Authentication system realizing method supporting exclusive control of digital signature key

Abstract

The invention relates to the technical field of information security, in particular to an authentication system supporting exclusive control of a digital signature key on the basis of a combined public key. A seed key consisting of multiple key sections is constructed and comprises a seed public key and a seed private key; by using a user identifier, a key management centre generates a user identifier private key through the seed private key and writes the user identifier private key into a key device; the key device starts an initialization program to automatically generate a composite private key for digital signature and a random public key digitally signed by the user identifier private key while used for the first time; and the composite private key and the digitally signed random public key are written into a secure storage area of the key device, and the user identifier private key and process data are destructed. The digital signature key is automatically produced and controlled by the user so that regulations of relevant laws are satisfied; furthermore, the exclusive control of the digital signature key by the user is assured through a third party of register link; and one-way key exchange, key escrow and key recovery are realized through providing the identifier key for the key exchange.

Description

Technical field [0001] The present invention relates to the technical field of information security, in particular to a method for implementing an authentication system based on a combined public key (CPK) supporting exclusive control of a digital signature private key. Background technique [0002] As the network and information technology gradually enter people’s production and life, protecting the authenticity, security, and responsibility (non-repudiation) of information has become a common concern for the government and society. To solve the above problems, authentication systems are needed to provide support. Around the construction of the authentication system, two major technical systems have been formed. One is certificate authentication based on traditional public key cryptography, such as public key infrastructure (PKI) authentication system, and the other is identification authentication based on public key cryptography for identification, such as combined public key c...

AI Technical Summary

Problems solved by technology

[0013] The above method seems rigorous, but there are actually two key problems: First, although the signature private key and the key generation process appear to be in the hands of the user, the real role of trust guarantee is that the CA uses its root key to verify the public key. digital signature

However, the system is currently based on the Key Management Center (KMC) as the root of trust. KMC can calculate the private keys of all users through the seed private key it holds, which cannot meet the requirements of relevant laws. The digital signature key is provided by the user himself. control requirements

Images