Signcryption method based from identity environment to certificateless environment

Abstract

The invention discloses a signcryption method based from identity environment to certificateless environment, and belongs to the field of secret communication. In order to enable a sending end based on the identity environment to be capable of utilizing the signcryption method for sending messages to a receiving end based on the certificateless environment, the method comprises the steps that systematic parameters are initialized, and then a private key generation center generates a private key SA and sends the private key SA to the sending end; a secret key generation center generates a partial private key DB and sends the partial private key DB to the receiving end; the receiving end randomly generates a secrete value based on the systematic parameters, and a complete secrete key SB and a public key PKB are set according to the secrete value and the partial private key DB; the sending end generates signcryption ciphertexts according to the systematic parameters, the identity and the private key SA of the sending end, and the identity, the public key PKB and messages m of the receiving end, the ciphertexts and the identity of the sending end are sent to the receiving end, and then unsigncrypt treatment is carried out on the ciphertexts and the identity of the sending end. The method is used for signcryption communication of a heterogeneous network, and the end-to-end confidentiality, integrity, authentication and non-repudiation service is provided for a user based on the identity environment and a user based on the certificateless environment.

Description

technical field [0001] The invention belongs to the technical field of secure communication, and in particular relates to a heterogeneous signcryption method in which a sending end belongs to an identity-based environment and a receiving end belongs to a certificate-free environment. Background technique [0002] Cryptography is an important tool to realize secure communication. The basic security services provided by the cryptographic system include confidentiality, integrity, authentication and non-repudiation. Confidentiality means that information is only available to authorized users and cannot be disclosed to unauthorized users. Integrity refers to the characteristic that information cannot be destroyed or lost by accidental or deliberate deletion, modification, forgery, replay, insertion, etc. during transmission or storage. Authentication is ensuring that a communicating party is who it claims to be. Confirming the identity of an entity is called entity authentica...

AI Technical Summary

Problems solved by technology

[0004] (2) Signcryption allows parallel computation of some expensive cryptographic operations

This method has the following two disadvantages: ① Before using any public key, it is necessary to verify the validity of the public key certificate, which increases the amount of calculation for the user; ② CA needs to manage a large number of certificates, including certificate issuance, storage, revocation, etc.

However, the identity-based cryptosystem has a fatal shortcoming: all users' private keys are generated by PKG

[0013] In 2010, Sun and Li proposed a heterogeneous signcryption scheme where one party belongs to the public key infrastructure environment and the other belongs to the identity-based environment [Sun Y, Li H. Efficient signcryption between TPKC and IDPKC and its multi-receiver construction.SCIENCE CHINA Information Sciences,2010,53(3):557-566.], but this scheme only satisfies external security (that is, the attacker cannot be the sender or the receiver), and such a scheme cannot provide denial

[0018] However, none of the above signcryption methods can be applied to communication problems where the sender belongs to an identity-based environment and the receiver belongs to a certificate-free environment.

Images