Method for adaptively performing data encryption and authentication without authentication center

Abstract

The invention discloses a method for adaptively performing data encryption and authentication without an authentication center, which comprises the following steps that: (1) system parameters are determined; (2) information is sent and received and both parties are registered; (3) a sender carries out data encryption and authentication protection operation on a plaintext message to be sent to a receiver; and (4) the receiver carries out reading and verification operation on the received data message. The step (3) is realized by computing a key parameter, computing a signature parameter, outputting an electronic signature which is equal to zero when only carrying out data encryption on the plaintext message, outputting an encrypted ciphertext which is equal to the plaintext message when only carrying out electronic signing, computing the electronic signature when carrying out both data encryption and electronic signing, carrying out encryption operation on the combination of the plaintext message and the electronic signature, combining the ciphertext, the signature parameter and the electronic signature to form a data message and sending the data message. The plaintext message can be adaptively subjected to data encryption and content integrity authentication; and the problems caused by adoption of the authentication center and a plurality of functional parts in the conventional method are solved.

Description

technical field [0001] The invention belongs to data protection technology in the fields of e-commerce, e-government, information security, etc., and in particular relates to an adaptive data encryption and authentication method without an authentication center. Background technique [0002] In various fields related to information such as e-commerce system, e-government system, information security system, network communication system, etc., data encryption technology and electronic signature technology are two extremely basic data protection technologies. Among them, data encryption technology protects the confidentiality of data. It converts data into meaningless ciphertext through encryption keys and data encryption algorithms to prevent data from being accessed by unauthorized persons. The electronic signature technology authenticates the integrity and source of the data, completely simulating the function of a handwritten signature in real life, and has the capabilitie...

AI Technical Summary

Problems solved by technology

[0007] In the existing application system, in order to meet the application requirements of these three situations, it is usually necessary to prepare multiple independent functional components such as encryption protection and electronic signature, which respectively meet the above three different requirements, but increases the application system The space resources consumed cannot meet the application requirements in the time and space resource-constrained environments such as embedded environment, mobile communication, wireless communication, etc.

[0008] In addition, in the actual operation process of the above three cases, due to the use of technologies such as electronic signature, key distribution and data encryption, it is strongly dependent on a trusted third-party organization as the certification center, in the electronic signature, key distribution and data encryption. In the authentication process of data encryption, the verifier and the authentication center need to complete the relevant authentication through real-time interaction, which brings a large calculation burden, communication burden, and data expansion, which not only greatly increases the workload of the system, but also reduces the system. Work efficiency cannot meet the needs of practical applications, which seriously limits the promotion and application of related technologies

Images