Secret key application method based on SM9 algorithm

Abstract

The invention discloses a secret key application method based on an SM9 algorithm, and the method comprises the steps that a static secret key management center generates a static secret key of a user based on a user identification according to a secret key generation rule of the SM9 algorithm, and a dynamic secret key management center constructs a dynamic identification of the user through the user identification and a given dynamic change amount, and a dynamic key of the user based on the user dynamic identifier is generated; the user generates a static public key based on the static identifier of the communication opposite side, generates a dynamic public key based on the dynamic identifier of the communication opposite side, and realizes encryption or signature verification operation based on the static public key and the dynamic public key; a user acquires the static private key from the static secret key management center, acquires the dynamic private key from the dynamic secret key management center, and realizes decryption or signature operation based on the static private key and the dynamic private key. According to the key application method, an SM9 key security management mechanism based on SKGC and DKGC is provided, and the problems of key escrow, update and revocation of an SM9 algorithm can be solved.

Description

technical field [0001] The invention belongs to the technical field of key application, and in particular relates to an application method for generating a key based on an SM9 algorithm for encryption, decryption, signature, and verification. Background technique [0002] As an Identity-Based Cryptograph (IBC), SM9 has some shortcomings in key management compared with PKI cryptosystem. On the one hand, the user's private key is generated by the key generation center based on the user ID, which will result in the user not being the sole owner of the private key; on the other hand, since the user's key is generated based on the user ID, the user ID cannot be changed generally, resulting in Algorithm key update and revocation are difficult and need to be improved. Contents of the invention [0003] The purpose of the present invention is to provide a key application method based on the SM9 algorithm, provide a SM9 key security management mechanism based on SKGC and DKGC, whi...

AI Technical Summary

Problems solved by technology

On the one hand, the user's private key is generated by the key generation center based on the user ID, which will result in the user not being the sole owner of the private key; on the other hand, since the user's key is generated based on the user ID, the user ID cannot be changed generally, resulting in Algorithm key update and revocation are difficult and need to be improved

Images