Method for generating digital signature by cooperation of double parties

Abstract

The invention discloses a method for generating a digital signature by the cooperation of double parties. The method comprises the following steps: a first device generates a random number k1 belongs to [1, n-1], calculates a point R1=k1*G on an elliptic curve according to an ECC algorithm, and sends a to-be-signed message m and the point R1 on the elliptic curve to a second device, the second device generates a random number k2 belongs to [1, n-1], calculates a point R2=k2*G on the elliptic curve according to the ECC algorithm, sings the to-be-signed message by using a second private key d2 to generate first signature information S1, and sends S1 and the R2 to the first device, and the first device performs digital signature on the combination of the to-be-signed message and the first signature information S1 by using a first private key d1 to generate complete signature information S2. By adoption of the method, the technical problem of relatively low digital signature security in the existing method can be solved, and the technical problem that a user needs to carry a hardware security device on body to lead to a high user cost and complex use is solved.

Description

technical field [0001] The invention belongs to the field of information security, and more specifically relates to a method for generating a digital signature through collaboration between two parties. Background technique [0002] At present, business systems mostly use the Public Key Infrastructure (PKI) system based on digital certificates to ensure business data security. Digital certificates are issued by self-built certification entities (Certificate Authority, CA) or third-party CAs. The public key cryptography mechanism with digital certificates as the core can encrypt and decrypt information transmitted on the network, digitally sign and verify, to ensure the confidentiality and integrity of messages transmitted on the network, the authenticity of transaction entities, and the non-repudiation of signatures , so as to ensure the security of network applications. [0003] In the PKI system with digital certificate as the core, the digital signature is independently ...

AI Technical Summary

Problems solved by technology

[0008] Aiming at the above defects or improvement needs of the prior art, the present invention provides a method for a client and a server to collaboratively generate a digital signature, the purpose of which is to solve the problem of digital signature security caused by a single party generating a signature in the existing method. Low technical problems, users need to carry hardware security devices with them, resulting in high user cost and high complexity of use, and the failure to provide a corresponding two-party collaborative digital signature mechanism for the SM2 or ECDSA digital signature algorithm Technical issues with narrow application

Images