Supervisable anonymous authentication method based on zero knowledge proof

Abstract

The invention discloses a supervisable anonymous authentication method based on zero knowledge proof, comprising three types of participants: a CA, a user and a verifier, wherein the CA generates an issuer key pair and a group key, the CA allocates a pair of private keys to the user during registration of the user, and meanwhile the CA issues a relevant certificate to the user according to the attribute information submitted by the user; when the user presents the certificate, the verifier specifies an attribute that needs to be presented on the certificate of the user, and the user signs thecertificate and hides attribute values that do not need to be presented; and the verifier verifies the signature, if the signature passes the verification, the certificate presented by the user is valid, or otherwise, the certificate presented by the user is invalid. By adoption of the supervisable anonymous authentication method disclosed by the invention, the anonymity of the user is also ensured while increasing a mandatory supervision function, thereby greatly improving the identity privacy of the user compared with the general identity supervision scheme. By adoption of the supervisable anonymous authentication method disclosed by the invention, a supervisable function is also added.

Description

technical field [0001] The invention relates to a supervised anonymous authentication method based on zero-knowledge proof. Background technique [0002] Traditional identity authentication technology is mainly used for users to prove to the verifier that they are legitimate users, and can be widely used in communication, finance, social networking and other fields. However, the existing authentication technology does not consider the issue of user identity privacy protection. During authentication, users may over-expose their own information, resulting in information leakage or theft. Therefore, it is necessary to use anonymous authentication technology to protect the identity privacy of users. [0003] Anonymous authentication technology mainly uses cryptography to ensure the privacy of users. For example, the Identity Mixer scheme proposed by IBM provides an anonymous authentication method, and users can choose to present attributes independently during authentication. A...

AI Technical Summary

Problems solved by technology

[0004] In order to overcome the above-mentioned shortcomings of the prior art, the present invention provides a supervised anonymous authentication method based on zero-knowledge proof. Aiming at the problem of excessive exposure of user identity and attribute information in the traditional authentication system, the technical means of anonymous authentication is used to protect the identity of the user. Identity privacy, while adopting a flexible authentication strategy, so that users can choose to present the attributes in the certificate to avoid excessive exposure of information; in view of the problem that cannot be supervised in anonymous authentication, combined with the technical means of group signature, CA can supervise the user's identity information , to avoid the occurrence of untrustworthy behavior

Images