Collaborative Digital Signature with Single-Exchange Key Segments
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current two-party collaborative signature methods in SM2 digital signature algorithms require multiple rounds of information interaction between a client and a server, leading to low efficiency and performance.
Innovation Solution
A method where the client and server exchange information only once during collaborative signature by using pre-generated triplets and private key segments, reducing calculation amounts and improving efficiency through a single interaction.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If multiple rounds of information interaction are performed between client and server for collaborative signature, then security of private key segments is maintained, but signature efficiency and performance deteriorate
Solution Approach 1:
The patent applies preliminary action by pre-generating triplets (including random numbers, public keys, and signature components) before the actual signature operation. This allows the client and server to perform most computational work in advance, reducing the number of interaction rounds needed during the actual signature process while maintaining security through the pre-established cryptographic parameters.
Solution Approach 2:
The patent segments the signature process into distinct phases: pre-computation phase where triplets are generated, and execution phase where the actual signature is produced. It also segments the private key into multiple segments stored separately on client and server, allowing parallel computation and reducing communication overhead while maintaining security through distributed key management.
2Measurement precision
If multiple rounds of information interaction are performed for collaborative signature, then calculation accuracy is ensured, but communication delay increases
Solution Approach 1:
The patent performs preliminary computation of signature components and verification data before actual signature operations. By pre-calculating and storing necessary cryptographic parameters in triplets, the system ensures calculation accuracy is established in advance, eliminating the need for multiple verification rounds and reducing communication delay significantly.
3Reliability
If private key is split into segments for secure storage, then security is improved, but calculation complexity increases
Solution Approach 1:
The patent segments the private key into multiple segments distributed between client and server, improving security through spatial separation. To manage the resulting complexity, it introduces structured triplets that organize all necessary computational elements (random numbers, public keys, signature components) in a standardized format, simplifying the multi-party computation process and reducing operational complexity despite key segmentation.
Data Source
AI summary
A signature method includes a client that receives a to-be-signed first message from a cloud service node. The client sends a first parameter set to a server. The server sends a second parameter set to the client. The first parameter set is generated based on the first message, a 1st triplet, a first random number, identification information of the client, and a first private key segment. The second parameter set is generated based on the first parameter set, a 2nd triplet, a second random number, and a second private key segment. The second parameter set includes a first signature component. The client generates a second signature component based on the 1st triplet and the second parameter set, and sends a digital signature of the first message to the cloud service node, where the digital signature includes the first signature component and the second signature component.