Double-threshold signature method based on ECDSA

Abstract

The invention discloses a dual-threshold signature method based on ECDSA. An asymmetrically encrypted main private key is divided into n groups, and each group has m grandson private keys. In any t groups, any u grandson private keys in each group are subjected to security calculation, one piece of information can be electronically signed, and the result is the same as the result obtained by directly signing the information with the main private key. However, if the number of the grandson private keys participating in calculation in a certain group is less than u or the number of groups participating in calculation is less than t, a correct signature result cannot be obtained. In addition, in the scheme proceeding process, no person can obtain the mother private key of the system or the child private key representing any group. In the method, n, m, t and u are self-defined parameters, and a user can set the parameters by himself / herself according to his / her own needs. According to theinvention, the application scene of the single-layer threshold signature is expanded, and the security is improved.

Description

technical field [0001] The invention relates to the field of electronic information security, in particular to an ECDSA-based double-threshold signature method. Background technique [0002] Nowadays, more and more Internet services are based on electronic signatures of asymmetric encryption algorithms to verify user identities, such as the transfer of a certain amount of funds. The common threshold signature scheme is suitable for the following scenarios: a certain right needs to be managed by n individuals, but for security reasons, it is impossible to obtain the right even if any (t-1) of them are required to communicate privately. However, such a solution cannot meet more complex equity management scenarios. For example, a certain equity needs to be managed by n organizations, and any (t-1) organizations cannot obtain the equity if they are required to have private relationships; For security reasons, it is necessary to entrust the rights representing the organization t...

AI Technical Summary

Problems solved by technology

The common threshold signature scheme is suitable for the following scenarios: a certain right needs to be managed by n individuals, but for security reasons, it is impossible to obtain the right even if any (t-1) of them are required to communicate privately

However, such a solution cannot meet more complex equity management scenarios. For example, a certain equity needs to be managed by n organizations, and any (t-1) organizations can not obtain the equity if they are required to have private relationships; For security reasons, it is necessary to entrust the rights and interests representing the organization to m members for management, and any (u-1) members among them cannot obtain the rights and interests representing the organization

In addition, some existing threshold algorithms temporarily restore the main private key during the generation of the sub-private key or during the signing process, or require a trusted center, which greatly reduces the security of the entire scheme. needs to be optimized

Images