A digital certificate-based anti-quantum computing digital signature system and signature method

Abstract

The present invention provides a digital certificate-based anti-quantum computing digital signature system and a signature method. The system includes a client and a CA organization deployed with a key management server; the key management server is based on ID cryptography for the CA organization and the client. Distribute keys so that in the root certificate and digital certificate issuance stage and digital signature stage, both the client and the CA authority can perform key negotiation with the objects communicated based on ID cryptography according to the distributed keys, so as to Quantum-computing-resistant secure communication for the entire digital signature process. The invention can realize the anti-quantum computing secret communication in the digital signature process without changing the overall process and data structure of the traditional CA and the digital certificate-based digital signature system, and without the need to store the key pool in the client. The key issuing server based on ID cryptography has different system public and private keys for each different user, which improves system security.

Description

technical field [0001] The invention relates to the field of digital certificates, in particular to a digital certificate-based anti-quantum computing digital signature system and a signature method. Background technique [0002] CA (Certification Authority) is the issuing authority of the certificate, which is the core of the public key infrastructure (PublicKey Infrastructure, PKI). A CA is an authority responsible for issuing certificates, certifying certificates, and managing issued certificates. The CA has a certificate (containing the CA public key). Public users on the Internet trust the CA by verifying the CA's signature, and anyone can get the CA's certificate to verify the certificate it issues. The format and verification methods of certificates generally follow the X.509 international standard. [0003] Digital signature, also known as public key digital signature, is a digital string that can only be generated by the sender of the information and cannot be fo...

AI Technical Summary

Problems solved by technology

[0006] 1. In the technical solution proposed by patent CN109861813A, the client needs to configure a quantum key card that stores the public keys of all members, which increases the storage cost and operational workload of the client key card, and the key management work of the client more complex;

[0007] 2. In the technical solution proposed by the patent CN109861813A, the overall process and data structure of the traditional CA and the digital signature system based on digital certificates are changed, for example, the format and usage of digital certificates are changed, and the CA and user application systems are switched to The cost of quantum-resistant computing solutions is too high

Images