A method and system for proxy re-encryption based on certificate condition

Abstract

The invention discloses a proxy re-encryption system on the basis of certificate conditions. The proxy re-encryption system comprises a system parameter setting module, a user key generation module, a certificate generation module, an encryption module, a proxy re-encryption key generation module, a proxy re-encryption module and a decryption module, wherein the system parameter setting module generates a system master key and system public parameters; the user key generation module generates public keys and private key pairs of various users; the certificate generation module endorses the identity of the users and the public keys and generates certificates of the users; the encryption module is used for encrypting messages and transmitting the messages to the decryption module and the proxy re-encryption key generation module; the proxy re-encryption key generation module generates proxy re-encryption keys and transmits the same to the proxy re-encryption module; the proxy re-encryption module re-encrypts original cryptographs to generate re-encryption cryptographs to be transmitted to the decryption module; the decryption module restores corresponding plaintexts. The invention further discloses a proxy re-encryption method on the basis of certificate conditions. On the premise of guaranteeing safety of the system, the original cryptographs can be flexibly subjected to proxy re-encryption, and rights of proxies are strictly controlled.

Description

technical field [0001] The invention relates to a data encryption technology for network security, in particular to a safe certificate-based conditional proxy re-encryption system and method, belonging to the field of information security. Background technique [0002] With the rapid development of information technology, there are many unsafe factors in file transmission and e-mail business dealings on the Internet, especially for some large companies and the transmission of some confidential files on the network. Pay attention to. Data encryption technology is the core and key technology to ensure the confidentiality of electronic data. It converts data into meaningless ciphertext through encryption keys and encryption algorithms, thereby preventing data from being accessed by unauthorized persons and effectively ensuring data confidentiality. sex. [0003] Decryption authorization is often encountered in real society. For example, a bank department manager applies for ...

AI Technical Summary

Problems solved by technology

Therefore, the certificate-based cryptosystem is a new type of public-key key system with excellent performance and easy to apply in an open network environment, but the management process of certificates is relatively complicated, and there is a problem of not simplifying

Images