SM2 signature algorithm-based double-check signature method and digital signature equipment

Abstract

The invention discloses an SM2 signature algorithm-based double-check signature method. The method comprises the following steps: receiving an SM2 double-check signature request from a user, wherein the SM2 double-check signature request comprises a message p1 of bank transaction information of the user; analyzing the message p1 of the bank transaction information of the valid user to generate transaction information p2; displaying the analyzed transaction information p2 to the user for check and confirmation; detecting whether a confirmation signal from the user is received, if so, respectively calculating a hash value hash1=H(Z, p1) of the message p1 of the bank transaction information of the user and a hash value hash2=H(p2) of the transaction information p2 by using a hash algorithm, and generating a random number k which belongs to [1, n-1]; performing a point multiplication operation of an elliptic curve on a random number k and a base point G of the elliptic curve E to obtain a point kG on the elliptic curve E. By adopting the SM2 signature algorithm-based double-check signature method, the technical problem that user fund is stolen by online banking transaction hijacking, transaction manipulation and remote control which easily happen in the conventional method is solved.

Description

technical field [0001] The invention belongs to the field of information security, and more specifically, relates to a method for rechecking signatures based on an SM2 signature algorithm and a digital signature device. Background technique [0002] At present, most online banks use the public key infrastructure (PKI) system based on digital certificates to ensure the security of online banking data. Digital certificates are issued by banks themselves or by third-party CAs (Certificate Authority). The public key cryptography mechanism with the certificate as the core can encrypt and decrypt information transmitted on the network, digitally sign and verify, to ensure the confidentiality and integrity of messages transmitted on the network, the authenticity of transaction entities, and the non-repudiation of signatures, thereby Ensure the security of network applications. [0003] Elliptic Curve Cryptography (Elliptic Curve Cryptography, ECC) is a high-security, high-efficien...

AI Technical Summary

Problems solved by technology

[0005] In view of the above deficiencies or improvement needs of the prior art, the present invention provides a review signature method and digital signature device based on the SM2 signature algorithm. , remote control, thus causing technical problems of user funds being stolen

Images