An implementation method of certificateless public key cryptosystem based on elliptic curve

Abstract

The invention discloses an implementation method of a certificateless public key cryptosystem based on an elliptic curve, which is used for solving the problems of system establishment, user key generation and use under the certificateless cryptosystem. In the present invention, the key generation center determines system parameters and publishes them. Then, the user submits an application to thekey generation center based on the randomly selected secret value, and the key generation center randomly generates a user partial private key based on the system master private key and the application information and returns the user partial private key, and finally the user calculates the actual private key and the partial public key based on the partial private key. In use, other users first get the actual public key based on the user identity and partial public key restoration, and then calculate according to the standard cryptographic algorithm. The invention effectively avoids the use problem of the certificate, can realize the binding of the user identification and the public key, and ensures that only the user can know the private key. The invention has the characteristics of highcomputational efficiency, strong security and the like, and can be applied to various standard elliptic curve cryptographic algorithms without changing the algorithm logic.

Description

technical field [0001] The invention belongs to the technical field of information security, and relates to a method for realizing a cryptographic system, in particular to a method for realizing a certificateless public key cryptosystem based on elliptic curves. Background technique [0002] With the rapid development of information technology, the traditional certificate-based public key cryptosystem (PKI) has been widely used. However, with the emergence of new network environments such as mobile communication networks, wireless sensor networks, and the Internet of Things, it is difficult for the PKI system to meet the environmental requirements due to its large resource overhead. In order to avoid certificate management and use problems, Shamir proposed identity-based public key cryptography (IBC) in 1984; Al-Riyami and Paterson proposed certificateless public key cryptography (CLPKC) in 2003. In contrast, the IBC system has the following problems: 1) The user completely...

AI Technical Summary

Problems solved by technology

In contrast, the IBC system has the following problems: 1) The user completely trusts the key generation center KGC, and the user's private key is generated by the KGC alone. It is difficult to prevent the KGC from forging the user's signature, and there is a key escrow problem; 3) The user ID and the user private key have a unique binding relationship, so it is difficult to support the key update and revocation mechanism

[0004] So far, scholars at home and abroad have proposed dozens of certificateless public key encryption schemes, but most of them have the following three problems: 1) the use of bilinear pairing structure leads to low operating efficiency and complex algorithms; 2) the use of special The signature or encryption mechanism is difficult to be compatible with standard cryptographic algorithms, resulting in reduced applicability of the scheme; 3) Only part of the public key cryptography function is available, some schemes only support the signature mechanism, and some schemes only support the encryption mechanism, resulting in relatively large usage scenarios

Images