryption. In the step of certificateless ring signcryption, the problems of public key encryption, certificateless ring signature and quantum computing in the Internet of Things environment are solved at the same time, the computing efficiency is improved, the privacy security of the Internet of Vehicles is realized, the problem of dependence on a secure channel is avoided, and the problems of certificate management and key escrow are also eliminated. The method has the advantages of low calculation complexity, quantum security and the like, and can be applied to the field of network information security.

The invention discloses a carbon monitoring platform user identity authentication method, device and system, and a storage medium. The method comprises the following steps: S1, obtaining relay chain parameters; s2, a cross-chain gateway DCCG of the application chain carries out application chain registration through the relay chain according to the relay chain parameters; s3, the user sends a cross-chain user registration request to the relay chain through the registered application chain; and S4, according to the relay chain parameters, realizing identity authentication of the user through signcryption and de-signcryption of the plaintext message. By adopting the technical scheme of the invention, the problems of low decentration, high resource consumption, low confidentiality of identity interaction information and high time overhead in the identity authentication of the current carbon monitoring platform are solved.